BikeLens is a tool for cyclists to compare bike geometry, save what matters, and find bikes that fit their body and riding style. Protecting the data you trust us with is part of that. This policy applies to the BikeLens website at bikelens.app and the services offered through it (together, the "Service").
Who we are
BikeLens ("BikeLens", "we", "us", or "our") operates the Service and is the controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at bikelensapp@gmail.com.
The short version
Here's the plain-English summary. The detail is below.
- We collect the minimum we need to run the Service: your email to sign you in, and the data you choose to save (comparisons, measurements, saved bikes).
- We never sell your personal data, and we don't run advertising or ad-tracking.
- We use a small number of trusted providers (for hosting, sign-in, payments, and privacy-friendly analytics) to operate the Service.
- You can access, correct, export, or delete your data at any time - just ask.
Data at a glance
A quick "nutrition label" for the data BikeLens handles. "Linked to you" means the data is stored against your account. Details follow in the sections below.
| Data | Why we collect it | Linked to you | Shared with |
|---|---|---|---|
| Email address | Sign you in and manage your account | Yes | Supabase |
| Name & profile photo (Google sign-in) | Your account, if you choose Google | Yes | Google, Supabase |
| Body measurements | Calculate your fit window and bike sizes | Yes | No one - stays in your account |
| Saved bikes, comparisons & garage | Save and revisit your research | Yes | Supabase |
| Subscription & billing status | Manage your subscription | Yes | Stripe |
| Bike geometry (for AI summaries) | Generate plain-English comparisons | No - about bikes, not you | OpenAI |
| Usage analytics | Understand and improve the Service | No - aggregate only | Vercel |
| Technical & log data | Deliver and secure the Service | Limited | Vercel, Supabase |
We do not sell your data, run advertising, or use cross-site tracking.
Data we collect
Information you give us
- Account details. When you sign up, we collect your email address. If you sign in with Google, we receive your name, email address, and profile picture from Google.
- Body measurements. If you use the Fit feature, you can enter measurements such as height, inseam, and (optionally) torso and arm length, along with your preferred riding posture. This is used only to calculate your fit window and recommend bike sizes.
- Your saved content. Bikes you save, comparisons you save, bikes you add to your garage, and your unit and display preferences.
- Waitlist. If you join a waitlist for an upcoming feature, we collect the email address you provide.
- Communications. Anything you send us directly, such as support emails.
Information collected automatically
- Usage data. Aggregate, privacy-friendly analytics about how the Service is used (for example, which pages are visited) so we can improve it. This does not use tracking cookies and is not used to build advertising profiles.
- Technical data. Standard server and log information such as IP address, browser type, device type, and timestamps, which is processed to deliver and secure the Service.
Information from third parties
- Sign-in providers. If you choose Google sign-in, Google shares basic profile information with us as described above.
- Payment provider. When you subscribe, our payment provider tells us your subscription status and a customer reference. We do not receive or store your full card details.
How we use your data
We use your personal data to:
- Create and manage your account and sign you in.
- Provide the core features - comparing bikes, saving comparisons, and calculating fit and size recommendations from your measurements.
- Generate AI comparison summaries when you request them (see below).
- Process and manage subscriptions and payments.
- Keep the Service secure, prevent abuse, and fix problems.
- Understand aggregate usage so we can improve the Service.
- Respond to your questions and comply with our legal obligations.
Legal bases (UK/EU)
If you are in the UK or European Economic Area, we rely on the following legal bases under the UK GDPR and EU GDPR:
- Performance of a contract - to provide the Service you sign up for, including your account, saved content, and subscription.
- Consent - for optional features you actively choose to use, such as entering body measurements or requesting an AI summary. You can withdraw consent at any time.
- Legitimate interests - to secure and improve the Service and understand aggregate usage, balanced against your rights.
- Legal obligation - where we must retain records (for example, for accounting relating to payments).
AI comparison summaries
Some features generate a plain-English summary of how bikes compare using a third-party AI provider (OpenAI). When you request a summary, we send the relevant bike names and geometry data to that provider to produce the text. We do not send your identity, email, or body measurements as part of this request. AI-generated summaries are provided for general guidance only and may contain inaccuracies - they are not professional fitting or purchasing advice.
Payments
Subscription payments are processed by Stripe. Your card details are entered directly with Stripe and are handled under their PCI-compliant systems. We receive only what we need to manage your subscription - such as your subscription tier, status, and a Stripe customer reference - and never your full card number. Stripe's handling of your data is governed by Stripe's Privacy Policy.
Cookies & analytics
We keep cookies to a minimum:
- Essential cookies. We use cookies that are strictly necessary to sign you in and keep your session secure. The Service will not work correctly without them.
- Analytics. We use privacy-friendly, aggregate analytics that do not rely on tracking cookies and do not build advertising profiles about you.
We do not use third-party advertising cookies or cross-site tracking.
Who we share data with
We do not sell your personal data. We share it only with service providers ("sub-processors") that help us run the Service, and only as needed. Each is bound to protect your data and use it only on our instructions.
| Provider | Purpose |
|---|---|
| Supabase | Database hosting and account authentication |
| Vercel | Website hosting and privacy-friendly analytics |
| Stripe | Subscription payments |
| Optional "Sign in with Google" | |
| OpenAI | Generating AI comparison summaries |
We may also disclose personal data if required by law, to enforce our terms, or to protect the rights, safety, and security of BikeLens and our users. If BikeLens is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction; we will notify you of any such change.
International transfers
We aim to host data in the UK/EU where possible. Some of our providers may process data in other countries, including the United States. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards - such as the European Commission's Standard Contractual Clauses and the UK equivalent - to ensure your data receives a comparable level of protection.
How long we keep data
We keep your personal data for as long as your account is active or as needed to provide the Service. If you delete your account or ask us to delete your data, we will remove it within a reasonable period, except where we must retain limited information to comply with legal obligations (for example, payment records), resolve disputes, or enforce our agreements. Aggregate, anonymised data that no longer identifies you may be retained.
Your rights
Depending on where you live, you have some or all of the following rights over your personal data:
- Access - request a copy of the data we hold about you.
- Rectification - correct data that is inaccurate or incomplete.
- Erasure - ask us to delete your data ("right to be forgotten").
- Portability - receive your data in a portable format.
- Restriction & objection - limit or object to certain processing.
- Withdraw consent - where we rely on consent, withdraw it at any time.
You can update or remove much of your data directly in the app - for example, editing your measurements or deleting saved comparisons. For anything else, contact us at bikelensapp@gmail.com and we will respond within the timeframe required by law. If you are in the UK or EEA and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.
Security
We take reasonable technical and organisational measures to protect your personal data, including encryption in transit, access controls, and row-level security on our database so that you can only access your own records. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we become aware of a data breach that affects you, we will notify you and the relevant authorities as required by law.
Children's privacy
The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.
Contact us
If you have questions, requests, or concerns about this policy or your personal data, contact us at bikelensapp@gmail.com.