GRADE

Privacy policy

Last updated: 12 October 2026.

In brief

Grade has no servers of its own and doesn't collect your personal data. There is no account to create, there is no advertising, usage statistics or tracking system, and the app contains no third-party libraries that collect data. What you produce with the app stays on your devices and, if syncing is on, in your private iCloud, which we cannot read.

Who the data controller is

Sofapps di Costantino Pistagna, VAT number 05197020877. For any privacy request you can write to info@sofapps.it.

Registered office: Via Erone, 7 - 95030 Mascalucia (CT), Italy.

What data the app uses

To work, the app stores on your device:

  • your profile: name, photo if you choose one, weight, year of birth, sex and training thresholds (FTP and heart rate);
  • your rides: power, cadence, heart rate, speed, distance and gradient, and for outdoor rides the GPS track;
  • the routes you import (GPX, FIT) or record, the training plans and the preferences;
  • the names of the paired Bluetooth devices, that is trainers and sensors;
  • a technical log of the exchanges with the trainer and sensors, which stays on the device and is used to understand a problem.

This data is sent neither to us nor to anyone else. With “Delete all data”, in Settings, you remove it from the device and from your iCloud.

iCloud

If syncing with iCloud is on, the data listed above is copied into the private database of your iCloud account: that way you find it on all your devices and don't lose it if you change phone. The service is provided by Apple, under its privacy policy, and we have no access to your private database. Syncing is on by default and can be turned off in Settings → iCloud.

Apple Health

On devices where Apple Health is available, and only with your permission, the app:

  • reads weight, height, date of birth, sex, body fat percentage and lean body mass; heart rate, resting and walking heart rate, one-minute heart rate recovery, heart rate variability (HRV), respiratory rate, VO₂max, wrist temperature during sleep and sleep; workouts also recorded by other apps, with distances, active and resting energy and effort, and for cycling power, cadence, speed and FTP. These are needed to calculate training load, thresholds and fitness status;
  • writes your rides (the workout with its route, power, cadence, speed, distance, heart rate, active energy and perceived effort) and your FTP. It writes rides only if you turn on automatic sending, which is off by default, or if you send them yourself.

A copy of the workouts and measurements read from Health is synced to your private iCloud, so they can also be used on the Mac, where Health isn't available. Health data is never used for advertising or passed on to third parties. You can revoke the permission at any time from Health's privacy settings.

Location

The app uses location in two cases, and only with your permission:

  • when you record an outdoor ride, to trace the route: the track stays in the app and in your iCloud;
  • at the start of a ride, to read the weather from Apple's WeatherKit service: the location is sent to Apple for this one request only.

The maps are Apple's, which load the cartography from Apple's servers to show the area.

Bluetooth

The app uses Bluetooth to communicate with the trainer and with heart rate, cadence and power sensors. The communication takes place only between your devices.

Purchases

The purchase of Grade PRO takes place through the App Store. Payment, billing data and refunds are handled by Apple: all that reaches your device is the confirmation that the purchase exists.

What you share yourself

The files you export (FIT, GPX, TCX) and the technical log leave the device only when you share them, with whoever you choose.

If you write to us for support, we use your email address and what you send us only to reply to you (article 6, paragraph 1, points (b) and (f) of the GDPR), and we keep it for the time needed to close the request.

This website

The site uses no cookies and loads no resources from other servers: fonts and images are served by the site itself. Your browser remembers only the language and theme you choose, in its local storage, and this data does not leave your device.

The site is hosted on a dedicated server at OVH SAS (Roubaix, France), which we run ourselves. Like any web server, it records the IP address, the date and the page requested for each visit for security reasons (article 6(1)(f) of the GDPR); these logs are kept for 14 days and then deleted.

Your rights

Since the app's data is on your devices and in your iCloud, you exercise your rights of access, rectification, erasure, restriction, objection and portability (articles 15 to 22 of the GDPR) directly from the app: you export your rides, correct your profile, delete everything. If in doubt, write to info@sofapps.it; you can always lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Changes

If this policy changes, the new version is published on this page with the update date.