Draft Notice: This privacy policy is a draft pending legal review. It contains placeholder values that will be finalized before release.

Privacy Policy

Last updated: [DATE]

1. Introduction

[COMPANY NAME] (“[We/Us/Our]”) operates the Velocare mobile application (the “App”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Contact Information:

Legal Basis: [COMPANY REGISTRATION NUMBER, COUNTRY]

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

Alternative Authentication:

Bike and Maintenance Data:

Usage Preferences:

2.2 Information Collected Automatically

Device Information:

Location Data (When In Use Only):

Usage Analytics (if enabled after you accept):

2.3 Information from Third-Party Services

Strava Integration (optional, requires your explicit consent):

RevenueCat (Subscription Management):

3. How We Use Your Information

We use your information for the following purposes:

3.1 Core Service Delivery

3.2 Account Management

3.3 Service Improvement

3.4 Communication

We do NOT use your information for:

For users in the European Economic Area (EEA), UK, and Switzerland, we process your personal data under the following legal bases:

Data TypeLegal BasisPurpose
Account info (email, password)ContractNecessary to provide the service you signed up for
Bike & maintenance dataContractCore functionality of the app
Location (shops feature)ConsentYou explicitly enable location permission
Strava integrationConsentYou explicitly connect your Strava account
Push notificationsConsentYou explicitly grant notification permission
Crash reports & analyticsLegitimate InterestImproving app stability and performance
Subscription managementContractManaging your paid subscription

You have the right to withdraw consent at any time where we rely on consent.

5. Data Sharing and Disclosure

5.1 Service Providers We Use

We share data with these third-party services to operate the app:

Supabase (Database & Backend):

Strava (Ride Sync):

RevenueCat (Subscriptions):

Google Places API (Bike Shops):

Sentry (Crash Reporting):

Expo Push Notification Service:

Apple (Authentication & Payments):

5.2 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may disclose your information if required by law, court order, or government request, or to:

6. Data Retention

We retain your data for as long as your account is active, plus:

Data TypeRetention Period
Account dataWhile account exists + 30 days after deletion
Bike & maintenance dataWhile account exists, deleted on account deletion
Receipt photosWhile account exists, deleted on account deletion
Crash logs90 days (Sentry default)
Backup data30 days (Supabase automated backups)

After account deletion:

7. Your Rights (GDPR & CCPA)

7.1 European Users (GDPR)

You have the following rights:

Right to Access:

Right to Rectification:

Right to Erasure (“Right to be Forgotten”):

Right to Data Portability:

Right to Object:

Right to Restrict Processing:

Right to Withdraw Consent:

Right to Lodge a Complaint:

7.2 California Users (CCPA)

California residents have additional rights:

To exercise these rights, email [PRIVACY EMAIL] with subject “California Privacy Request”.

8. Data Security

We implement appropriate technical and organizational measures:

Technical Measures:

Organizational Measures:

Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Children’s Privacy

Velocare is not intended for users under 16 (or 13 in some jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us immediately at [PRIVACY EMAIL] and we will delete it.

10. International Data Transfers

For EEA/UK Users:

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Your continued use after changes constitutes acceptance of the updated policy.

The App does not use cookies (as it’s a native mobile app, not a website). We use:

13. Contact Us

For questions, concerns, or to exercise your rights:

Email: [PRIVACY EMAIL]
Mail: [COMPANY NAME], [REGISTERED ADDRESS]
Response Time: We aim to respond within 30 days (GDPR requirement)

For urgent matters regarding your data, mark your email “URGENT - Data Protection Request”.

14. App Store Privacy Labels

Data Collected and Linked to You:

Data Collected but Not Linked to You:

Data Not Collected:

© 2026 [COMPANY NAME]. All rights reserved.