← Workout Roads

Privacy Policy

Last updated June 14, 2026

This policy explains how Workout Roads (workoutroads.com) collects, uses, and protects information. Workout Roads is operated by Semi-Pro Limited, registered in Hong Kong. We collect the minimum needed to generate your routes, process payment, and deliver your trip.

What we collect

  • The starting location or hotel address you enter, used to geocode and build door-to-door routes.
  • The trip parameters you choose: destination city, number of days, session types, fitness level, and availability.
  • Your email address, provided at checkout and used to send your trip confirmation.
  • Payment confirmation and order metadata from Stripe — we receive confirmation and order details, not card numbers.
  • The routes and itinerary generated for you, stored so you can return to and download your trip.
  • Basic technical data needed to serve pages (IP address, browser type, referring URL).

How we use it

We use the information to generate and deliver your routes and GPX files, process your payment, send your trip confirmation email, let you recover your trip on another device, operate and improve the service, and investigate security issues.

Third-party service providers

Workout Roads uses the following processors, each bound by data-protection terms that limit use of your information to operating the service:

  • Netlify (United States) and Hetzner Online (Germany) — hosting and serving workoutroads.com.
  • Supabase (Sydney, Australia, ap-southeast-2) — database and storage for your trip data and order records.
  • Stripe (multiple regions) — checkout and card processing. We do not receive your card number.
  • Resend (United States) — transactional email (your trip confirmation).
  • Google (global) — geocoding your start address, place lookups, and static map images.
  • OpenFreeMap / OpenMapTiles — interactive map tiles, based on OpenStreetMap data.
  • GraphHopper (Germany) and OpenRouteService (Germany) — generating route geometry from your inputs.
  • Anthropic (United States) — Claude models help generate route suggestions. Per Anthropic’s published API terms, customer content is not used to train their models by default.

Who can see your data

You can access your own trip and order data. Internal administrators may access limited operational data for billing, support, or incident response. The processors named above only access the data needed to deliver their service.

Retention and deletion

We retain trip and order data for as long as needed to operate the service and meet our records obligations. On request, Semi-Pro Limited aims to delete or anonymise eligible data within 90 days, except where longer retention is reasonably required for billing records, fraud prevention, dispute handling, legal obligations, backups, or security logs. Off-site backups are retained for up to eight weeks.

Your rights

You can request correction of inaccurate information, an export of your data, or deletion of eligible data. Send any privacy request to trips@workoutroads.com.

Security and cookies

We use managed hosting, encrypted connections, and security headers. We use Stripe checkout cookies during payment (governed by Stripe’s privacy policy) and minimal cookies needed to operate the site. Workout Roads does not use advertising or third-party tracking cookies.

International transfers

Workout Roads is operated from Hong Kong. Trip data is stored in Australia (Supabase Sydney region). Some processors above operate from the United States, Germany, or other regions. Where information is transferred outside your country of residence, it is solely to operate the service described in this policy.

Contact

Questions about this policy or your data: trips@workoutroads.com.