Privacy
Seraq is training software for cycling. It reads your rides, builds your plan and adjusts it. This page explains what it keeps of your data, what it does with it, who receives it, and what you can demand. The French version is the reference.
Who is responsible
The data controller is Louis Touquet, in France. For any question or request: [email protected].
During the beta
The Seraq beta is open to everyone: anyone can create an account, up to 100 accounts; beyond that, a waiting list, opened in stages. Nothing is sold. Seraq is preparing a two-part offer, one free, one paid. What follows applies to both: the paid offer will only add payment data, handled by a payment provider, and this page will be updated beforehand.
During the beta, Seraq is for adults only: you must be 18 or older to open an account.
The waiting list keeps only your email address and the date you joined, nothing else. It is erased when your account opens, or as soon as you ask.
What Seraq keeps
- Your account: your name, email address, date of birth, sex, height; your availability and your equipment.
- Your rides: each original file, as is — power, heart rate, cadence, speed, altitude and, if present, the GPS track.
- What you tell it: your goals, how you felt, your answers, your notes, an injury or an impediment, your sleep.
- What the services you connect send, with your consent: your rides and, depending on the service, your weight, resting heart rate and heart rate variability.
- What Seraq computes: your load, your records, your values, your plan, and the reason for each of its decisions.
This data is necessary for the service: without it, Seraq can neither analyse your rides nor build your plan.
Your heart rate, heart rate variability, sleep, weight and any injury are health data. Seraq only processes them with your explicit consent, given when your account is opened, on a screen that says which data and why; nothing is pre-ticked. Without this consent, Seraq cannot coach you and your account is not opened. You withdraw it by deleting your account. Everything else is processed because it is necessary for the service you ask for.
What Seraq does with it
Seraq uses it for one thing only: your training — analysing your rides, building and adjusting your plan, explaining why.
- Seraq does not sell your data and shows no advertising.
- It shares it with no one except the providers listed below, to run the service.
- It sends it to no artificial intelligence model: its decisions come from written rules, which it explains to you.
- It only writes to a connected service what you asked for: the planned workouts sent to your bike computer.
- Your data is used to improve Seraq's calculations or for statistics only if you accept it in your settings; this is off by default, and Seraq works the same way without it.
Automated decisions
Seraq builds and adjusts your plan automatically, from your data and written rules. These are training suggestions with no legal effect: each one carries its reason, and you remain free to keep the planned workout or choose another.
Who receives it
- Oracle Cloud hosts the server, the database and your files, in Frankfurt, Germany, in the European Union.
- Cloudflare relays all traffic between your device and Seraq, serves its pages and receives the files you send by email; like any host, it sees your IP address.
- Backblaze keeps, in Amsterdam, the Netherlands, in the European Union, a backup copy of the database and of your files, encrypted by Seraq before it is sent: Backblaze cannot read it.
- The services you connect (Garmin, Wahoo, Polar, Hammerhead, COROS, intervals.icu, Dropbox): Seraq reads your data there with your authorisation, which you can withdraw at any time, in Seraq or with the service.
- Weather (Open-Meteo) receives a position rounded to about one kilometre, never the first or last kilometre of a ride, never your name or an identifier.
- Elevation (IGN, in France) receives the line of a route, without your name or an identifier.
- Maps (OpenFreeMap): your browser requests the map tiles of the area shown; your track is never sent there.
Oracle, Cloudflare and Backblaze are American companies; any transfer outside the European Union is covered by the safeguards provided by the European regulation: the EU–US Data Privacy Framework, or the European Commission's standard contractual clauses.
How long
- Seraq keeps your data as long as your account exists: it deletes nothing on its own. That is what lets it reread your whole history.
- You delete your account whenever you want, in your settings: after a 7-day delay to let you cancel, everything is erased — data, files, authorisations — and nothing can be restored. It also leaves the backup copies, within 35 days at the latest.
- When you disconnect a service, its authorisation is erased at once; the rides already received remain yours, until you delete them.
- If a service requires the deletion of what it sent, Seraq complies, tells you, and gives you those files first.
Your rights
You can access your data, correct it, erase it, restrict its use, object to it, withdraw your consent, and take it with you: the export, in your settings, gives you a complete archive, original files included, in open formats. Withdrawing your consent does not affect what was done before. For any other request, write to [email protected]: you will get an answer within one month. You can also complain to the French data protection authority, the CNIL (cnil.fr).
Security
Your data is encrypted in transit and at rest; your password is never stored in clear. In the event of a breach of your data, the CNIL is notified within 72 hours, and you without delay if it puts you at risk.
Cookies
Seraq sets a single cookie, the one that keeps you signed in. No analytics or advertising cookies.
Changes
Each version of this page carries its date. If a change affects what Seraq does with your data, you are told before it applies.