Account and Data Deletion — Cyclora
This page explains how to request the deletion of your Cyclora account and associated data, in compliance with Google Play, Apple App Store, GDPR (EU), and equivalent regulations.
Application: Cyclora (app.cyclora.mobile)
Developer: Cyclora
Contact: [email protected]
1. How to request deletion
You have two equivalent paths. Either one works.
Option A — From the app
- Open the Cyclora app.
- Go to Profile → Settings → Account.
- Tap Delete account.
- Confirm with your password or the sign-in method you use (Apple ID, etc.).
- You will receive a confirmation email once deletion is complete.
If the option isn’t visible yet in your installed app version (gradual rollout), use Option B.
Option B — By email
- Send an email to [email protected] from the address associated with your account.
- Use the subject line:
Delete account — [your email] - Include in the body:
- Your registered Cyclora email address.
- (Optional) The reason — we use it only to improve the product, never to hold onto your account.
- You will receive a confirmation reply within 72 business hours.
- Full deletion is processed within 7 calendar days of the confirmation.
2. What data is deleted
The request permanently deletes the following data:
- Your profile (first name, last name, email, phone number, identification number).
- Your registered bicycle(s) (models, photos, components, maintenance history, warranties).
- Your routes, GPS tracks, and activities recorded from the app or synced from Strava.
- Your photos and documents uploaded to Cyclora (including profile picture and bike attachments).
- Your active subscriptions to race, team, or rider notifications (within the Cycling Data module).
- Your push notification tokens and linked devices.
- Your third-party service connections (Strava, Apple Sign-In) — OAuth tokens are revoked.
- Your internal unique identifier (UUID) and any saved configuration preferences.
3. What data is retained (and why)
Some data must be retained by legal obligation or to prevent abuse. It is never used to contact you after deletion.
| Data | Retention | Legal basis |
|---|---|---|
| Billing records (if you had paid purchases or subscriptions) | 10 years | Colombian Tax Statute (Art. 632, DIAN) / equivalents in MX, CL |
| Access logs and security audit trails | 6 months | Law 1273 of 2009 (CO) — cybercrime |
| Anonymized crash logs (Sentry) | 90 days max | Operational debugging — no identifiable PII after deletion |
| Email hash (to prevent abusive re-registration with the same address after a ban) | Indefinite if account was banned for abuse | Fraud prevention / platform security |
All retained data is encrypted at rest and isolated from production systems used for active users.
4. Timelines
| Step | Time |
|---|---|
| Request received → email confirmation | ≤ 72 business hours |
| Confirmation → full deletion across active systems | ≤ 7 calendar days |
| Backup rotation purge | ≤ 90 days after active deletion |
| Anonymized log / audit trail expiry | Per retention schedule (6 months / 90 days) |
If you have not received confirmation after 30 days, email [email protected] again with subject “Deletion follow-up — [your email]“.
5. Partial data deletion without closing your account
You can request deletion of specific data without closing your account. For example:
- Delete a single bicycle and its photos → Garage → [bike] → Delete.
- Delete a GPS route / track → Cycling → Routes → [route] → Delete.
- Revoke Strava connection → Profile → Linked accounts → Strava → Disconnect.
- Disable GPS tracking / photos / contacts → remove the permission in your device system settings (iOS / Android).
- Request correction or data portability → email [email protected] with the appropriate subject.
6. Post-deletion state
Once your account is deleted:
- You will no longer receive marketing emails or push notifications.
- You no longer appear in rankings, leaderboards, or any social feature that used your profile.
- Your public posts or comments (if any) are anonymized with the alias
deleted-userand lose the link to your identity. - You can re-register with the same email address after 30 days (unless the account was closed for terms-of-service violations).
7. Complaints and regulatory authorities
If you believe we have not fulfilled your request adequately:
- Colombia → Superintendencia de Industria y Comercio (SIC): https://www.sic.gov.co
- Mexico → INAI: https://home.inai.org.mx
- Chile → Consejo para la Transparencia: https://www.consejotransparencia.cl
- EU (GDPR) → data protection authority of your country.
- California (CCPA/CPRA) → California Privacy Protection Agency: https://cppa.ca.gov
You can contact them directly; you are not required to go through Cyclora first.
8. Questions
For any question about this process email [email protected] or check our full Privacy Policy.