Privacy Policy

Data controller

This policy covers the app Bike Computer - GPS tracker (developer: Dušan Chlpek). The data controller for the app under GDPR is GEAR s.r.o., registered at Námestie hraničiarov 12, 851 03 Bratislava, Slovenská republika, Company ID (IČO): 46816950, Tax ID (DIČ): 2023602163 ("we", "us").

For any privacy questions, contact us at info@bikehub.sk.

What data we collect

Account & profile: name, username, email, date of birth, gender, country, language, units, timezone, avatar, weight, height, max/resting heart rate, FTP.

Ride & health data: GPS track (per-second location), elevation, speed, heart rate, cadence, power, temperature, calories, and stats derived from these. Heart rate is a "special category" of data under GDPR (health data) — we process it only based on your explicit consent, given by connecting a heart-rate sensor/app and uploading a ride.

Vehicles & maintenance: bike/scooter records, odometer, service history.

Social features: friendships, privacy settings, content you share with friends or publicly (per your ride/profile visibility settings).

Payments: for a Premium subscription, payment details are processed directly by Stripe — we never see or store your card number.

Technical data: IP address, session cookies (login, CSRF protection) — we use no analytics or advertising cookies.

Legal basis and purpose

Contract performance — providing the app: account, rides, vehicles, social features.

Explicit consent — heart rate and other health data (special category under GDPR Art. 9); you can withdraw consent at any time by deleting your account or no longer uploading heart-rate sensor data.

Legitimate interest — security, abuse prevention, improving the app.

Contractual necessity with a third party — payment processing via Stripe for Premium subscriptions.

Who we share data with

Other users — only to the extent you configure yourself (public profile, sharing a ride with friends/publicly, live location sharing during an event). New rides are private to you by default.

Stripe (Stripe Payments Europe) — payment processing for Premium subscriptions.

Mapbox — map and route rendering.

Google (Firebase Cloud Messaging) — delivering push notifications to the mobile app.

Google Drive — only if you enable the ride-backup feature to your own Google Drive account; nothing is sent unless you turn it on.

Strava — only if you start an import from your own Strava account.

auth.bikehub.sk — our own login server (OAuth), managing your identity across web and app.

live-tracker — our own server for live location sharing during an in-progress ride/event, if you use that feature.

We do not sell your data to third parties for advertising.

International transfers

Some providers above (Stripe, Google/Firebase) may process data outside the EU/EEA (e.g. in the US). Where this happens, we rely on EU Standard Contractual Clauses or another valid GDPR transfer mechanism.

How long we keep data

For as long as your account is active. After an account deletion request (below), we process deletion within 30 days.

Billing records are kept for the period required by accounting law (typically 10 years), even after account deletion.

Your rights

You have the right to access, correct, delete, restrict processing of, port, and object to processing of your data — contact us at the email above.

You also have the right to lodge a complaint with Slovakia's Office for Personal Data Protection (dataprotection.gov.sk).

Deleting your account

You can request deletion of your account and all associated data, even without the app installed, at /account-deletion

Age requirement

The app is intended for users aged 16 and over. If you are younger, please do not use the app without a parent or guardian's consent.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or in the app.