Privacy Policy - ONNYON | Cycling Outfit Recommendations for Every Ride

1. Introduction

ONNYON respects your privacy. This Privacy Policy explains how ONNYON collects, uses, stores, and protects information when you use our website, mobile application, and related services (collectively, the “Services”).

The controller responsible for data processing under this Privacy Policy is:

ONNYON, operated by Alejandro Garcia Blanco
Switzerland
Email: hello@onnyon.com

By using the Services, you acknowledge that information may be processed in accordance with this Privacy Policy and applicable data protection laws.

2. Scope of Processing

ONNYON is designed to minimize data collection and to keep core app functionality on your device wherever possible.

We may process the following categories of information:

2.1 Information Stored Locally on Your Device

ONNYON is designed so that core app data is stored locally on your device. This may include:

wardrobe and clothing entries you add
item attributes, preferences, and notes you choose to save
app settings and personalization preferences
saved routes or ride-planning inputs
outfit selections and recommendation-related inputs
item photos or other content you choose to add within the app

This information is used to provide the core ONNYON experience and is generally not stored on our servers.

2.2 Anonymous Usage and Product Metrics

We may collect anonymous, aggregated, or de-identified usage metrics in order to:

improve app quality and stability
understand feature usage and product performance
identify bugs or usability issues
guide future product development
understand broad market demand and usage trends
support discussions with current or prospective brand partners at an aggregated level

These metrics are not intended to identify you personally.

Strava Data, and any information derived from or linked to Strava Data, is excluded from these metrics and insights.

2.3 Device and Technical Information

When you use our app or website, limited technical information may be processed as necessary to operate the Services, maintain security, diagnose issues, and ensure compatibility. Technical information that may be processed includes:

device type
operating system version
app version
language or region settings
diagnostic data
crash and performance information
general usage events

Where possible, such information is processed in anonymous, aggregated, or de-identified form.

2.4 Communications

If you contact us directly, we may process information you provide in your message, including your name, email address, and the contents of your communication, in order to respond to you.

2.5 Strava Integration

Connecting your Strava account to ONNYON is optional. Where the Strava integration is available, ONNYON uses Strava’s authorization process and does not receive your Strava password.

If you connect Strava, ONNYON may process limited connection information including your Strava athlete identifier, the permissions you granted, connection status, encrypted access credentials, and route information that you explicitly choose to access.

Strava route data is requested only following an action by you. When you select a Strava route, ONNYON may retrieve the route information needed to display that route and route-specific cycling conditions to you. Strava routes are not added to ONNYON Saved Routes, are not made available for download through ONNYON, and are not retained as permanent ONNYON route records.

Any Strava Data temporarily cached by ONNYON is retained only as necessary to provide the requested functionality and for no longer than seven days. Data may be removed sooner when it is no longer required.

You may disconnect Strava through ONNYON or revoke access through Strava. Following disconnection or revocation, ONNYON stops accessing your Strava account and deletes the Strava connection credentials and Strava Data under its control as required by the Strava API Policy. You may also request deletion by contacting hello@onnyon.com. Where you submit a deletion request, ONNYON will provide written confirmation when the request has been completed.

Strava operates independently and processes information under its own Privacy Policy. Strava may also monitor and collect information about ONNYON’s use of the Strava API for its own business purposes.

2.6 Information We Do Not Intentionally Collect

ONNYON does not intentionally collect or store:

health data
biometric data
medical information
payment card information
bank details
in-app payment information

There are currently no payments processed inside the ONNYON app.

3. How We Use Information

We process information:

to provide, operate, and improve ONNYON
to generate recommendations locally on your device
to save your settings and preferences locally
to monitor reliability, stability, and app performance
to analyze anonymous product usage trends
to support business planning and aggregated brand-facing insights
to communicate with you if you contact us
to comply with legal and regulatory obligations
to exercise or defend legal claims where necessary

ONNYON does not use or share Strava Data for product analytics, brand insights, advertising, commercial reporting, artificial-intelligence training, or recommendation-model development.

