Privacy Policy

• Account: email address and password (handled by our authentication provider), or your Google account identifier if you sign in with Google.
• Profile: display name, age, gender option, bio, ride style, pace, bike types, and a home location you enter or pick on the map.
• Photos: a public bike photo (automatically screened so it contains a bicycle and not a face), an optional private face photo used only for the mutual identity-reveal feature, and an optional selfie submitted for rider verification.
• Messages: match chats, group-ride chats and organizer direct messages.
• Safety: liability-waiver acceptance and an optional emergency contact name, phone number and relationship.
• Rides: rides you create or join, including meeting location, date and time.
• Business / club accounts: business or club name, description, website, social link and logo submitted for review.

Location is used for three things only: showing cyclists inside your Cyclist Discovery Distance, showing rides inside your Ride Distance, and alerting you to new rides nearby. You can grant device location or set your location manually — the app works either way, and denying the permission never blocks messaging, matches you already have, rides you joined, or your profile.

Your exact coordinates are never shown to another cyclist. Other riders only ever see a rounded approximate distance such as “12 km away”. Distance filtering runs on our backend so raw coordinates are not sent to other users’ devices.

• Match you with cyclists within both riders’ selected distance limits.
• Show, and notify you about, group rides within your ride distance.
• Deliver messages, match alerts and ride updates (registration, changes, cancellations).
• Screen public photos for bike-only content and review verification requests.
• Operate paid memberships and one-time boosts.
• Investigate blocks, reports and safety issues.

We do not sell personal data. We share only what is required with the service providers that run the app: our cloud database, storage and authentication provider; our payment processor (Stripe) for subscriptions and boosts; a map/geocoding provider (OpenStreetMap Nominatim) to turn addresses into coordinates; and an AI provider used solely to check that a public profile photo shows a bicycle. Content may also be disclosed where required by law or to address an urgent safety risk.

You can permanently delete your account at any time from Profile → Settings → Delete account. Deletion is immediate and irreversible: your profile, photos, matches, swipes, messages, ride participation records, rides you organised, safety details, reports and login account are removed, any active subscription is cancelled, and you disappear from cyclist discovery and future matching. Limited transaction records may be retained by our payment processor where financial law requires it.

All data access is enforced on the backend with per-row database rules, so a request cannot be manipulated to read another rider’s private messages, private photos, coordinates or subscription details. Private photos are served through short-lived signed links only.

Only Bikes is not intended for anyone under 13, and accounts require an age of 13 or over.

• Edit or remove profile details and photos at any time.
• Change or narrow your distance preferences.
• Block or report another rider.
• Turn notification permission on or off in iOS Settings.
• Delete your account entirely.

Questions about this policy or your data can be sent through the in-app Safety Center, or to the support address published on the App Store listing.