Privacy Policy

Breakaway Legends ("we", "us", "the app") is a companion application that turns your real-world cycling activity into a role-playing game. This Privacy Policy explains what data we collect through the Garmin Connect API, why we collect it, and the choices and rights you have over it.

01Who we are

Breakaway Legends is developed and operated as an independent software project. For any privacy-related question, correction request, or data deletion request, contact us directly at the address below — we handle all such requests personally.

02Data we collect

With your explicit consent, granted through Garmin's official OAuth 2.0 authorization flow, we access the following data via the Garmin Connect API, limited to cycling activity types only (e.g. road cycling, mountain biking, gravel, indoor/virtual cycling):

• Ride metrics: distance, moving time, elevation gain, average and maximum power, cadence
• Heart rate data recorded during a cycling activity
• GPS route data (polylines) recorded during a cycling activity
• Account identifiers required to link your Garmin Connect account to your Breakaway Legends profile

03How we use your data

Data retrieved from Garmin Connect is used exclusively to power the in-app game systems:

• Calculating experience points (XP), character level, and character class
• Tracking equipment wear and in-game currency earned from distance ridden
• Computing a fatigue/training-load status derived only from your cycling activity
• Revealing map tiles ("Fog of War") corresponding to routes you have actually ridden
• Generating a shareable ride summary card showing your XP, stats, and character progress

We do not use your data for advertising, profiling unrelated to gameplay, or any purpose beyond operating the features described above.

04What we don't do

• We never sell your data to third parties, advertisers, or data brokers.
• We never share your Garmin activity data with third parties except the infrastructure providers strictly necessary to run the app (see Section 7).
• We do not use your data to train third-party AI or machine-learning models outside the app's own gameplay calculations.

05Legal basis for processing

Where the General Data Protection Regulation (GDPR) applies, we process your Garmin activity data on the basis of your explicit, informed consent (Article 6(1)(a) GDPR), given at the moment you connect your Garmin Connect account through OAuth 2.0. Because heart rate data can be considered health-related data, we additionally rely on your explicit consent under Article 9(2)(a) GDPR for this specific category. You may withdraw consent at any time by disconnecting your Garmin account in the app or by contacting us directly.

06Data retention

We retain your Garmin-derived activity data for as long as your Breakaway Legends account remains active, in order to maintain your character's progress. If you delete your account or withdraw consent, we delete the associated raw activity data and Garmin authorization tokens within 30 days, except where retention is required by law.

07Data sharing & hosting

Garmin activity data is stored on infrastructure we operate directly. We do not share this data with analytics providers, advertising networks, or data brokers. Access is limited to the operator of Breakaway Legends for the sole purpose of maintaining the service.

08Security

Garmin account authorization tokens are stored encrypted and are never stored as plain-text passwords. We do not request or store your Garmin Connect password at any point — authorization is handled entirely through Garmin's official OAuth 2.0 flow.

09Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent at any time. To exercise any of these rights — including a full, permanent deletion of your data — contact us at the email address below. We will act on verified deletion requests within 30 days.

10Children's privacy

Breakaway Legends is not directed at children under 16 and we do not knowingly collect data from users below this age.

11Changes to this policy

We may update this Privacy Policy as the app evolves. Material changes will be reflected on this page with an updated "Last updated" date.

12Contact us