Privacy Policy

Last updated: 14 September 2026

loop4d helps runners, cyclists and hikers plan when to go out on a route for the best shade, sun and wind. Route analysis runs on your own device, and the app stores as little about you as its features need.

Using loop4d without an account

No sign-in required. Analysing a GPX file, whether you open one from your device or import it through the share sheet, needs no account. In this mode we collect no name, email, location history, contacts or device identifiers, and the app runs no analytics or advertising trackers.

Your route files

When you open or import a GPX route, it is read and analysed locally on your device. Route files are not uploaded to us or stored on our servers. A route you save for reuse is stored only on your device.

Accounts and Sign in with Apple

To connect Strava you first create a loop4d account with Sign in with Apple. We receive and store the email address Apple provides (which can be a private relay address) and Apple's user identifier for your account. We use them only to identify your account, never for advertising, marketing or tracking.

Your account and everything listed under "What we store with an account" is held by Supabase, our database provider, in the EU (Ireland), acting as our data processor.

Connecting Strava

Connecting Strava is optional. You authorise loop4d through Strava's own login (we never see your Strava password). We request read-only access to your routes and activities, including private ones: Strava's read, read_all and activity:read_all permissions. Strava issues access tokens, which we store so you don't have to reconnect. We use them to:

• list your routes and activities, and download a route's GPX file or an activity's GPS track when you open it. The file goes to your phone and is not kept on our servers;
• read your activity list when you scan your history, so your phone can work out which countries each activity was in;
• check whether a newly uploaded activity has a GPS track, before sending you a notification about it.

We never post to or change your Strava account. Your use of Strava remains subject to Strava's privacy policy.

What we store with an account

• Account: your email address and Apple user identifier.
• Strava connection: your Strava athlete ID and the access and refresh tokens.
• Countries: for each activity from a history scan or an analysis, the country it was in (more than one if it crossed a border), the Strava activity ID, its date, distance and sport type. For activities you analyse, also the share of the activity in sun and the day's peak temperature. This is what draws your map, your history and the country awards.
• Analysed activities: for each activity you analyse in the app, its date, distance and sport type, the share in sun, the lowest and highest temperature and the rain while you were out, the share into a headwind and its average speed, and the share after dark. This is what counts your loops and decorates your share card.
• Notification token: if you allow notifications, your device's Apple push token, so we can tell you when a new Strava activity arrives. The notification says only that your activity is in.

We don't store activity names, GPS tracks, GPX files or photos on our servers.

Data the app requests from other services

To compute shade, sun, weather and borders, the app fetches public data. These requests include map coordinates of the route or activity being analysed, but no account details or other personal identifiers:

• Elevation and terrain: AWS Open Data (Terrarium tiles).
• Map tiles: OpenFreeMap.
• Trees, buildings and country borders: OpenStreetMap data, requested through our own service at geo.loop4d.com (run on Cloudflare). It forwards requests to public Overpass servers operated by third parties: maps.mail.ru (VK, Russia), overpass.private.coffee and overpass.osm.ch (Switzerland). It caches the answers by map area or coordinate, with nothing identifying you attached. If our service is unreachable, the app asks those servers, or overpass-api.de (Germany), directly.
• Weather forecast and history: Open-Meteo.
• Fonts: Google Fonts.

Each provider processes those requests under its own privacy policy. We don't link these requests to your account.

On your device

The app keeps some data only on your device: cached map tiles and results so it loads quickly, saved routes, your preferences, and the progress of a history scan so it can carry on where it stopped. Removing the app deletes it.

Deleting your data

You can delete your account at any time from the Profile screen in the app. This revokes loop4d's Strava access and permanently deletes your account, email, Strava tokens, notification tokens, country records and analysed-activity records. It cannot be undone.

If you only disconnect loop4d in your Strava settings, we delete the Strava tokens but keep your account and records until you delete the account.

This website (loop4d.com)

This website uses Google Analytics 4 to count visits, but only if you agree. Analytics stays off until you tap "OK" in the consent banner; if you decline or ignore it, no analytics script loads and no analytics cookies are set. Your choice is stored in your browser, and clearing this site's data resets it. If you consent, Google processes visit data (pages viewed, approximate region, device type) under Google's privacy policy. The app contains no analytics.

Children

loop4d is a general-audience app and is not directed at children.

Changes

If this policy changes, we'll update this page and the "last updated" date above.

Contact

Questions about privacy? Email hello@loop4d.com.