Last Updated: October 31, 2025
Engelbaher, LLC ("we," "us," or "our") operates the Zora Cycling mobile application (the "App").
Your privacy is our top priority. Zora Cycling is designed to function entirely offline, without collecting, storing, or transmitting your personal data to any external servers or third parties.
Zora Cycling processes fitness and sensor data solely for the purpose of providing indoor cycling training, simulation, and performance tracking on your device.
We do not operate a cloud backend or external database. All data processing occurs locally on your iPhone and, if used, your Apple Watch.
We do not collect, transmit, or store any personal information on external servers, third-party systems, or infrastructure we control.
All data processing and storage occur exclusively on your device.
Specifically, we do NOT:
Zora Cycling connects to compatible Bluetooth-enabled devices such as indoor cycling trainers, sensors, heart-rate monitors, and other fitness accessories.
These connections allow the App to receive or send performance and fitness-related data for workout tracking and simulation.
The App may transmit control signals (e.g., target power, simulated gradient, or resistance changes) to connected devices to enable realistic simulation or structured workouts.
This communication:
No Bluetooth data or identifiers are transmitted to the internet or any external system.
During Bluetooth pairing, your device and connected accessory exchange technical identifiers (such as temporary MAC addresses and device names) required by the Bluetooth protocol.
These identifiers:
The App may remember your paired device identifier locally to enable automatic reconnection. This identifier remains stored only within the App's sandbox.
In future versions, the App may allow connection to compatible Bluetooth heart-rate monitors, headphones, or other fitness sensors and accessories.
Any fitness or health-related data (such as heart rate, power, cadence, or speed) received or transmitted between these connected devices:
All such data routing occurs exclusively within your personal devices using Apple's Bluetooth or HealthKit frameworks and does not involve any external network transmission.
Zora Cycling optionally integrates with Apple Health (HealthKit) to read and write cycling metrics for your convenience. All HealthKit data access occurs locally on your device.
We never receive, store, or transmit HealthKit data.
With your explicit permission, the App may read:
These data are read only to display workout history and performance summaries inside the App. Data are processed locally and never leave your device.
With your permission, the App may write:
This ensures your workouts contribute to Apple Fitness, Activity Rings, and Health trends.
If you use Apple Watch with Zora Cycling, HealthKit securely mirrors workout session data (such as heart rate and elapsed time) between your iPhone and Watch using Apple's encrypted Bluetooth protocols.
We never see or access mirrored data between these devices.
Once data is stored in HealthKit or iCloud, Apple becomes the data controller.
Apple Services Privacy Policies:
Engelbaher, LLC and this App are not affiliated with Apple Inc. All Apple services are governed by Apple's respective terms and privacy policies.
You can review or revoke Health permissions at any time:
Settings → Privacy & Security → Health → Zora Cycling
Revoking read or write access only limits HealthKit functionality; the App will continue working locally.
Heart-rate, energy expenditure, and similar metrics qualify as special-category health data under certain privacy laws.
These data:
The App stores the following categories of data locally:
Workout Session Data
Performance Analytics
User Preferences
No demographic information, contact details, or location data are stored.
All data is stored exclusively within the App's sandbox, encrypted by iOS.
We do not use cloud storage or remote databases.
If iCloud Backup is enabled, iOS may include App data in your encrypted iCloud backup.
If you back up your device locally using Finder or iTunes, the App's data will also be included in that encrypted backup.
All backups:
To delete data:
Deleting the App permanently removes all locally stored workouts and settings. This data cannot be recovered.
Workouts already written to Apple Health must be deleted within the Health app.
The App does not include or communicate with any third-party frameworks or analytics SDKs such as Firebase, Google Analytics, Facebook SDK, or ad networks.
All code is built with Apple's native frameworks (SwiftUI, CoreBluetooth, HealthKit, and Foundation).
Zora Cycling does not include custom crash-reporting or analytics frameworks.
If you have enabled "Share iPhone Analytics" in iOS Settings → Privacy & Security → Analytics & Improvements, Apple may collect anonymized crash logs.
These reports:
We may review aggregated, anonymized crash summaries provided by Apple solely to improve app stability.
Zora Cycling does not collect personal information from anyone, including children under 13 (or under 16 in the EEA).
All data remains stored locally on the user's device or within their Apple Health database.
Parents or guardians control HealthKit permissions and iCloud sync on their child's device.
While the App does not transmit or store your data remotely, we take on-device security seriously.
To keep your data secure:
If you discover a potential security vulnerability, contact us at privacy@engelbaher.com.
You may access, correct, or delete your data directly on your device or in Apple Health.
We do not act as a "data controller" because we never receive or process your personal data externally.
For HealthKit data stored in iCloud, contact Apple:
https://www.apple.com/legal/privacy/contact/
We do not "collect," "sell," or "share" personal information under CCPA definitions.
This Privacy Policy is designed to comply with GDPR, CCPA, PIPEDA (Canada), and the Privacy Act 1988 (Australia).
Because all processing is local to your device, data transfer provisions do not apply.
Zora Cycling is a fitness training and simulation tool, not a medical device.
It is not intended to diagnose, treat, cure, or prevent any disease.
Consult a qualified healthcare provider before beginning any new exercise program.
During exercise, stop immediately if you experience chest pain, dizziness, or severe shortness of breath.
All metrics (heart rate, power, calories, etc.) are estimates and may vary in accuracy.
We may update this Privacy Policy if required by new features, legal obligations, or platform guidelines.
If a future version introduces any networked features or remote data processing, we will update this policy before release and request user consent.
The updated version will be posted within the App and on our website.
Your continued use of the App constitutes acceptance of any updates.
If you have any questions about this Privacy Policy, please contact:
Email: privacy@engelbaher.com
Website: https://engelbaher.com
We will review and respond to inquiries as soon as reasonably possible.
This Privacy Policy is governed by the laws of the State of Washington, United States, without regard to its conflict-of-law provisions.
Subject to mandatory local consumer-protection laws in your jurisdiction, disputes arising under this Privacy Policy may be resolved in the state or federal courts located in King County, Washington, USA.
Nothing in this section limits your statutory rights under the laws of your country of residence, including rights under the GDPR or other applicable privacy regulations.
In plain language:
Engelbaher, LLC https://engelbaher.com
Last Updated: October 31, 2025