bitBykes

Privacy Policy

Last Updated: 10-12-2025

bitBykes B.V. ("we," "us," or "our") operates the bitBykes Platform (the "Service"). We are committed to protecting your privacy and ensuring the security of your personal data.

This Privacy Policy explains what information we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).

1. Data Controller

For the purposes of the GDPR, the controller of your data is: bitBykes B.V. G.J. de Jonghweg 4-6 The Netherlands Email: support.bitbykes@greaseheadd.dev

2. Information We Collect

We collect the following types of information to provide the functionality of our bicycle computer platform:

A. Personal Identification Information

  • Email Address: Used for account creation, login, and password recovery.
  • Third-Party Authentication Data: If you log in via Google or Strava, we receive an authentication token and your email address from these providers. We do not access your friends lists or other extraneous social data unless explicitly authorized.

B. Physical & Health Metrics

  • Sex: Used to calculate specific physiological metrics.
  • Weight: Used to calculate power-to-weight ratios and calorie burn estimations.

C. Device and Activity Data

  • Activity Logs: Data uploaded from your bicycle computer (e.g., speed, distance, cadence, time).
  • Device Settings: Configuration preferences for your paired hardware.

3. How We Use Your Data

We process your data for the following specific purposes:

  1. To Provide the Service: To authenticate your identity and allow you to pair devices.
  2. Data Visualization: To generate graphs and analyze your cycling performance (requires weight and sex data).
  3. Security: To encrypt communications between your device and our cloud.

4. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Performance of a Contract: We need your email and device data to provide the Service you signed up for.
  • Consent: By providing your Sex and Weight (health-related data), you explicitly consent to our processing of this data for the purpose of performance analysis. You may withdraw this consent at any time by deleting the data or your account.

5. Data Storage and Security

We take the security of your data seriously.

  • Encryption: All communication between your bicycle computer, your web browser, and our cloud servers is encrypted (e.g., via HTTPS/TLS).
  • Secure Cloud: Your data is stored in our secure private cloud infrastructure.
  • Access Control: Access to personal data is restricted to authorized personnel (or project team members) only.

6. Third-Party Services

We use specific third-party providers to enable authentication. By using these options, you are also subject to their privacy policies:

  • Google OAuth: For authentication.
  • Strava OAuth: For authentication.
  • Spotify OAuth: For authentication.

We do not sell, trade, or rent your personal identification information to others.

7. Data Retention

We retain your personal data only for as long as your account is active.

  • If you delete your account, your personal data (email, weight, sex) and associated activity graphs are permanently removed from our active databases.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights:

  • Right to Access: You can request a copy of the data we hold about you.
  • Right to Rectification: You can update your weight, sex, or email settings directly within the app.
  • Right to Erasure ("Right to be Forgotten"): You can delete your account at any time, which erases your data.
  • Right to Data Portability: You have the right to request your data in a structured, commonly used format.

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at: