Privacy Policy

Last updated: September 25, 2026

Rebound MTB ("we", "us") helps mountain bikers track and tune their suspension setups. This page explains what data the app collects, how it's used, and how to delete it.

Information we collect

• Account info: your email address, display name, and profile photo, provided by Apple, Google, or Strava when you sign in. If you sign in with Apple and choose to hide your email, we receive Apple's private relay address instead.
• Strava data: if you connect Strava, we import your ride activities (distance, elapsed time, elevation gain, date) so they can be linked to your suspension setups. We store your Strava access/refresh tokens so we can sync rides on your behalf.
• Rider profile: your body weight, if you provide it, used only to generate suspension and tyre-pressure suggestions.
• Content you create: bikes, suspension setups and snapshots (fork/shock pressure, sag, rebound/compression settings, tokens/spacers, tyre pressure and casing), maintenance logs, and any notes, ratings, trail names, or location (city/state) you enter for a ride.
• Activity: when your app last talked to our server, kept as a single timestamp on your account so we can tell which accounts are still in use. We do not track which screens you open or what you tap, and the app contains no analytics SDK.
• Crash reports: if the app or our server hits an error, we receive a report with the error, the screen or request it happened on, your device model and OS version, and the app version. Reports do not include your rides, setups, or weight.

How we use it

We use this data solely to provide the app's core functionality: recalling your suspension setups, syncing your Strava rides, and generating suggestions from your weight and conditions. We do not sell your data, and we do not share it with advertisers or data brokers.

Your Strava data is used only to import your own activity stats into the app. We do not post to Strava on your behalf, and we do not share your Strava data with any other third party.

Where it's stored

Your data is stored in our application database, hosted on Railway, with continuous encrypted backups to Cloudflare R2 for disaster recovery. OAuth tokens are stored server-side only for as long as needed to keep your connection active. You can disconnect Strava at any time from Settings → Rides → Disconnect Strava, or by revoking Rebound MTB at strava.com. Either way we delete your Strava access tokens immediately, remove imported rides you have not rated, noted, or assigned to a bike, and strip the Strava stats (distance, time, elevation, location, activity link) from the rides you have. Your own notes and ratings stay. Strava tokens are never kept after a disconnect.

Third parties

• Apple, Google & Strava — used only for sign-in and, for Strava, importing ride data at your request.
• Cloudflare R2 — encrypted storage for database backups.
• Railway — application hosting.
• Vercel — hosts this website and collects cookie-free, anonymous page-view and performance statistics for it. The app itself sends nothing to Vercel.
• Sentry — crash and error reporting for the app and the server. Sentry receives only the crash reports described above and keeps them for a limited time (currently 90 days).

Deleting your data

You can permanently delete your account at any time from Settings → Delete Account. This immediately and irreversibly deletes your user record and all associated bikes, setups, snapshots, rides, and maintenance logs, and revokes our access to your Strava account.

Your rights

You can ask us to access, correct, delete, or export the personal data we hold about you by emailing support@rebound-mtb.com. We respond within 30 days. Where the GDPR or UK GDPR applies, our lawful basis is performance of the service you asked for. California residents have the rights described in the CCPA; we do not sell or share personal information.

Children's privacy

Rebound MTB is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, we'll update this page and revise the date above.

Contact

Questions about this policy or your data? Email support@rebound-mtb.com.