Privacy Policy

This Privacy Policy explains how Covian LLC ("Covian", "we", "us") collects, uses, and shares information when you use MyBikes (the "Service"). We keep this short and plain because we expect you to actually read it.

1. What we collect

• Strava account data — your Strava athlete ID, display name, profile photo, and the list of bikes ("gear") in your Strava account, plus per-bike distance totals from your activities. We request only the scopes needed to provide the Service.
• Maintenance data you create — the components you add to each bike, install dates, service notes, and reminders you set.
• Billing data — when you subscribe, our payment processor handles your card details. We store only a customer ID, subscription status, and billing country.
• Basic usage logs — IP address, device type, and error logs, retained for security and debugging.

2. How we use it

• To run the Service: sync your bikes, calculate wear, surface reminders and tutorials.
• To process payments and manage your subscription.
• To send essential account emails (sign-in, billing, security, policy changes).
• To debug, secure, and improve the Service.

We do not sell your personal data. We do not use your data to train AI models.

3. Who we share it with

We share data only with service providers we need to run MyBikes:

• Strava — source of your bike and ride data, under your OAuth grant.
• Cloud hosting & database providers — to store your account and maintenance data.
• Payment processor — to handle subscriptions.
• Email provider — to deliver transactional emails.

We may also disclose data if required by law or to protect our rights and users.

4. Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain records (e.g. billing records for tax purposes).

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to certain processing, or to lodge a complaint with your local data protection authority. To exercise any of these rights, email us at s@covian.ai and we'll respond within 30 days.

6. Security

Data is encrypted in transit (HTTPS) and at rest. Access to production data is limited to authorized personnel. No system is 100% secure — if we ever detect a breach affecting your data, we will notify you without undue delay.

7. Children

MyBikes is not directed to children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

8. International transfers

Covian LLC is based in the United States. If you use the Service from outside the U.S., your data will be transferred to and processed in the U.S. and other countries where our service providers operate.

9. Changes

We'll update this policy as the Service evolves. Material changes will be announced in-app or by email at least 14 days before they take effect.

10. Contact

For any privacy question, data request, or concern, email s@covian.ai. The Service is operated by Covian LLC.