Privacy policy

Who is responsible

The data controller is Damian Obajtek, ul. Powstańców Śląskich 3, 43-300 Bielsko-Biała, tax ID (NIP) 9372743771, REGON 522150617. Contact: contact@reconbike.app.

Without an account

Routes, rides, the ride plan and settings are stored only on your device. We have no access to them and do not know who you are.

Browser storage

In a browser the app keeps routes, rides and settings in the browser’s storage (IndexedDB and localStorage), and once you sign in, the sign-in session as well. The service cannot work without it, so we do not ask for consent. We use no advertising or analytics cookies. You remove the data by clearing the site’s data in your browser settings.

Serving the site

The site and the browser app are delivered by Cloudflare, Inc. On every visit it sees the IP address and browser details in order to send the page and protect it from attacks. The legal basis is our legitimate interest in running the service safely (Article 6(1)(f) GDPR).

What the app sends to outside services

To work out surface, wind and resupply, the app asks public services about the area around your route. It sends them coordinates, not the file and not your details. Each of these services also sees your device’s IP address and has its own privacy rules.

• OpenStreetMap through the Overpass API: roads, shops, water and place names along the route.
• Open-Meteo: the weather forecast (wind, temperature, rain) for points on the route, and for a recorded ride the weather of its day.
• BRouter: laying out loops and joining the points of a drawn route.
• Wikipedia: places worth a look along a chosen loop.
• Photon (Komoot): finding a place by name; it gets the text typed and the centre of the map shown.
• OpenFreeMap: map tiles for the area you are viewing.

With an account

An account is optional and exists so that you have the same routes on several devices. We then process:

• the email address we send the sign-in code to, or the email address, name and profile picture of your Google account when you sign in with Google,
• routes: the GPX file, name, distance, dates and the favourite mark,
• the ride plan and chosen stops of each route,
• rider settings, such as your speed on the flat.

Account data is stored with Supabase (Frankfurt, European Union). The sign-in code is sent through Resend, which receives the email address and the message. When you sign in with Google, Google passes us the email address, name and profile picture address of your Google account, and Supabase stores them with the account. The app uses only the email address. The legal basis is the performance of a contract for the service (Article 6(1)(b) GDPR).

Supabase, Resend and Cloudflare are US companies that process data on our behalf. Transfers outside the European Economic Area rest on the European Commission’s standard contractual clauses in our data processing agreements with them.

Recorded rides (FIT files with heart rate and power) are not sent to the account and stay on the device.

Location

The app asks for your location only when you choose “Use my location” while setting the start of a loop or a route. The position is used to place a point on the map and is neither stored nor sent to the account.

Crash reports

When the phone app runs into an error, it sends a report to Sentry (Functional Software, Inc.): a description of the error, the app version, the phone model and the system version. The report holds no routes, rides, location or email address. The legal basis is our legitimate interest in fixing errors (Article 6(1)(f) GDPR). Reports are deleted automatically after 90 days at the latest.

Tips

The “Buy me a coffee” button leads to buycoffee.to. That service handles the payment as a separate controller, under its own privacy policy. We receive no card or bank details. We see the amount, and your name and message if you give them. We keep payment records for as long as tax law requires (Article 6(1)(c) GDPR).

What we do not do

We show no ads, use no analytics or tracking tools and do not sell data.

How long, and how to delete

We keep account data until the account is deleted. Deleting the account in the app removes all routes, settings and the email address at once. Data stored on a device is removed by deleting the routes or uninstalling the app.

Your rights

You have the right to access, correct, delete, restrict and port your data, and to lodge a complaint with your data protection authority. Write to contact@reconbike.app.