GALLIBIKES / PRIVACY
Privacy
Last updated 12 October 2026
GalliBikes is Ryan Galli’s cycling site in New York City. This page explains what the site collects, why, who else handles it, and how to see, correct or delete it.
To ask about your data, use Contact at the bottom of the home page or message @gallibikes on Instagram. Athletes can also ask Ryan directly.
What the site collects, and why
Coaching intake
Your name and email, and anything else you choose to add: phone, location, session format, riding history and goals, availability, equipment and a power estimate, injuries or medical limitations, medical clearance, an emergency contact, your filming choice and the track you prefer. Ryan uses it to plan your coaching and keep sessions safe.
Ryan sees it in the private owner studio. Health details, emergency contacts and your full answers stay there. They are not shown in your athlete portal, exports, email alerts or analytics, and they are never sent to an AI service. Ryan gets an email alert with your name, email, format, track and goal.
Athlete portal
Your plan, sessions, measurements and workout notes, which you and Ryan can see. If you upload ride files (FIT, GPX or TCX), each file is read on your device and only a summary is kept: the file name, start time, duration, distance, climbing, and power, heart rate and cadence where recorded. Your GPS route is not kept. You can download your portal data as a file at any time.
Strava, only if you connect it
Your Strava name and your activities from the last 30 days, so you can compare your rides with your plan. Only you see your Strava data on this site; Ryan does not, and it is never used by an AI feature. The access keys Strava issues are stored encrypted. The data refreshes every 15 minutes while you are connected and is removed when you disconnect, which you can do in the portal or in Strava’s settings.
Enquiries, merch waitlist notes and feedback
Your name, email, message and, for a waitlist note, the product. Ryan sees them in the studio and gets an email alert. A waitlist note is not an order and does not sign you up for emails.
Signing in
gallibikes.com uses Google sign-in. The site receives your email, name and Google account ID and keeps you signed in with a cookie. It uses them to open your athlete portal.
Training Lab
The structured planner runs on your device. AI mode needs you to sign in: your answers (goal, experience, hours, power estimate and days) are sent through Vercel’s AI Gateway to an AI model to draft a plan. Your name and email are not sent, and the draft is not stored. The site only counts how many AI drafts you have used today.
Shop
The shop is not taking orders yet. When it is, Stripe handles payment and your card details never reach this site. Your name, email and shipping address are kept with the order and passed to Printful if they print and ship it. Until checkout, your cart and how you arrived at the shop stay in your browser.
Analytics
Vercel Web Analytics counts page views and a few actions, such as opening the intake form, without cookies and without your name or email. Web addresses are sent without anything after a “?” or “#”.
In your browser
Your light or dark theme and your cart are saved in your browser’s storage. How you arrived at the shop is saved for that browser session only.
Who else handles it
| Service | What for |
|---|---|
| Vercel | Hosting, analytics and the AI Gateway for Training Lab AI mode |
| Turso | The site’s database |
| Resend | Email alerts to Ryan about new intakes and enquiries |
| Sign-in | |
| Strava | Your activities, only if you connect |
| The AI model provider | Drafting a plan in Training Lab AI mode |
| Stripe and Printful | Payment, printing and shipping, once the shop opens |
| OpenAI (ChatGPT Sites) | Hosts a backup copy of the site, which has its own separate database and uses ChatGPT sign-in |
The site does not sell your information or use it for advertising.
How long it’s kept
There is no automatic deletion yet. Records stay until Ryan deletes them or you ask him to. Strava data is removed when you disconnect.
Your choices
- See your data. Athletes can download it from the portal. Anyone can ask Ryan for a copy.
- Correct or delete it. Ask Ryan. Deleting an athlete removes the intake, plan, sessions, measurements, workout notes, ride summaries and Strava link. Enquiries are deleted one by one.
- Filming. Change your choice in the portal at any time. Nothing with you in it is published without a separate signed media release.
- Strava. Disconnect at any time in the portal or in Strava’s settings.
Children
Coaching is for adults. Please don’t send information about anyone under 18.
Changes
When what the site collects changes, this page and the date at the top change too.