Privacy Policy

1. Introduction

BikeRave ("we," "us," or "our") is operated by EvoTechnica. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the BikeRave platform ("Service"), including our website at bikerave.org and any related mobile applications.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: When you register, we collect your name, email address, and profile information via our authentication provider (Keycloak).
• Profile data: Display name, handle, profile picture (if provided), and any bio information you choose to add.
• Event data: When you create events, we collect event details including title, description, route information, location, dates, and ride settings.
• Audio uploads: Files you upload to the audio library, including associated metadata (title, artist, genre, duration, BPM, geographic tags).
• Communications: Messages you send to us for support or other inquiries.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent on the Service, and interaction patterns.
• Device information: Browser type and version, operating system, and device type.
• Log data: IP address, access times, and referring URLs, retained in server logs for security and debugging purposes.
• Location data: Only when you explicitly provide it for event creation or discovery features, and only with your permission.

2.3 Information from Third Parties

• Authentication providers: If you sign in via Google or another OAuth provider, we receive basic profile information (name, email, profile picture) from that provider. We do not store your OAuth provider ID in any publicly accessible data.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create and manage your account and authenticate you
• Enable event creation, discovery, and participation
• Power the audio library and synchronized playback features
• Send service-related communications (account verification, event updates)
• Respond to your support requests and inquiries
• Monitor for and prevent fraud, abuse, and security incidents
• Analyze usage patterns to improve the Service
• Comply with legal obligations

We do not use your information to serve targeted advertising.

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information in the following limited circumstances:

4.1 Public Information

The following information is publicly visible on the platform:

• Your display name and handle
• Events you create (unless set to private/unlisted)
• Audio tracks you upload to the shared library
• Your general geographic region (city/country) if you choose to display it

4.2 Service Providers

We share data with trusted service providers who assist us in operating the Service, including:

• Infrastructure: Vercel (frontend hosting), Railway (API hosting)
• Database: MongoDB Atlas (data storage)
• Authentication: Keycloak via EvoTechnica infrastructure
• Cloud storage: For audio file storage

All service providers are contractually obligated to use your data only to provide services to us and to maintain appropriate security.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of BikeRave, our users, or the public.

4.4 Business Transfers

If BikeRave or EvoTechnica is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

5. Cookies and Tracking

We use minimal cookies and local storage for:

• Authentication: Session tokens to keep you logged in
• Preferences: Theme setting (dark/light mode), nearby radius setting, and similar UI preferences stored in localStorage
• Functional: Remembering event filter and sort preferences

We do not use advertising trackers, analytics pixels, or third-party tracking scripts. We do not use fingerprinting or cross-site tracking.

You can clear cookies and localStorage at any time through your browser settings. Doing so will log you out and reset your preferences.

6. Audio Content and Storage

Audio files you upload are stored on our cloud infrastructure. By uploading audio, you represent that you have the rights to share that content. Audio files uploaded to the shared library are accessible to other BikeRave users.

Storage paths for audio files are generated using opaque identifiers and are not derived from your personal information. Direct links to audio files are not indexed or publicly advertised, but should be considered accessible to anyone with the link.

You can request deletion of your uploaded audio at any time by contacting privacy@bikerave.org.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Account data: Retained while your account is active; deleted within 90 days of account deletion request
• Event data: Retained indefinitely unless you delete events or your account
• Audio files: Retained until you delete them or request account deletion
• Server logs: Retained for up to 90 days for security and debugging purposes
• Deleted account data: Anonymized or purged within 90 days of deletion

8. Security

We take reasonable measures to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• HTTPS encryption for all data in transit
• Secure, authenticated API access for all write operations
• Server-side authentication for administrative functions
• Access controls limiting who can access production data

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you become aware of a security concern, please contact us at security@bikerave.org.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a portable, machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing in certain circumstances
• Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time

To exercise any of these rights, please contact us at privacy@bikerave.org. We will respond to verified requests within 30 days.

If you are in the European Economic Area (EEA) or United Kingdom, you have additional rights under GDPR/UK GDPR and may lodge a complaint with your local supervisory authority.

10. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at privacy@bikerave.org and we will take steps to delete such information.

For users between 13 and 18, parental consent may be required depending on your jurisdiction.

11. International Data Transfers

BikeRave is operated from Canada. If you access the Service from outside Canada, your information may be transferred to, stored, and processed in Canada and other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. We take steps to ensure adequate protections are in place for any international transfers.

12. Third-Party Services

The Service may integrate with or link to third-party services, including:

• Jamendo, Free Music Archive: Publicly licensed music sources that may be browsed within the library
• Mapping services: For route planning and display

These third-party services have their own privacy policies. We are not responsible for the privacy practices of third-party services. We encourage you to review their policies before using those services.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date at the top
• Sending notice to your registered email address for significant changes

Your continued use of the Service after changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy inquiries: privacy@bikerave.org
• General: hello@bikerave.org
• Legal: legal@bikerave.org

---

This policy was last updated on January 7, 2026, and applies to all users of the BikeRave platform.