Privacy, plainly.

Your imported files

Tanūki parses FIT files on your iPhone or iPad. It stores imported ride files and their parsed outputs in the app's local storage. It does not upload those files to a Tanūki parsing service.

Ride files may contain precise location, timestamps, heart rate, and other recorded measurements. Files stored on your device may be included in system backups, depending on your Apple settings.

Optional Strava access

When the integration is configured, you sign in through Strava and grant access to your activities. Tanūki does not ask for or store your Strava password.

A configured token server exchanges the authorisation code and refreshes or revokes credentials with Strava. The server handles these credentials in order to complete those requests. The provided server implementation does not intentionally log tokens or activity payloads.

The app keeps Strava tokens in the iOS Keychain. It requests activity details and streams directly from Strava and holds the activity feed in memory. Opening or preparing an activity saves its JSON and CSV data permanently in the local Library, even if you cancel sharing. Saved rides include available location and health measurements and may be included in device backups. Review status and filter preferences remain on your device. Exports also create temporary copies for saving or sharing.

Strava handles your account and authorisation under its own privacy practices. The token server's operator and hosting provider may process connection metadata. The token server used by the current test build is hosted on Render.

Exports are your choice

When you use Files or the share sheet, your chosen destination receives the exported files. That may be a local folder, a cloud storage service, or another app. Saved or shared copies are outside Tanūki's control.

Strava JSON exports include the original API response bodies. Review the export before sharing it, especially when an activity includes private locations or health-related measurements.

Removing data and access

Disconnecting Strava removes the local connection and attempts to revoke access through the token server. You can also revoke access in Strava's connected applications settings.

Deleting the app removes its local app container. Keychain credentials and copies in backups or other services can have separate lifecycles, so disconnect Strava before deleting the app and manage external copies separately. Disconnecting also leaves the local Library intact. Removing a connection does not delete your Strava activities.

This website

This website does not ask you to upload ride files, sign into Strava, or submit personal information. Its pages contain no advertising scripts or app-added analytics. The hosting service may process network and security information when serving the website.

Contact and privacy requests

Tanūki Parser is created by Clem Fandango Studios. For support, privacy questions, or requests concerning information you have sent us, email hello@clemfandangostudios.com. We do not receive your local ride Library and cannot delete files from your device remotely. If you email us, we use your address and message to respond and retain correspondence only as needed to resolve the request.