Privacy Policy
Last updated: 19 October 2026
Layoutie is an app that puts your ride data on your ride video. It is made by Highlision (“we”, “us”), who is responsible for your data under this policy. Questions and requests: hello@highlision.com.
In short
- Your rides and videos stay on your device. We never receive them.
- You can use Layoutie without an account. An account is only for syncing settings, club features and Strava.
- With an account we keep your email, profile and synced settings — nothing else.
- We don't sell data, show ads or use your data to train AI.
- You can export or delete your account at any time in the app.
Rides and videos
Layoutie reads your .fit files and videos and renders the overlay on your device. They are not uploaded to us.
Your account
An account is optional. If you create one, we keep:
- Email address — to sign you in. You sign in with a one-time code we email to you; there is no password.
- Profile — display name (if you set one), app language, units (km or miles), and when the account was created.
- Synced settings — your overlay defaults, so they are the same on all your devices: chosen templates, colors, title cards, units, FTP and, if you entered it, your rider weight. The weight is only used to show watts per kilogram (W/kg) on the overlay.
- Sign-in sessions — technical records that keep you signed in, until you sign out.
We use this data only to provide these features. The legal basis is our contract with you (providing the account you asked for).
Club kits
Club kits are the logos, colors and texts of cycling clubs. The app downloads them from our server. Downloading a kit does not send us any personal data beyond the technical request.
Strava
If you choose to connect Strava:
- You must be signed in to Layoutie.
- The Strava sign-in tokens are stored only on your device, in the system Keychain.
- Our server only helps exchange, refresh and revoke those tokens. It does not store your tokens or any of your Strava data.
- Activities you import are downloaded straight from Strava to your device and shown only to you.
- Your Strava data is never used for advertising, sold, or used to train or run AI models.
- You can disconnect at any time in the app, or revoke access in your Strava settings. The app then deletes the tokens from your device.
The legal basis is your consent when you connect Strava; disconnecting withdraws it.
Purchases
Subscriptions and purchases go through Apple. We never see your payment details. See Apple's Privacy Policy.
Technical logs and errors
Our server keeps technical logs for up to 14 days: the time, the requested address and the result. We don't log IP addresses, email addresses, request contents or tokens. Server errors are reported to our error-tracking service without personal data and kept for up to 90 days. The legal basis is our legitimate interest in keeping the service secure and working.
Who processes data for us
We use these providers. They process data only on our instructions:
- Supabase — database and sign-in (servers in Ireland, EU).
- Railway — runs our server (servers in the Netherlands, EU).
- Resend — sends sign-in emails (servers in Ireland, EU).
- Sentry — error reports, without personal data.
- Cloudflare — this website, our domain and forwarding of emails sent to hello@highlision.com.
Some of these companies are based in the United States. Where data may be accessed from outside the EU, they rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep data
- Account, profile and synced settings — until you delete your account.
- Database backups — deleted data may remain in backups for up to 30 days.
- Technical logs — up to 14 days; error reports — up to 90 days.
- Emails to hello@highlision.com — as long as needed to answer you.
Your rights
- Export — download everything we keep about your account in the app (Settings → Account), as a JSON file.
- Delete — delete your account in the app. Your email, profile, settings and sessions are deleted right away; purchases stay with your Apple ID.
- Correct — change your profile in the app, or write to us.
- You can also ask us for access, correction, deletion, restriction or portability of your data, or object to processing, at hello@highlision.com.
- If you are in the EU or UK, you can complain to your local data protection authority.
Children
Layoutie is not meant for children under 16, and we don't knowingly create accounts for them.
This website
This website uses no cookies and no analytics. Cloudflare, our hosting provider, processes the technical data needed to deliver the pages, such as your IP address.
Changes
If we change this policy, we'll publish the new version here and update the date at the top. For important changes we'll also tell you in the app.