Last updated: May 28, 2026
1. Introduction
This Privacy Policy explains how Volero — a cycling app developed by Valinor Labs — handles your data. Volero is built on a single core principle: your personal data stays on your device and in your personal iCloud account. Valinor Labs has no servers, no user accounts, and no access to your rides, routes, bikes, or maintenance records. We do not track you across apps or websites, we do not embed analytics or advertising SDKs, and we do not share or sell your data with anyone.
This policy describes the categories of data Volero processes, why it processes them, how they are stored, and what rights you have under the EU General Data Protection Regulation (GDPR) and comparable data-protection laws.
2. Data Controller
The data controller responsible for the processing of personal data in connection with this App is:
Nader Grebe
Email: contact@valinorlabs.de
Website: https://valinorlabs.de
3. Data We Process
Location Data
While you record a ride, Volero uses your iPhone's GPS to capture your route as a series of latitude/longitude points, plus speed, altitude, and timestamps. To prevent gaps when the screen locks or you switch apps, location updates continue in the background only while a ride is actively being recorded. Outside an active recording, Volero only requests a single, one-shot location fix to centre the map and display the current altitude — no continuous background tracking happens.
Location data is stored exclusively on your device through Apple's SwiftData framework.
Apple Health Integration (Optional)
If you enable the "Send workouts to Apple Health" toggle in Settings, Volero writes each completed ride to the Apple Health app as a Cycling workout, including distance, elevation gain, average and maximum speed, and the recorded GPS route. Volero only writes — it never reads any data from Apple Health. The toggle is off by default. You can revoke access at any time in iOS Settings → Privacy & Security → Health → Volero.
Ride Data
Each ride consists of the location data described above plus derived statistics (duration, average speed, elevation gain/loss, max climb and descent grade) and optional metadata you provide yourself (ride name, favourite status, start/destination address obtained via Apple's reverse-geocoding service). All ride data lives on your device and in your private iCloud.
Bike Data
You may add bikes to Volero with optional details such as name, brand, model, model year, frame size, frame number, colour, weight, gears, drivetrain, brake type, tire model, purchase date, purchase price, dealer, notes, an initial mileage and a photo selected from your photo library. Maintenance entries (type, date, odometer reading, cost, notes) are attached to a bike. All of this is stored on your device and your private iCloud.
Saved Routes
Routes you plan and explicitly save through the planning sheet are stored on your device and your private iCloud with the name you choose, plus their waypoint coordinates and elevation data.
App Preferences
Your preferences (appearance mode, unit system, currency symbol, Apple Health sync toggle, current dashboard period) are stored in iOS user defaults on your device. These contain no personal data beyond the choices you make in Settings.
Map and Routing
Volero uses Apple's MapKit framework to display maps, calculate routes between waypoints you select, search for addresses, and reverse-geocode coordinates into human-readable addresses. Apple processes these requests according to its own privacy practices. Valinor Labs neither receives nor logs your map interactions.
4. Purpose and Legal Basis for Processing
Recording GPS rides — Core app functionality. Legal basis: Art. 6(1)(b) GDPR (performance of contract).
Storing bikes, maintenance entries and saved routes — Core app functionality. Legal basis: Art. 6(1)(b) GDPR (performance of contract).
Synchronising data to your private iCloud — Convenience across your Apple devices. Legal basis: Art. 6(1)(b) GDPR (performance of contract).
Writing Cycling workouts to Apple Health — Optional integration. Legal basis: Art. 6(1)(a) GDPR (consent). The toggle is off by default.
Map display, routing and address search — Core app functionality. Legal basis: Art. 6(1)(b) GDPR (performance of contract).
Reading and writing app preferences — Core app functionality. Legal basis: Art. 6(1)(b) GDPR (performance of contract).
You can withdraw consent for optional features (Apple Health sync) at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Data Storage and Security
All data described above is stored locally on your device using Apple's SwiftData framework.
We cannot read your rides, your bikes, your routes, your photos, or any other content stored through Volero — only you can, from your own Apple devices signed in to your Apple ID.
6. Third-Party Services
Volero integrates exclusively with Apple's first-party frameworks:
- MapKit — for map display, routing and address search
- HealthKit — only if you enable the Apple Health toggle, and only to write Cycling workouts
- PhotosUI — to let you select a photo from your photo library when adding a bike
Volero does not embed any third-party analytics, advertising, attribution, crash-reporting, or marketing SDKs. There are no Facebook, Google, Firebase, Mixpanel, or comparable trackers in the binary.
When you use Apple's frameworks, Apple processes the corresponding requests according to its own privacy practices.
7. Data Sharing
Valinor Labs does not sell, rent, trade, or otherwise share your data with third parties. Volero does not transmit your data to any Valinor Labs server, partner, or advertising network. There are no marketing communications and no profiling.
The only "sharing" that occurs is between your own Apple devices through your own private iCloud, controlled entirely by you in iOS Settings.
8. Data Retention
You are in full control of the data Volero processes:
- Delete individual rides: swipe or use the trash icon on a ride's detail view.
- Delete all rides at once: Settings → Data → "Delete all rides".
- Delete a bike (and its maintenance entries): the menu in a bike's detail view.
- Remove a saved route: the trash icon next to the route in the planning sheet.
- Stop Apple Health sync: turn off the toggle in Settings, or revoke access in iOS Settings → Privacy & Security → Health.
- Delete everything in one step: uninstall Volero. This removes the local database from your device.
Valinor Labs retains no copy of your data, so there is nothing for us to delete on your behalf.
9. Your Rights (GDPR)
Under the GDPR you have the following rights regarding the personal data processed by Volero:
- Right of access (Art. 15): Because all data lives on your own device and in your own iCloud, you already have complete access through the Volero UI. No request to us is necessary.
- Right to rectification (Art. 16): Edit any ride, bike, maintenance entry, or saved route directly in the app.
- Right to erasure (Art. 17): Delete data as described in the "Data Retention" section above.
- Right to restriction (Art. 18): Disable Apple Health sync, location access, or iCloud sync via iOS Settings.
- Right to data portability (Art. 20): Rides Volero writes to Apple Health are exportable via the Health app's export feature.
- Right to object (Art. 21): You can stop any processing at any time by turning off the corresponding feature or uninstalling the app.
- Right to lodge a complaint: with your local data-protection authority. In Germany this is the supervisory authority of the federal state in which you reside.
Because Valinor Labs holds no copy of your data, any of these rights are fulfilled by your direct actions in the app or in iOS Settings.
10. Children's Privacy
Volero is not directed to children under the age of 13. Valinor Labs does not knowingly process personal data from children under 13. If you are a parent or guardian and believe your child has provided personal data through Volero, please contact contact@valinorlabs.de and we will be glad to assist within the constraints described above (we hold no copy of the data on our side).
11. Changes to This Privacy Policy
We may update this Privacy Policy occasionally to reflect changes in Volero's functionality or in applicable law. The current version is always available at valinorlabs.de/privacy-policy-app-volero. The "Last updated" date at the top of this document indicates when the most recent change was made. By continuing to use Volero after a policy update, you accept the updated terms.
12. Contact
For questions about this Privacy Policy or about how Volero handles your data:
Nader Grebe
Email: contact@valinorlabs.de
Website: https://valinorlabs.de