Privacy Policy

Last updated: July 14, 2026

Rebound MTB ("we", "us") helps mountain bikers track and tune their suspension setups. This page explains what data the app collects, how it's used, and how to delete it.

Information we collect

• Account info: your email address, display name, and profile photo, provided by Google or Strava when you sign in.
• Strava data: if you connect Strava, we import your ride activities (distance, elapsed time, elevation gain, date) so they can be linked to your suspension setups. We store your Strava access/refresh tokens so we can sync rides on your behalf.
• Rider profile: your body weight, if you provide it, used only to generate suspension and tyre-pressure suggestions.
• Content you create: bikes, suspension setups and snapshots (fork/shock pressure, sag, rebound/compression settings, tokens/spacers, tyre pressure and casing), maintenance logs, and any notes, ratings, trail names, or location (city/state) you enter for a ride.

How we use it

We use this data solely to provide the app's core functionality: recalling your suspension setups, syncing your Strava rides, and generating suggestions from your weight and conditions. We do not sell your data, and we do not share it with advertisers or data brokers.

Your Strava data is used only to import your own activity stats into the app. We do not post to Strava on your behalf, and we do not share your Strava data with any other third party.

Where it's stored

Your data is stored in our application database, hosted on Railway, with continuous encrypted backups to Cloudflare R2 for disaster recovery. OAuth tokens are stored server-side only for as long as needed to keep your connection active; you can disconnect Strava at any time from Settings.

Third parties

• Google & Strava — used only for sign-in and, for Strava, importing ride data at your request.
• Cloudflare R2 — encrypted storage for database backups.
• Railway — application hosting.

Deleting your data

You can permanently delete your account at any time from Settings → Delete Account. This immediately and irreversibly deletes your user record and all associated bikes, setups, snapshots, rides, and maintenance logs, and revokes our access to your Strava account where possible.

Children's privacy

Rebound MTB is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, we'll update this page and revise the date above.

Contact

Questions about this policy or your data? Email support@rebound-mtb.com.