Legal
Privacy Policy
Last updated: 6 August 2026
CycloFit is a bicycle sizing app for Shopify stores. It adds a widget to a merchant's product pages that recommends a bike frame size based on the height and inseam a shopper enters. This policy explains what data CycloFit handles, why, and what your choices are.
The short version: CycloFit does not collect shoppers' names, email addresses, phone numbers, or postal addresses. Body measurements are stored against a random session identifier that is not linked to any person's identity. We do not sell data or use it for advertising.
1. Who we are
CycloFit is operated by Md Mahmudul Hasan (the "we", "us", or "our" in this policy), the developer of the CycloFit Shopify app. For any privacy question or request, contact support@cyclofit.io.
2. Who this policy covers
CycloFit is used by two groups, and the data involved differs for each:
- Merchants — Shopify store owners who install CycloFit on their store.
- Shoppers — visitors to a merchant's store who use the sizing widget on a product page.
3. What we collect from shoppers
When a shopper uses the sizing widget, CycloFit records the following:
| Data | Why |
|---|---|
| Height and inseam measurements | To calculate the recommended frame size. This is the core function of the app. |
| Riding style and bike discipline selections | To refine the size recommendation for the type of riding. |
| The product being viewed (title, handle, ID) | To identify the bike being sized and apply the correct size chart. |
| The size recommended and its confidence score | To display the result and to give merchants aggregate performance analytics. |
| Chosen units and language | To show the result in the shopper's preferred format. |
| A random session identifier | Stored in the shopper's browser so a fitting session can be continued. It is a randomly generated string that is not derived from, and cannot be traced back to, any personal information. |
What we do not collect from shoppers
CycloFit does not collect or store shoppers' names, email addresses, phone numbers, billing or shipping addresses, payment details, or Shopify customer IDs. The app has no access to payment information at any point.
Are body measurements personal data?
We treat height and inseam as potentially sensitive and handle them carefully, even though we store them without any identifying information attached. A shopper enters these values voluntarily to receive a size recommendation, and they are not combined with any identity data.
4. What we collect from merchants
- Store domain and access token — issued by Shopify when the merchant installs the app, used to read product data and show the merchant's own dashboard. Access tokens are short-lived and refreshed automatically.
- Plan and subscription status — to provide the features included in the merchant's chosen plan.
- Widget settings — display preferences the merchant configures.
- Custom size charts — brand and model size data a merchant uploads on the Studio plan.
- Product data — product titles, tags, descriptions, and variant options read from the merchant's store to detect the bike type and available sizes.
5. Order data
Where a merchant has enabled conversion analytics, CycloFit reads order events from Shopify solely to determine whether a fitting session was followed by a purchase, and to record the order value. This lets the merchant see how the sizing widget affects their sales.
We do not store customer names, email addresses, shipping addresses, or line-item details from orders. Only an anonymous conversion flag and an order value are retained, attached to the merchant's own analytics. Order data is never used for advertising, never combined across merchants, and never sold.
6. How we use data
- To calculate and display bike size recommendations to shoppers.
- To show merchants aggregate analytics about their own store's fitting sessions.
- To operate, secure, debug, and improve the app.
- To respond to support requests.
We do not sell personal data. We do not use it for advertising, profiling, or automated decisions that produce legal or similarly significant effects. A size recommendation is a non-binding suggestion; the shopper decides what to buy.
7. Who we share data with
We do not sell or rent data. We share it only with the service providers needed to run the app:
| Provider | Purpose |
|---|---|
| Shopify | The platform the app runs on; the source of product and order data. |
| Railway (hosting, running on Google Cloud infrastructure) | Hosts the CycloFit application and database. |
We may also disclose data where required by law, or to protect the rights, safety, and security of our users or the service.
8. Where data is stored and how it is protected
CycloFit's application and database are hosted on Railway infrastructure located in the United States. Data is encrypted in transit using HTTPS/TLS, and encrypted at rest by the underlying cloud infrastructure.
Additional safeguards include verifying the authenticity of every request Shopify sends to the app, restricting merchant dashboard access to authenticated sessions belonging to that merchant's own store, and requesting only the minimum Shopify permissions the app needs to function.
No system can be guaranteed completely secure, but we take reasonable and appropriate measures to protect the limited data we hold.
9. How long we keep data
- Fitting sessions — retained so merchants can view their analytics over time, and deleted when the merchant uninstalls the app.
- Merchant records, settings, and custom size charts — deleted when the app is uninstalled.
- Order events — processed at the time of the order; only an anonymous conversion flag and order value are retained, and these are deleted with the rest of the merchant's data.
When a merchant uninstalls CycloFit, Shopify notifies us and all data belonging to that store is erased from our database.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, or restrict the use of your personal data, to object to processing, or to request a copy of your data.
Shoppers
Because CycloFit stores no information that identifies an individual shopper, we are normally unable to locate data belonging to a specific person. If you have used the widget and want the session data from your browser cleared, clearing your browser's site data for that store removes the session identifier. You may also contact us at support@cyclofit.io and we will help where we can.
CycloFit supports Shopify's privacy request webhooks. If you submit a data request or deletion request through a merchant, Shopify forwards it to us and we respond accordingly. As we hold no customer-identifiable data, there is typically nothing to return or erase.
Merchants
Merchants can remove all their data at any time by uninstalling the app, or by contacting support@cyclofit.io.
11. Cookies and local storage
The CycloFit widget stores a single randomly generated session identifier in the shopper's browser (using local storage) so that a fitting session can be resumed. It is not used for advertising, cross-site tracking, or building a profile of the shopper. CycloFit does not use third-party advertising or analytics trackers in the storefront widget.
This website, cyclofit.io, sets no cookies and runs no analytics or advertising trackers.
12. Children
CycloFit is provided to merchants for use on their stores and is not directed at children. The widget can produce sizing for children's bicycles, but in that case the measurements are expected to be entered by a parent or guardian. We do not knowingly collect personal data from children.
13. International transfers
Our infrastructure is located in the United States. If you access CycloFit from another country, the limited data described in this policy may be transferred to and processed in the United States.
14. Changes to this policy
We may update this policy as the app develops or as legal requirements change. The "last updated" date at the top will always reflect the current version. Material changes will be communicated to merchants through the app or by email.
15. Contact us
For any question, concern, or request about privacy or your data:
Email: support@cyclofit.io
App: CycloFit — Bike Sizing for Shopify
We aim to respond to privacy requests within 30 days.