Privacy Policy

The RidePals app and this website. If what we collect changes, this page changes with it.

When you sign up we store your name, your email address and, if your provider supplies one, your profile photo. You can create an account with an email and password, with Google, or with Apple. If you use “Sign in with Apple” and choose to hide your email, we receive the private relay address Apple generates and that is the only address we hold. We also store the preferences you set on your profile, such as your discipline and your province.

You can save the name, phone number and optional medical notes of a person to contact in an emergency. This is information about someone else, so please only add it with their permission.

The person you add is not a user of the app and cannot be notified by us, which is why we ask you to add them only if they agreed to it.

You can change or remove it at any time from your profile, and it is deleted along with your account.

When you create a ride or a club we store what you write: the title, description, date, meetup point and any images you upload, such as a club logo or banner. This is visible to other people using RidePals, and public rides and clubs can also be seen on this website without signing in. The exact meetup point is not shown publicly — the public map publishes only an approximate area.

Linking Strava is optional. If you do, we read your profile and recent activities once, to count how many cycling rides you have in the previous six months, and we keep only the result: your Strava id and whether you cleared the bar. We revoke the permission immediately afterwards. We do not store your Strava tokens, we do not keep your activities, and we have no ongoing access to your account.

If you turn on notifications we store your device's notification identifier and whether it is iOS or Android, so we can tell you what is happening on your rides. It is deleted along with your account.

The app asks for location permission so it can centre the map where you are. That location is used on your device and nowhere else: it is not sent to our servers, not stored, and not shared with anyone. The permission is only while you are using the app — never in the background — and if you decline it the map still works, it just opens on the national view.

If you write to us through the contact form we store your message, your email address, your name if you choose to give one, and the IP address the message was sent from. The IP is kept to limit abuse of the form. Beyond that, this site asks nothing of you to browse it.

We do not sell your data and we do not share it with advertisers. The services we use to make RidePals work are:

• Supabase — our database, sign-in, and image storage.
• Amazon Web Services — hosts this website.
• Expo — delivers notifications to your device.
• Resend — emails us the notification when someone uses the contact form.
• Google — Google sign-in if you choose it, the map on Android, and place search inside the app — what you type when searching for a meetup point is sent to Google to fetch the suggestions.
• Apple — “Sign in with Apple” if you choose it, and the map on iOS.
• Strava — only if you choose to verify, and only that once.
• OpenStreetMap — supplies the map imagery on this website, so their server receives the IP address of anyone who visits it.

This site uses no tracking cookies and no analytics tools, and the app ships no advertising or tracking SDK. There is no cookie banner because there is nothing to consent to.

You can delete your account at any time from your profile in the app, without writing to us or asking permission. Doing so deletes:

• your profile, your name and your photo;
• your emergency contact and any medical notes you saved;
• the log of who viewed your emergency contact;
• your devices' notification identifiers;
• the rides you hosted and the clubs you own, along with their sign-ups.

Images you uploaded for a club or as a profile photo live in separate file storage and may remain there after the account is deleted. If you want those removed too, write to us and we will do it.

This policy may change. The current version is always at this URL, and the date shown above is when it was last updated.

Questions about your data, or want something deleted? Get in touch through the contact form on this site.