Privacy Policy
1. Introduction
IndieCycling ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use the IndieCycling iOS app ("App").
2. Information We Collect
2.1 Account Information
When you register, we collect:
- Email address
- First and last name
- Password (stored securely; we never see it in plain text)
2.2 Profile Information
Information you choose to add to your profile:
- Phone number (optional)
- General location / city (text field — not your GPS coordinates)
- Profile bio
- Profile photo (URL)
- Cycling experience level (Beginner, Intermediate, Advanced)
- Bike type
- Average riding speed (km/h)
- Preferred ride distance (km)
2.3 Activity Data
Data generated through your use of the App:
- Clubs you create or join, and your role within them
- Rides you create or join, including participation status and any notes you add
- Timestamps of actions (joining, leaving, cancelling rides or clubs)
2.4 Automatically Collected Information
We do not collect device identifiers, IP addresses, crash reports, or analytics beyond what is inherent to Supabase's standard infrastructure logging.
3. How We Use Your Information
We use your information solely to operate the App:
- To create and manage your account
- To display your profile to other members of clubs and rides you share
- To enable club and ride coordination features
- To send account-related communications (e.g. password reset emails)
We do not use your data for advertising, profiling, or sell it to any third party.
4. How Your Information Is Shared
4.1 With Other Users
Your profile information (name, avatar, experience level, bike type, average speed, and general location) is visible to other App users within clubs and rides you are a member of. Your email address is visible to other participants in shared rides and clubs.
4.2 With Service Providers
We use Supabase (supabase.com) to store and manage all app data, including authentication. Supabase processes data on our behalf and is bound by its own privacy and security policies. No other third-party services receive your data.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal process.
5. Data Storage and Security
Your data is stored securely on Supabase-managed PostgreSQL databases. Supabase employs industry-standard security measures including encryption in transit (TLS) and at rest. We do not store payment information of any kind.
While we take reasonable steps to protect your data, no system is completely secure. Use the App at your own risk.
6. Data Retention
We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate information via your in-app profile settings
- Delete your account and associated data by contacting us
- Withdraw consent at any time by deleting your account
To exercise any of these rights, contact us at the address in Section 10.
8. Children's Privacy
The App is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with their information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions or to request data deletion, contact us at:
Email: contact@velocodes.ca
11. Governing Law
This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA).