Ahead – Privacy Policy
Effective: 16 November 2026
Controller: Mateusz Wolski, e-mail: mateuszwolski4@gmail.com.
In short
- Ahead runs on your phone. There are no user accounts, no analytics, no ads and no tracking.
- Your routes, points, settings and data from connected services stay on your phone.
- To show weather, the map and places, the app asks outside services for data – sending only what they need to answer (parts of the route and times), never your name, e-mail or an identifier.
What stays on your phone
- Loaded routes (GPX files or routes from Ride with GPS / Strava), start, pace, stop plan, your points.
- App settings.
- Downloaded forecasts, places and offline maps (cache).
- If you connect Strava or Ride with GPS: the access token (in the system's secure storage), a list of your long rides and their analysis (pace, stops). Disconnecting the account deletes these from the phone.
- GPS location: used only while the app is open and you turn on “my location” or ride mode – to show you on the route. It is neither stored nor sent anywhere.
Deleting the app deletes all of this.
What the app sends, and to whom
| To | What | Why |
|---|---|---|
| Open-Meteo (open-meteo.com) | Coordinates of points every ~10 km of the route and a date range | Weather forecast for your arrival time |
| Cloudflare R2 (our file host) | Which map squares (about 5 × 5 km) lie along the route | Places with food, water and shelter |
| OpenFreeMap (openfreemap.org) | Map tiles you view or download for offline use | Showing the map |
| Strava / Ride with GPS | Only if you connect your account: you log in on their site; the app fetches your routes and rides from there | Importing routes, pace from your rides |
| Cloudflare (our login function, Cloudflare Workers) | The login code from Strava / Ride with GPS, exchanged for a token; nothing is stored | Secure login (the app's secret cannot live on the phone) |
Like any server on the internet, each of these services sees your phone's IP address and keeps it in its own logs under its own privacy policy. We do not link this to any user identifier.
Crash reports: if you allowed sharing with app developers in your phone's settings, Apple passes us anonymous crash reports.
Legal basis and your rights (GDPR)
We process data only to make the app work (Art. 6(1)(b) and (f) GDPR). As we keep none of your data on our servers, you exercise most rights (access, erasure) on your phone: delete a route, disconnect an account or delete the app. Questions: mateuszwolski4@gmail.com. You may lodge a complaint with your data protection authority (in Poland: the President of the Personal Data Protection Office, UODO).
Children
The app is not directed at children under 16.
Changes
We announce changes to this policy in an app update; the current version is always at this address.