Privacy Policy

Last updated 21 October 2026

Rewax is an app for iPhone and Android that keeps track of how far each of your bikes has been ridden since its chain was last waxed, and tells you when it's time to rewax. It's made by Gary Dalley (“I”, “me”).

In short: your data stays on your phone. Rewax has no servers, no user accounts, no ads, no analytics and no tracking. The only service it talks to is Strava, and it only reads from it. The only things that reach me are emails you choose to send, and crash reports if you've let your phone share them.

Who's responsible

I'm responsible for Rewax and for the little data that reaches me: support emails and crash reports, both described below. You can reach me at rewax at gonkowonko dot com. Everything else Rewax handles stays on your phone, where only you control it. The data you keep on Strava is Strava's to look after, under Strava's privacy policy.

What Rewax reads from Strava

When you connect your Strava account, you give Rewax read-only access to:

• Your profile: your name, shown in Settings as the account you're connected as, and your Strava account ID.
• Your bikes: each bike's name, ID, total distance, and whether it's your primary bike or retired.
• Your rides from the last 60 days: each ride's name, date, distance and the bike it was ridden on, and what recorded it (a Garmin, a Wahoo, Zwift, Strava's own app and so on), as Strava gives it, so Rewax can show it beside the ride after a sync and credit Garmin as its guidelines ask. Runs, walks and other activities are skipped. Rides you've made private on Strava are read only if you allow it on Strava's sign-in page, and you can change your mind later from Rewax's Settings.

The IDs let Rewax match each ride to the right bike, and your wax log to the right account. Rewax doesn't read routes, locations, heart rate, power, photos or any other ride details, and it never posts, edits or deletes anything on Strava.

Demo mode uses made-up bikes and rides, and reads nothing from Strava.

What Rewax stores, and where

Everything is stored on your phone:

• The data read from Strava, listed above.
• The things you enter in Rewax: the waxes you log, your chain links, bike nicknames, limits and other settings.
• Your Strava sign-in. On iPhone it's kept in the iOS Keychain; on Android it's encrypted with a key held in the Android Keystore, which never leaves your phone.

Rewax's Home Screen widgets read this data from the same phone. It isn't sent to me or to anyone else.

Your phone's own backups include Rewax's data like any other app's. On iPhone that's iCloud Backup or a backup to a computer. On Android it's Backup by Google, which keeps everything above except your Strava sign-in, so after moving to a new phone you connect Strava again. Apple and Google handle those backups under their own privacy policies.

You can also save a Rewax backup file yourself, from Settings → Backup & restore. It holds only what you've entered (your waxes, chain links and settings) and nothing read from Strava. It goes wherever you choose to save or send it.

How long it's kept

• Rides from the last 60 days are read again on every sync. Riding older than that is kept only as a total distance for each wax, not as rides.
• What a sync changed: to show which rides are new or have changed, Rewax keeps a copy of your rides as they were before the sync, until you've looked at it, and for seven days at most.
• If Rewax can't sync for seven days, because you've been offline, or you've removed its access on Strava, or Strava has stopped accepting its sign-in, it deletes the names, distances and rides it read from Strava. They're read again if it syncs or you reconnect.
• Your Strava account and bike IDs stay until you disconnect, so your wax log stays matched to your bikes.
• What you enter stays until you delete it, disconnect, or delete the app.
• Support emails are kept only as long as I need them to help you and deal with any follow-up, and you can ask me to delete them at any time.

What Rewax sends, and to whom

Rewax connects only to Strava (strava.com), to sign you in, read the data listed above, and revoke its access when you disconnect. Like any service, Strava may keep information about the requests Rewax makes on your behalf, under its own privacy policy.

Rewax doesn't send your data to me or to anyone else. It contains no advertising, analytics, crash reporting or tracking software, and it doesn't track you across other apps or websites. Rewax itself sends nothing abroad; Strava is based in the United States and covers its own international transfers in its privacy policy.

What reaches me

• Support emails. If you use Contact support in About, or write to me, I receive your email address, what you write, and the device details Rewax adds to the end of the message (app version, system version and phone model), which you can delete before sending. I use them only to answer you.
• Crash reports. If you've chosen to share analytics or diagnostics with app developers in your phone's settings, Apple or Google may pass me reports of Rewax crashing. They give the phone model, system version and where in the app the crash happened, not who you are, and they stay in Apple's and Google's developer consoles. I use them only to fix bugs. You can turn this off in your phone's privacy settings.

Why Rewax uses your data

Data protection law (the UK GDPR and the EU's GDPR) asks for a reason, called a legal basis, for each use of personal data:

• Strava data: your consent, given when you connect Strava and choose what to share. You can withdraw it at any time by disconnecting.
• Support emails and crash reports: my legitimate interest in answering your questions and keeping Rewax working.

Notifications

If you allow notifications, Rewax sends alerts about overdue chains. They're created on your phone, and no notification server is involved.

Your rights

You have rights over your personal data. Here's how each one works with Rewax:

• Access and a copy: everything Rewax keeps is shown in the app. A Rewax backup file is a copy of what you've entered, and Strava's own data export has your Strava data. I can tell you what's in any emails you've sent me.
• Correction: edit it in the app, or on Strava for what comes from there.
• Deletion: disconnect Strava or delete the app, and ask me to delete your emails.
• Withdrawing consent: disconnect Strava at any time.
• Objecting to how I handle your emails: write to me.
• Complaining: if you're unhappy with how your data is handled, please tell me first. You can also complain to the Information Commissioner's Office in the UK, or to the data protection authority in your EU country.

Stopping and deleting

• Disconnect Strava (Settings → Disconnect Strava): this revokes Rewax's access on Strava, on all your devices, and deletes your bikes, wax log and chain links from your phone. Your settings are kept.
• Remove Rewax on Strava, under Settings → My Apps (Rewax's Settings links straight there). Rewax stops syncing and asks you to reconnect, and deletes what it read from Strava a week after its last sync.
• Delete the app: this removes all of Rewax's data from your phone.

Children

Rewax is for people old enough to use Strava where they live, which is 13 in the UK and up to 16 in parts of the EU. It isn't directed at anyone younger and doesn't knowingly collect any data from them.

Changes to this policy

If this policy changes, the new version will be posted here with a new “Last updated” date. If Rewax ever starts handling data differently from what's described here, the app will tell you before that happens.

Contact

Questions about this policy or about your data can go to rewax at gonkowonko dot com.

Rewax is an independent app. It isn't made, sponsored or endorsed by Strava.