Privacy policy
Effective 21 October 2026
Doppel is a free running and walking app made by Dylan Botha in South Africa. It is built so that your workouts stay on your own phone. This policy explains what that means in practice. It is written to meet the EU General Data Protection Regulation (GDPR) and South Africa's Protection of Personal Information Act (POPIA).
The short version
- Your Strava workouts are stored only on your phone. Doppel has no database of users or workouts.
- No accounts, no email addresses, no analytics, no advertising, no cookies for tracking.
- Disconnecting Strava deletes every workout Doppel stored.
What Doppel uses, and where it lives
| Data | Where | Why |
|---|---|---|
| Your Strava runs, walks and hikes: date, distance, time, heart rate, elevation, route, best efforts, and your first name | Only on your phone (browser storage of the installed app) | To score workouts, track records, medals and trophies, draw maps and race you against past runs |
| Strava access tokens | On your phone. During sign-in they pass through Doppel's sign-in service and are held there for at most 2 minutes | To read your workouts from Strava |
| Your settings (theme, goals, scoring rules) | Only on your phone, and in backup files you choose to save | To remember your preferences |
Doppel asks Strava only for permission to view activities you can see on Strava (the activity:read scope). It never changes anything on Strava and does not read activities you have set to "Only You". It imports runs, walks and hikes only.
Services involved
- Strava provides your workout data through its API. Strava's Privacy Policy applies to your Strava account and takes precedence over this policy where they conflict. Strava may monitor and collect usage data about Doppel's use of the Strava API and use it for any business purpose, including improving its services, supporting developers and checking compliance.
- Doppel's sign-in service runs on Cloudflare Workers. It exchanges Strava sign-in codes and refresh tokens, because the secret this requires cannot be stored in an app. It does not request, store or relay your workouts. While Doppel is invite-only, it also stores your invite code and a random ID for the install using it, so a code can be revoked. That ID is not linked to your Strava account, name or email.
- Cloudflare Pages hosts the app's files. OpenStreetMap and cdnjs provide map tiles and the map library. Like any website, these providers see your IP address when your phone downloads from them, under their own privacy policies.
Doppel does not sell, rent or share your data with anyone, and does not use it for AI or machine learning.
How long data is kept
- Workouts deleted on Strava are removed from Doppel at the next sync, and at least once a day while you use the app.
- If you disconnect Strava in Doppel, or remove Doppel's access at strava.com/settings/apps, Doppel deletes every workout it stored the next time it runs.
- Deleting the app from your home screen deletes everything it stored.
Your rights
Because your data lives on your phone, you control it directly: you can view it in the app, export your settings as a backup, and delete everything under Settings, Backup and data. You also have the right to ask what personal information is processed about you, to have it corrected or deleted, to object to processing, and to complain to a supervisory authority: in South Africa, the Information Regulator. The legal basis for processing is your consent when you connect Strava, which you can withdraw at any time by disconnecting.
Age
Doppel is for people who meet Strava's own minimum age to hold a Strava account.
Changes and contact
If this policy changes, the new version will be posted here with a new date. Questions or requests: open an issue at github.com/akwilabrave/vitamin-me/issues.