Privacy policy
Biketopia
Last updated 7 October 2026
Who we are
Biketopia is published and operated by Timpanogos Tech, LLC, United States. If you have a question about anything here, email us.
What we collect
| Category | What it includes | Why |
|---|---|---|
| Account | Email address, and optionally a phone number, display name, profile photo, and a general location such as a city or region | To create and secure your account and show you to other riders |
| Sign-in | One-time email codes, session records, and — if you use it — your Sign in with Apple identifier | To sign you in and keep you signed in |
| Rides and routes | Routes you build, rides and series you plan, RSVPs, meetups, attendance, and saved searches | To run the core features of the app |
| Live ride location | Your position during a live ride session, shared with the riders in that session | So a group can see each other on the map while riding. Collected only during an active live session |
| Bikes and maintenance | Your bikes, components, setups, installation history, and service records | To track wear and tell you when service is due |
| Social | Messages and conversations, comments, reactions, friendships, clubs, and fleets | To let riders coordinate and talk to each other |
| Connected services | Activities and identifiers from Strava, Garmin, or Wahoo, when you choose to connect them | To bring in your rides and push routes to your device. Connecting is optional |
| Notifications | Push subscription tokens and your notification preferences | To send the alerts you have turned on |
| Assistant | Messages you send to the in-app assistant and route-building requests | To answer you. These are processed by Anthropic and are not used to train models |
| Diagnostics | Crash and error reports, and aggregate usage analytics | To find and fix problems |
What we do not do
We do not sell your personal information. We do not show advertising, we do not use advertising identifiers, and we do not share your data with advertisers or data brokers.
Who processes your data
We use the following services to operate Biketopia. Each receives only what it needs to do its job.
- Supabase — database and storage for profile photos
- Vercel — application hosting and aggregate analytics
- Brevo — sending sign-in and notification emails
- Apple — Sign in with Apple, if you use it
- Strava, Garmin, Wahoo — only if you connect them, and only for the data those connections cover
- Mapbox — maps and map tiles
- Google Places — looking up bike shops and places
- Anthropic — powering the in-app assistant
- Sentry — crash and error reporting
- Firebase Cloud Messaging — delivering push notifications
- Upstash — rate limiting to protect the service
Who else can see your activity
Biketopia is social by design, and different things have different defaults:
- Routes you build are private by default. They stay yours until you choose to share them.
- Rides and ride series are public by default, so other riders can find them and join. You can make a ride private and invite specific people instead.
- Clubs can be public or private, set when the club is created.
- Rides you bring in from Strava, Garmin, or Wahoo are anonymous by default when matched to a group ride — you choose whether to share the details.
- Leaderboards and friend activity can be turned off in your privacy preferences.
- Live ride position is visible only to riders in that live session, and only while it is running.
- Messages are visible to the people in that conversation.
How long we keep it
We keep your account data for as long as your account is open. When you ask us to delete your account, we remove it and the personal data associated with it within 30 days — the delay is a grace period in case the request was a mistake, and after it the deletion is permanent.
Some things fall outside that. Live ride positions are kept only for the session and a short period afterwards. Messages you sent remain visible to the people who received them. Diagnostic and crash logs, which are not tied to your profile, age out on their own. We may also keep what the law requires us to keep.
Your choices
- You can edit or remove most of your content in the app at any time.
- You can change route, ride, leaderboard, and friend-activity visibility in your settings.
- You can disconnect Strava, Garmin, or Wahoo at any time in connected apps.
- You can turn notifications off in the app or in iOS Settings.
- You can request a copy of your data, a correction, or deletion of your account by emailing us. We respond within 30 days.
Where Biketopia is available
Biketopia is offered in the United States, and the data it holds is processed in the United States. If we make it available elsewhere, we will update this policy first.
Children
You must be at least 13 years old to use Biketopia. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email us and we will remove it.
Security
Data is transmitted over encrypted connections and held with the providers listed above. No service is perfectly secure, but we limit what we collect and who can reach it.
Changes to this policy
If this policy changes in a way that materially affects how your data is handled, we will update the date at the top and, where appropriate, tell you in the app.
Contact
Timpanogos Tech, LLC
United States
Email