KARTA ("we", "us", "our") operates karta.club and related services for indoor Zwift route recommendations and outdoor loop generation. This policy explains what data we collect, why we collect it, and the choices you have.
Information we collect
- Account data — email address, name, and password when you create an account. If you sign in with Strava, we receive your athlete profile from that provider.
- Waitlist — email address if you join our early-access list on the landing page.
- Route preferences — quiz answers (time, level, goal) and saved routes when you use the app.
- Strava data — if you connect Strava, we access segments and routing data needed to generate outdoor loops. We store OAuth tokens securely to keep your connection active.
- Location — map pin or device location when you generate outdoor routes or use GPS Art features.
- Usage data — basic logs such as pages visited, feature usage, and error reports to keep the service reliable. Analytics cookies are only used if you accept them in our cookie banner.
How we use your information
We use your data to:
- Provide route recommendations and generate GPX files
- Create and manage your account
- Save routes to My Routes
- Send transactional emails (welcome, account-related, account deletion confirmation)
- Send product updates if you joined the waitlist or opted in
- Improve KARTA and fix bugs
We do not sell your personal data.
Third-party services
KARTA relies on trusted providers to run the platform:
- Supabase — authentication and database hosting
- Strava — segment data and optional activity upload (only if you connect)
- Google Maps / Routes / Roads — mapping and road routing for outdoor features
- Resend — transactional email delivery
- Vercel — hosting and optional privacy-friendly analytics (only with your consent)
Each provider processes data under their own privacy policies. We only share what is necessary to deliver the feature you use.
Data retention
We keep your account data while your account is active. You can delete saved routes at any time. If you disconnect Strava, associated tokens are removed.
You can export your data or permanently delete your account from Settings.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Use Settings → Download My Data or Delete My Account, or email us and we will respond within a reasonable timeframe.
Security
We use industry-standard measures including encrypted connections (HTTPS), secure token storage, and access controls. No method of transmission over the internet is 100% secure.
Children
KARTA is not directed at children under 16. We do not knowingly collect data from children.
Changes to this policy
We may update this page from time to time. Material changes will be posted here with an updated date.
Contact
Questions about privacy? Email hello@karta.club or visit our Contact page.