隱私權政策 Privacy Policy

Overview 概述

TCU Power Training Room (TCU 功率訓練教室) takes your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information and cycling activity records when you use our platform. By using TCU Power Training Room, you agree to the information practices described in this policy. We are committed to transparency and giving you full control over account information.

Information We Collect 我們收集的資訊

Strava Account Information

When you authenticate using Strava OAuth 2.0, we receive your Strava user ID, display name, and profile photo. We do not store your Strava password. Authentication tokens are encrypted and stored securely in our database. We only request the minimum necessary permissions to provide our training analytics services.

Cycling Activity Records 騎乘活動數據

With explicit authorization, we read your Strava activity records including power meter readings, heart rate metrics, GPS route coordinates, ride duration, distance, elevation, cadence, and speed. This information is used exclusively to generate training analysis reports including PMC Performance Management Chart, FTP Functional Threshold Power trends, MMP Mean Maximal Power curves, and power zone distribution analysis.

Usage Analytics 使用行為數據

We use Google Analytics 4 to collect anonymized website usage statistics such as page views, session duration, and feature usage patterns. These metrics help us improve the platform experience. Google Analytics data is anonymized and does not include personally identifiable information. You can opt out using standard browser privacy controls.

How We Use This Information 資料使用方式

Cycling activity records are used solely for the following purposes: generating personalized power analysis reports including PMC CTL ATL TSB tracking, FTP trend analysis, MMP power curve modeling, and seven-zone power distribution charts; AI intelligent coach training recommendations and fitness assessments; GoldenCheetah advanced metric calculations including W prime balance W bal, Critical Power CP model, Efficiency Factor EF, and Normalized Power NP; ride segment comparison and progress tracking over time.

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your training data belongs to you.

Data Security 資料安全

We implement multiple layers of security to protect all stored information. All transmission uses HTTPS TLS encryption. Database access is protected by strict permission controls and role-based access policies. Strava OAuth tokens are stored encrypted, never in plain text. We conduct regular security audits and access log reviews. Our infrastructure is hosted on Supabase with enterprise-grade security standards.

Third-Party Services 第三方服務

TCU Power Training Room uses the following third-party services: Strava API for cycling activity data source, governed by Strava API Agreement and Strava Privacy Policy; Google Analytics for anonymous usage statistics; Supabase for database and backend infrastructure services. Each third-party service has its own privacy policy which we encourage you to review.

Your Rights 您的資料權利

You have the following rights regarding your data. Right of Access: you can view all data associated with your account at any time. Right to Revoke: you can revoke TCU's access to your Strava data at any time through your Strava account settings under Authorized Applications. Right to Deletion: you can request deletion of all your data by submitting a request through our GitHub Issues tracker. Right to Portability: you can request an export of your analysis data. All requests are processed within 30 days.