Privacy Policy

MTB Mate (“the app”, “we”, “us”) helps you calculate mountain-bike tire pressures and suspension settings. This policy explains what personal data we collect, why, who we share it with, and the choices and rights you have. It covers the MTB Mate Android app and this website.

The short version

• The calculator works without an account — if you don’t sign in, your data stays on your device.
• Sign in with Google to save and sync your bikes, setups and rider profiles across devices.
• We use Google / Firebase for accounts, storage, analytics, crash reports, AI advice and payments, and Vercel to host this website.
• We don’t sell your data, show ads, or track you across other apps or websites.
• You can opt out of app analytics and delete your account and data at any time.

1. Who we are

The data controller for MTB Mate is David Aguirre. For any privacy question or to exercise your rights, contact us at davagdroid@gmail.com.

2. The data we collect and why

Account & rider profile

When you sign in with Google, we receive your email address, display name, profile photo and a Google account identifier. You can also create rider profiles containing a nickname, weight, height and riding level. We use this to create your account, personalize calculations and sync your data across devices. Legal basis: performance of our contract with you.

Your setups and activity

When you’re signed in, we store the content you create: bikes, bike setups, tire pressures, suspension settings, ride history, parts and service records (including any cost and shop you note) and preferences (units, language, interface mode). This is stored in Google Cloud Firestore, and profile photos in Firebase Storage, so you can reach it on any device. Legal basis: performance of our contract with you.

Usage analytics

We use Google Analytics for Firebase to understand how the app is used. It collects app events, screens viewed, features used, and technical details such as device model, operating-system and app version, language, approximate region (derived from your IP address, not precise location) and a Firebase app-instance identifier. Analytics is on by default and you can turn it off at any time in Settings. Legal basis: our legitimate interest in improving the app; you can object by switching it off.

Website analytics

On this website (not in the app) we use Vercel Web Analytics to count page views and see which pages and referring sites bring people here. It is cookieless — it stores nothing on your device — and it records the page visited, the referring site, and coarse technical details such as browser, operating system, device type and country. To count a visit only once it derives a temporary identifier from your IP address and browser, which is rotated regularly and is not used to build a profile or follow you across other sites. Legal basis: our legitimate interest in understanding how the site is used.

Crash and diagnostic reports

We use Firebase Crashlytics to detect and fix crashes. When the app crashes it sends a crash report — a stack trace, device model, OS and app version, and a diagnostic identifier. You can turn crash reporting off in Settings. Legal basis: our legitimate interest in a stable, working app; you can object by switching it off.

Voice input

Some screens let you speak instead of typing — a ride debrief, or a note about how the bike felt. While you record, the app uses your device’s microphone together with the speech-recognition service built into your device to turn speech into text. The audio itself never reaches us: that service handles it — depending on your device it may do so on the device or on its provider’s servers, under that provider’s own privacy policy — and the app only ever receives the resulting text. We do not record, store or transmit audio. The text is then sent to Google Cloud Vertex AI, as described below, to turn it into setup suggestions. Voice input is optional: you can decline the microphone permission and type instead. Legal basis: performance of our contract / your request to use the feature.

AI tuning advisor (Premium)

If you use the optional AI tuning advisor, details about your bike and its current setup are sent to Google Cloud Vertex AI (the Gemini model) to generate suggestions. We do not send your name or email for this, and Google does not use this data to train its foundation models. Legal basis: performance of our contract / your request to use the feature.

Purchases

If you subscribe to Premium, the payment is handled by Google Play. We receive your subscription status and a purchase token (which we validate on our server) — we never receive or store your card number or payment details. Legal basis: performance of our contract with you.

Device and permissions

The app uses the internet / network permission (to sync and provide the service), the notifications permission (to show app notifications) and the microphone permission (only while you use voice input — see above; you can decline it and type instead). We do not access your location, camera, contacts or files, and we do not use advertising identifiers.

3. Who we share your data with

Our infrastructure provider for the app is Google (Google LLC, United States, and Google Ireland Ltd). Google/Firebase provides the services above: Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Analytics, Crashlytics, Vertex AI and Google Play billing. Google processes this data as our service provider, and for analytics and crash data also under its own terms.

This website is hosted by Vercel (Vercel Inc., United States), which also provides the cookieless website analytics described above and processes that data as our service provider.

We do not sell your personal data, share it with advertisers, or use it to track you across other apps or websites. We may disclose data if we are legally required to do so.

4. International data transfers

Google and Vercel may process your data on servers located in the United States and other countries outside your own. Where data is transferred out of Switzerland, the European Economic Area or the UK, it is protected by Standard Contractual Clauses and their equivalent safeguards.

5. How long we keep your data

• Account and setup data — kept while your account is active.
• When you delete your account, your personal data is removed from our systems, apart from a short grace period needed to process the deletion and clear backups, after which it is permanently deleted.
• Guest / offline data — stored only on your device; it is removed when you clear the app’s data or uninstall it.
• Analytics and crash data — retained for a limited period under Firebase’s default retention, then deleted or aggregated; website analytics is kept by Vercel as aggregated counts for a limited period.

6. Your rights

You have the right to access, correct, delete, export, restrict or object to the processing of your personal data, and to withdraw consent where processing is based on it. You can:

• view, edit or delete your bikes, setups and profiles directly in the app;
• delete your account and all associated data in Settings → Delete account, or at mtbmate.com/delete-account;
• turn analytics and crash reporting off in Settings;
• or email us at davagdroid@gmail.com.

If you are in Switzerland, the EEA or the UK, you also have the right to lodge a complaint with your data protection authority — in Switzerland the FDPIC, in France the CNIL.

7. Security

Your data is encrypted in transit and at rest on Google’s infrastructure. Access is restricted by Firebase security rules, and we use Firebase App Check to reduce abuse of our services.

8. Children

MTB Mate is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “last updated” date above, and we’ll highlight any significant changes in the app or on this page.

10. Contact

Questions about your privacy? Contact David Aguirre at davagdroid@gmail.com.