Draft. This policy has not been reviewed by a lawyer yet and will change before the app is publicly released.
1. Who we are
Inclina (the app, inclina.app and ride.inclina.app) is run from Switzerland by Tucker Valdeze. For anything about your data, use Report an issue → Something else in the app, or write to privacy@inclina.app. This policy follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
2. The short version
- We collect as little as we can. No ads, no tracking, no selling or sharing your data for marketing.
- Without an account, your rides, routes and places stay on your phone.
- With an account, we keep only what's needed to sign you in and what you choose to back up or sync.
- You can see, change and delete it, and deleting your account deletes it from our server.
3. What we keep, and why
- Your account: your email address (or Apple's private relay address), the IDs Apple or Google give us when you sign in with them, your passkeys' public keys (never the passkey itself), your name and profile picture if you add them, and when you signed up and last signed in. Why: to sign you in and show your account.
- Sign-in sessions: a random token per device, which we keep only in scrambled (hashed) form. Why: to keep you signed in.
- Routes, places, bikes and settings you sync: only when you turn sync on. For each bike with a photo, a small copy of the photo (about 50 kB), made on your phone without the location or time the photo was taken. Why: so they appear on your other devices and the website.
- Rides you back up: the track and its summary, only when you turn backup on. You can hide the start and end of each ride. Why: so you don't lose them.
- If you set up encryption: your synced routes, places, bikes, bike photos and settings and your backed-up rides are locked on your phone or in your browser with a key only your devices have, before they reach us. We then keep only the locked copies, plus what we need to store them: which account they belong to, their size (rounded up, so it says little about a ride's length) and when they were saved. We can't open them, and neither can anyone who gets hold of our server. The key is also kept with us locked under your 12-word recovery phrase, which we never see, and under each passkey that unlocks them; only that passkey can open its copy, and what it gives to open it never leaves your device. So the phrase can stand in for a lost passkey when you sign in, we also keep a one-way check made from your key, which can't be turned back into it. If you lose all your devices and the phrase, nobody can open your rides again, not even us. Why: so where you ride stays yours.
- Reports you send: road reports are shown to other riders without your name. "Report an issue" keeps what you wrote and, if you chose, the location. Why: to fix the map and the app.
- Your subscription, if you buy a plan: in the app, Apple's transaction IDs for it, the product (plan and how often you pay), when it started, renews or ends, whether it renews, whether a payment is being retried, whether it's shared with your family, and a random ID we made only for Apple, so Apple's messages about your purchase reach your account. We never see or keep your card or Apple payment details. Why: to give you the plan you paid for.
- Your plan and staff notes: which plan your account has, how you were invited, and notes our team writes about the account (for example about a support conversation). Why: to run the service fairly.
- Server logs: your IP address, the time and the request, for a limited time. Why: security and fixing problems.
4. Your location
The app uses your location on your phone to show you on the map, plan routes and guide you. To calculate a route, its points are sent to our server, which works out the route and doesn't keep it. To show your ridden roads, a ride's track is sent to our server once to match it to roads and isn't kept. Live group positions (when group rides arrive) are kept only while the ride lasts.
5. Who else handles data
We use a few providers, only for what's listed:
- OVH (hosting, in the EU): our servers and database.
- Brevo (EU): sends the sign-in codes by email.
- Namecheap (hosting): our website inclina.app, and the email inboxes you can write to (support@ and privacy@inclina.app). The website has no analytics and sets no tracking cookies; like any website, its server sees your IP address.
- Apple and Google: only if you sign in with them. They tell us who you are; we don't send them your data.
- OpenFreeMap: delivers map images; like any website, it sees your IP address when your device loads them.
- OpenStreetMap: map problems you report may be passed on as public notes for its volunteer mappers, without your name or account.
- Apple (Ireland and USA): sells plans in the app through the App Store, and handles payment, renewals, refunds and Family Sharing under its own terms and privacy policy. It tells us about your purchase (the details in section 3) and we ask it for your subscription's status; we send it only the random ID made for Apple, never your email, name or rides. To cancel or ask for a refund, use your Apple subscriptions.
- MEGA (S4 object storage): keeps our nightly backup copies of the database, so your data can be restored if our server fails. A copy is kept for 14 days, so a deleted account is gone from the backups 14 days later.
- GitHub (USA): problems with the app you report become tasks in our private issue tracker, without your email.
- Cloudflare (USA; the files are stored in the EU): delivers offline map downloads (Cloudflare R2), as we move them there from our own server. Like any download server it sees your device's IP address and which region's files it downloads, not your account. The link your app gets for a download works for an hour and carries no account details.
Some providers are outside Switzerland. We use them only where the law allows, with suitable safeguards.
6. How long we keep it
Your account data until you delete your account. Synced routes, places, bikes, bike photos, settings and backed-up rides until you delete them, turn sync or backup off and remove them, or delete your account. Backup copies of the database for 14 days (section 5). Payment records at Apple as long as the law requires; our record of an App Store subscription until you delete your account. Sign-in codes expire after 10 minutes. Server logs for a limited time. A record of staff actions (for example suspending an account) is kept to keep the service safe.
7. Cookies and storage on the website
The website uses one cookie to keep you signed in, and stores a few settings (like light or dark mode) in your browser. No tracking or advertising cookies.
8. Your rights
You can ask what data we have about you, have it corrected or deleted, get a copy, and object to how we use it. Most of it you can do yourself: change your name, email, picture and sign-in methods, or delete your account, in the app or on the website. For anything else, contact us (section 1). You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), or the authority in your EU country.
9. Children
Inclina isn't meant for children under 16.
10. Changes
Inclina is in development, so this policy will change as features do. The app and the website show the date of the current version. For important changes we'll tell you in the app.