Privacy Policy

At Singletrack ("we," "us," or "our"), we are committed to protecting your privacy. We are based in Norway, and this Privacy Policy explains how we collect, use, and share information about you when you use our mobile application ("App") and website ("Service"). We comply with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

1. Information We Collect

1.1 Information You Provide to Us

• Account Information: When you create an account, we may collect your name, email address, profile photo, and authentication credentials (including Apple Sign-In data).
• Social Data: We collect social interactions such as ride comments, trail reviews, follows, and likes.
• Questionnaires: Any responses provided to questionnaires or surveys within the App.

1.2 Health and Location Data

As a ride tracking app, we rely on specific health data to provide our core services:

• Location Data: Precise GPS coordinates (latitude, longitude, elevation) recorded during your mountain biking activities. This data is used to map your rides, calculate statistics, and generate leaderboards.
• Health & Fitness Data: Metrics such as speed, hearthrate, calorie consumption, distance, ride duration, and other movement data collected during your ride.

1.3 Information We Collect Automatically

• Device Information: Push tokens, device models, operating system versions, and unique device identifiers to deliver notifications and improve app performance.

2. How We Use Your Information

• Core Service: Recording your rides, generating heatmaps, analyzing trails, and maintaining leaderboards.
• Social Features: Allowing you to interact with other riders and share your trail experiences. Public rides act as contributions to the community map.
• Communication: Sending important app updates, support messages, or push notifications (if enabled).
• App Improvement: Analyzing usage data to fix bugs, optimize performance, and detect fraudulent activities.

3. Data Storage and Processor

We are based in Norway. To operate our application globally and reliably we use Supabase for our database and backend services.

• Server Locations: Your data is processed and stored securely on servers located in London (UK) and Finland (EU). The UK is recognized by the EU as having adequate data protection laws.
• Data Security: We employ robust security measures provided by Supabase to protect your personal data from unauthorized access, alteration, or disclosure.

4. Third-Party Sharing

We only share information with third parties when absolutely necessary to provide our service:

• Service Providers: We share data with vendors, consultants, and service providers (such as Supabase for database and authentication) who carry out work on our behalf.
• Apple: For users signing in or registering natively with Apple Sign-In.
• Legal Process: We may disclose information if we believe disclosure is in accordance with, or required by, any applicable law or legal process.

5. Your GDPR Privacy Rights

Under the GDPR, you possess the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we update or correct inaccurate data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your account and associated ride/health data.
• Right to Restrict Processing: You can ask us to pause processing your data.
• Right to Data Portability: You can request your data in a structured, commonly used format.

6. Data Retention

We retain your personal data and ride history as long as your account is active. If you choose to delete your account, your personal data, including tracked rides and health data, will be permanently deleted from our servers.

7. Contact Us

For privacy-related inquiries, data deletion requests, or questions regarding this policy, please contact us at:

• Company: Enkel Læring AS
• Organisation Number: 935 422 728
• Email: thomas@singletrackmtb.app