The fine print
Privacy
Updated 11 October 2026
Velvind exists to read the weather along your ride — not to read you. This page says, in plain language, what is stored and what never happens with it.
What Velvind stores
Your account (email address and a display name), the routes you save, the plans on them (departure time and pace), and group rides you create or reply to. A guest reply to a group ride stores the name that was typed and — only if the guest chooses to leave one — an email address, used solely for that ride's updates. If you turn notifications on in the iOS app, the phone's push address (a push token) is stored so those can be delivered. That, and the app's usage counts below, is the whole list — there is no tracking profile behind it.
The App Store waitlist
Joining the waitlist stores your email address, the language the confirmation was written in and which form you used — nothing else, and no account. The address gets one email to confirm it, then one when Velvind is in the App Store. An address that isn't confirmed is deleted after 30 days, and the remove link in the email deletes it at once.
Where it lives
The database and sign-in run on Supabase; the app itself is hosted on Vercel; email is delivered through Resend. To draw your forecast, route coordinates are sent to Open-Meteo (weather) and Mapbox (maps and directions). For the next two hours of rain, points on your route, and your position if you allow it, go to MET Norway (api.met.no) through Velvind's own server. None of these carries your name or account.
Your location, only if you allow it
The iOS app can show the weather where you are. It asks first, in the app. The forecast is fetched for an 11 km grid cell, not your exact position, and the cell isn't saved. The one exception is the next two hours of rain, which is read for the spot you are in: that point goes through Velvind's server to MET Norway, and Velvind doesn't store or log it. The place name shown comes from Apple's geocoder on the device.
Apple Health, only if you turn it on
Under You → Pace, the iOS app can read your cycling workouts from Apple Health (distance and moving time) to suggest your usual average speed. It asks first, and the reading happens on the phone only: nothing from Health is uploaded, stored on Velvind's servers or written back to Health. The one thing saved is the speed you accept, as part of your pace setting.
Strava, only if you connect it
Connecting Strava lets Velvind copy your routes in. The access tokens stay on your own device — a cookie in your browser on the web, the iOS Keychain in the app — never in our database. One number is stored on your profile: your Strava athlete id, so that disconnecting from Strava's side removes your synced data here too. Imports are one-way copies, a route you delete on Strava is removed here on the next sync, and disconnecting removes everything synced. Disconnect any time from your profile. Strava itself may collect usage data about how you and Velvind use the connection; that is covered by Strava's privacy policy.
Notifications
Push starts quietly: on iOS, briefs can arrive in Notification Center without a permission dialog until you opt in properly, and the visible switch in the You tab turns everything off — flipping it off (or signing out, or deleting your account) also deletes the push token. Email speaks only when the sky changes, and every stream has its own switch and an unsubscribe link.
Usage counts
The iOS app counts what gets used (a route opened, a ride added, a widget tapped) so the work goes where it helps. A count is a name and a coarse detail like “1–6 hours ahead”: never a place, a route name, an exact time or anything you typed. Counts are kept with your account, deleted after 180 days or when the account goes, and never shared. Turn them off under You → About.
Shared links
Sharing a route or a group ride creates an unguessable link, and the link is the permission: anyone holding it can see that ride's name, path and forecast. Don't post one publicly unless you mean to.
What never happens
No advertising, no selling or sharing of your data, no third-party trackers. Your routes are yours.
Removing your data
Delete routes and group rides from your profile at any time — and the whole account too: profile → Danger zone on the web, or You → Delete account in the app, deletes everything, promptly and completely. Deleting your account or disconnecting Strava gets you a written confirmation that the data has been removed. A download of your data (routes, plans, group rides) is one click away in the profile. One deliberate exception: if you had unsubscribed from email, that unsubscribe marker is kept so mail to your address stays stopped.
Contact
Velvind is built and run by one person in Norway. Questions or requests welcome: support@velvind.app.