Privacy Policy
Last updated November 4, 2026
Sprocket is made by Harthforge Labs (“we”, “us”). This policy explains what the Sprocket app keeps, where, and who else handles anything. In short: Sprocket has no accounts, and your riders and rides never reach us. They stay on your phone, and in your own iCloud if you turn on iCloud sync. We don’t collect your name, email address, profiles, rides or health data, and we never sell data.
What stays on your phone
Everything you enter or record in Sprocket is stored only on your iPhone:
- Rider profiles: name, nickname, gender, birth year, weight, height, maximum heart rate, color and units. These are used on your phone to estimate calories and heart-rate zones.
- Rides: date and time, length, distance, calories, power, cadence, resistance, heart rate, and the bike’s name.
- Settings such as appearance and course preferences.
We never receive any of it. If you delete Sprocket, it’s deleted from your phone (copies in iCloud are covered below).
iCloud sync (Sprocket Pro)
If you turn on iCloud sync, your riders and rides are also stored in your own iCloud account, in Apple’s CloudKit, so they appear on your other devices. Apple stores and protects this data under your Apple ID and its terms; it counts toward your iCloud storage. We can’t see or access it.
You can invite family members to your household. Invites are links: anyone who opens one on their iPhone can join, and then sees and can edit your household’s riders and rides, which are copied to their phone. Send invites only to people you trust. You can stop sharing at any time from ☰ › Backup & privacy, and people who joined stop receiving updates (their phones keep what they already had). Family members can leave the same way.
The household also holds the date your Pro subscription runs until, so the phones that joined get Pro too. Apple Health links and other per-phone settings aren’t synced.
To delete what’s in iCloud, turn off iCloud sync and then delete Sprocket’s data in Settings › your name › iCloud › Manage Storage (or Saved to iCloud) › Sprocket.
Backups
Your Sprocket data is included in your iPhone’s own backup (iCloud Backup or a computer backup), which Apple handles under your Apple ID. We can’t see it.
You can also save a backup file from ☰ › Backup & privacy. You choose where it goes, for example iCloud Drive or another app. The file contains your riders and rides, so keep it somewhere you trust. We never receive it unless you send it to us yourself.
Apple Health
If you turn on Apple Health for a rider, Sprocket saves that rider’s rides to Apple Health on that rider’s own phone: the workout, its distance, calories, cadence and heart rate. On iPhone, Sprocket only writes to Apple Health and never reads your health data. The Apple Watch app reads your heart rate only while a ride is in progress, to show it on your iPhone (see below). Nothing from Apple Health is sent to us or anyone else, or used for advertising.
Apple Watch and heart-rate monitors
Heart rate from your Apple Watch or a Bluetooth heart-rate monitor is shown during the ride and saved with it on your phone. Bluetooth is used only to connect to your bike and heart-rate monitor, never to find your location.
What does leave your phone
| What | Why, and who receives it |
|---|---|
| Purchases: which plan you have, under a random ID | To unlock Sprocket Pro or Remove Ads. Apple handles payment and we never see your card details. RevenueCat keeps track of the plan using a random ID that isn’t linked to your name or email. Purchases belong to your Apple ID, so Restore purchases brings them back on another phone. |
| Unrecognized bikes: a bike’s Bluetooth name and the Bluetooth services it advertises | To add support for more bikes. Stored by us on Supabase. Contains nothing about you or your rides. Turn it off in ☰ › Backup & privacy › Help improve bike support. |
| Game-ify leaderboards, only for riders who turn on Compete: a screen name you choose, a pre-made avatar, your times on Sprocket’s game courses, how far along each run was every 5 seconds (so others can race it as a ghost), and the bike model and ride averages (cadence, power, maximum heart rate) for each time | To show the leaderboards. Stored by us on Supabase under a random player ID, never with a real name, email or your other rides. Other riders see the screen name, avatar, bike model and time, and the top 3 times also ride along as ghosts. Turning off Compete in the rider’s profile deletes their times from the leaderboards. Any rider can report an offensive screen name; a report keeps only a random id for the reporting phone (stored scrambled), so each phone counts once. |
| Ad data, on the free plan only | See “Ads on the free plan” below. |
Ads on the free plan
The free plan shows ads from Google AdMob. To show and measure ads, Google may collect your device’s advertising identifier, IP address, approximate location and how you interact with ads. iPhone asks whether Sprocket may track you; if you say no, the advertising identifier isn’t shared and ads are less personalized. If you’re in a region that requires it, Sprocket asks for your consent first. Ads never receive your rides, profiles or health information. Remove Ads and Sprocket Pro have no ads, and nothing is sent to Google. See how Google uses data from apps that use its services.
Who else handles data
- Apple handles purchases, iPhone backups, iCloud sync (CloudKit), iCloud Drive and Apple Health under your Apple ID.
- RevenueCat keeps track of which plan you’ve bought, under a random ID.
- Supabase stores the anonymous unrecognized-bike reports and, for riders who compete, Game-ify leaderboard entries.
- Google AdMob shows ads on the free plan, as described above.
We don’t sell data, and we don’t share it with anyone else except when the law requires it.
Deleting your data
To delete a rider and all their rides, open the rider’s profile and tap Delete rider. To delete everything, delete the Sprocket app, and if you used iCloud sync, delete Sprocket’s iCloud data as described above. Rides already saved to Apple Health stay there; you can delete them in the Health app. Backup files you saved are yours to delete wherever you put them. Because we don’t hold your riders or rides, there’s nothing for us to delete on our side, except leaderboard entries: turn off Compete in the rider’s profile (or delete the rider) to remove them.
Earlier versions with accounts
Test versions of Sprocket before launch offered optional accounts, which stored an email address, riders and rides on our servers. Accounts have been removed, and that stored data is being deleted. If you used one and have questions, email us.
Children
Sprocket isn’t meant for children under 13 to use on their own. A parent can add a child as a rider on the family’s phone. A child’s profile and rides stay on that phone like everyone else’s. Leaderboards are off unless a parent turns on Compete for the child’s rider.
Changes
If we change this policy, we’ll update the date above. If the change is significant, we’ll tell you in the app.
Contact
Harthforge Labs · harthforgelabs+sprocket@gmail.com