This policy explains what spinroute (“we”, “us”) collects, why, and the choices you have. We keep it short and specific on purpose.
What we collect
- Waitlist: your email address and the city you select. That's it.
- Account (in the app): the profile you create and the identity from your sign-in provider.
- Ride & location data (in the app): if you record rides, the GPS track and derived stats (distance, pace). Live location is only used while a feature you turn on needs it.
- Device & usage: basic, privacy-preserving analytics (anonymous event and screen counts) to understand what's working. We do not put your location or coordinates in analytics.
How we use it
- To email you once when your city opens (waitlist) — no drip marketing.
- To run the features you use: routing, live bikeshare availability, ride history, and the commute-to-fitness bridge.
- To keep the service secure and to improve it in aggregate.
Who processes your data
We use a small set of infrastructure providers under data-processing agreements, and we keep sensitive data on infrastructure we control:
- Listmonk — our self-hosted email tool, for the waitlist.
- Neon (database) and Tigris (file storage) — encrypted, for account, ride, and media data.
- Fly.io — application hosting.
- OpenPanel — product analytics, configured to receive anonymous events only.
Your ride traces and live location are never sold and are not handed to advertising networks.
Your rights
You can access, correct, export, or delete your data. In the app you'll be able to export or delete your account; for the waitlist you can unsubscribe or ask us to remove your email at any time. Depending on where you live (e.g. the EU/UK or California), you may have additional rights — we honor them regardless.
Retention
We keep data only as long as it's useful for the purpose above. Waitlist emails are removed on request or once they're no longer needed. Detailed ride tracks are archived and trimmed over time; summary stats may be kept for your history.
Security
Data is encrypted in transit and at rest with our providers, and access is limited to what's needed to run the service.
Children
spinroute isn't directed to children under 13, and we don't knowingly collect their data.
Changes & contact
We'll post material changes here and email waitlist members. Questions or requests:privacy@spinroute.app.