Timpanogos TechUnited States
Privacy / Biketopia

Privacy policy

Biketopia

Last updated 7 October 2026

Who we are

Biketopia is published and operated by Timpanogos Tech, LLC, United States. If you have a question about anything here, email us.

What we collect

CategoryWhat it includesWhy
Account Email address, and optionally a phone number, display name, profile photo, and a general location such as a city or region To create and secure your account and show you to other riders
Sign-in One-time email codes, session records, and — if you use it — your Sign in with Apple identifier To sign you in and keep you signed in
Rides and routes Routes you build, rides and series you plan, RSVPs, meetups, attendance, and saved searches To run the core features of the app
Live ride location Your position during a live ride session, shared with the riders in that session So a group can see each other on the map while riding. Collected only during an active live session
Bikes and maintenance Your bikes, components, setups, installation history, and service records To track wear and tell you when service is due
Social Messages and conversations, comments, reactions, friendships, clubs, and fleets To let riders coordinate and talk to each other
Connected services Activities and identifiers from Strava, Garmin, or Wahoo, when you choose to connect them To bring in your rides and push routes to your device. Connecting is optional
Notifications Push subscription tokens and your notification preferences To send the alerts you have turned on
Assistant Messages you send to the in-app assistant and route-building requests To answer you. These are processed by Anthropic and are not used to train models
Diagnostics Crash and error reports, and aggregate usage analytics To find and fix problems

What we do not do

We do not sell your personal information. We do not show advertising, we do not use advertising identifiers, and we do not share your data with advertisers or data brokers.

Who processes your data

We use the following services to operate Biketopia. Each receives only what it needs to do its job.

  • Supabase — database and storage for profile photos
  • Vercel — application hosting and aggregate analytics
  • Brevo — sending sign-in and notification emails
  • Apple — Sign in with Apple, if you use it
  • Strava, Garmin, Wahoo — only if you connect them, and only for the data those connections cover
  • Mapbox — maps and map tiles
  • Google Places — looking up bike shops and places
  • Anthropic — powering the in-app assistant
  • Sentry — crash and error reporting
  • Firebase Cloud Messaging — delivering push notifications
  • Upstash — rate limiting to protect the service

Who else can see your activity

Biketopia is social by design, and different things have different defaults:

  • Routes you build are private by default. They stay yours until you choose to share them.
  • Rides and ride series are public by default, so other riders can find them and join. You can make a ride private and invite specific people instead.
  • Clubs can be public or private, set when the club is created.
  • Rides you bring in from Strava, Garmin, or Wahoo are anonymous by default when matched to a group ride — you choose whether to share the details.
  • Leaderboards and friend activity can be turned off in your privacy preferences.
  • Live ride position is visible only to riders in that live session, and only while it is running.
  • Messages are visible to the people in that conversation.

How long we keep it

We keep your account data for as long as your account is open. When you ask us to delete your account, we remove it and the personal data associated with it within 30 days — the delay is a grace period in case the request was a mistake, and after it the deletion is permanent.

Some things fall outside that. Live ride positions are kept only for the session and a short period afterwards. Messages you sent remain visible to the people who received them. Diagnostic and crash logs, which are not tied to your profile, age out on their own. We may also keep what the law requires us to keep.

Your choices

  • You can edit or remove most of your content in the app at any time.
  • You can change route, ride, leaderboard, and friend-activity visibility in your settings.
  • You can disconnect Strava, Garmin, or Wahoo at any time in connected apps.
  • You can turn notifications off in the app or in iOS Settings.
  • You can request a copy of your data, a correction, or deletion of your account by emailing us. We respond within 30 days.

Where Biketopia is available

Biketopia is offered in the United States, and the data it holds is processed in the United States. If we make it available elsewhere, we will update this policy first.

Children

You must be at least 13 years old to use Biketopia. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email us and we will remove it.

Security

Data is transmitted over encrypted connections and held with the providers listed above. No service is perfectly secure, but we limit what we collect and who can reach it.

Changes to this policy

If this policy changes in a way that materially affects how your data is handled, we will update the date at the top and, where appropriate, tell you in the app.

Contact

Timpanogos Tech, LLC
United States
Email