4. Legal Bases for Processing

Where applicable under data protection law, we process information on one or more of the following legal bases:

performance of a contract, where processing is necessary to provide the Services
legitimate interests, including improving the Services, maintaining security, understanding product performance, and developing the business
consent, where required, for example for certain permissions
legal obligations, where processing is required by law
exercise or defense of legal claims, where applicable

5. Data Storage

5.1 Local Storage on Device

Core ONNYON app data is designed to remain stored locally on your device. ONNYON’s recommendation logic is also performed locally on your device.

At this time, ONNYON does not rely on cloud storage for users’ wardrobe data or local recommendation data as part of its core functionality.

5.2 Anonymous Metrics

Anonymous, aggregated, or de-identified technical and usage metrics may be processed and stored for product improvement, diagnostics, analytics, and business insight purposes.

5.3 Strava Connection Data

When you connect Strava, ONNYON uses secure backend infrastructure to manage the connection. Connection information and encrypted access credentials are stored securely in the backend.

Strava route data accessed through the integration is treated as transient data. It is not stored as a permanent ONNYON Saved Route and is retained only for the period necessary to provide the requested functionality, subject to the retention limits described in this Privacy Policy.

We do not sell or rent your personal data.

We may share limited information with:

IT or infrastructure providers, if needed to operate the Services
professional advisers, such as legal, accounting, or audit partners
public authorities or regulators where required by law

Where information is shared, we aim to limit it to what is necessary.

We may also use or share anonymous, aggregated, or de-identified insights for business and partnership purposes, including with cycling brands or commercial partners. These insights are not intended to identify individual users and do not include personally identifiable wardrobe or recommendation data linked to a specific person.

ONNYON does not use or share Strava Data for product analytics, brand insights, advertising, commercial reporting, artificial-intelligence training, or recommendation-model development.

7. International Transfers

We generally seek to limit processing to jurisdictions with appropriate data protection standards.

If service providers or infrastructure located outside Switzerland or the European Economic Area are used in the future, appropriate safeguards will be implemented where required by applicable law.

8. Website Data, Cookies, and Similar Technologies

When you visit our website, limited technical and log information may be processed for operational, security, and performance purposes.

At present, ONNYON does not use website analytics, advertising pixels, or cookies for analytics/marketing purposes.

If cookies, analytics tools, or similar technologies are introduced in the future, this Privacy Policy will be updated accordingly, and any notices or consent mechanisms required by applicable law will be implemented.

9. Data Security

We use appropriate technical and organizational measures to protect information against unauthorized access, misuse, disclosure, alteration, or destruction.

However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Data Retention

Because core ONNYON data is stored locally on your device, that data generally remains there until you delete it, remove it through the app or device settings, or uninstall the app.

Anonymous, aggregated, or de-identified analytics, diagnostics, and related records may be retained for as long as reasonably necessary for:

app performance monitoring
security
product improvement
internal reporting
business planning
compliance with legal obligations

Strava Data is subject to separate retention controls. ONNYON does not retain cached Strava Data for longer than seven days and removes it sooner where it is no longer required. Strava Data is also deleted following applicable deletion requests, revocation of ONNYON’s Strava authorization, or other circumstances requiring deletion under the Strava API Policy.

11. Your Rights

Depending on your location and applicable law, you may have rights including the right to:

access personal data concerning you
request correction of inaccurate data
request deletion of data
restrict or object to certain processing
withdraw consent where processing is based on consent
lodge a complaint with a competent supervisory authority

Because ONNYON stores its core user data locally on your device, many controls are available directly through your device and app usage, including deleting locally stored content and uninstalling the app.

If you have questions about your rights or would like to make a request, please contact: hello@onnyon.com

If you are in Switzerland, you may also lodge a complaint with the Federal Data Protection and Information Commissioner.

12. Children

The Services are not intended for individuals under 18 years of age, and we do not knowingly collect personal data from children.

13. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in legal requirements, the Services, or our data processing practices.

Any updated version will be published on our website or otherwise made available through the Services, and will become effective upon publication.

14. Contact

For any inquiries, questions, or comments regarding this Privacy Policy or our handling of information, please contact: