Privacy Policy

Stone Bicycle Coalition iOS App — Effective April 1, 2026 · Last Updated October 30, 2026

Overview

Stone Bicycle Coalition ("the App") is a free community cycling app. Your privacy matters. This policy explains what the App does with your data.

The short version: Your data stays on your device. The App collects nothing — no accounts, no analytics, no ads, no trackers — and sends no personal data to our servers. We never sell your data.

Data Stored Locally on Your Device

Ride recordings — GPS tracks, distance, elevation, and duration from rides you record
Expedition journal entries — photos, notes, audio, and GPS data you capture during rides
User preferences — app settings, onboarding state, favorite routes
Ride history — session counts, total miles, and season statistics

This data stays on your device and is not transmitted to us or anyone else. We do not operate any server that receives personal data from the App.

Co-op Edition Features (turned off in this app)

Stone Bicycle Coalition publishes an open-source toolkit so other bike co-ops can build their own edition of the app. Two optional features in that toolkit — member sign-in (which would email you a sign-in link) and route submission (which would send a route you recorded to the co-op for review) — transmit data to a server only if a co-op enables them. Both are turned off in the Stone Bicycle Coalition edition, and neither can be switched on from inside the app. If a co-op edition you use enables either one, that co-op's own privacy policy will describe it.

Permissions the App Requests

Location (Optional)

Used to record GPS tracks during rides and show your position on route maps
Location data is stored only on your device. It leaves the device only if you deliberately connect a third-party route provider or tap a trail-conditions lookup (see "Third-Party Services")
You can deny location permission and still browse routes, bikes, events, and community content
Background location is used only during active ride recording with a visible notification
Rally Radio can optionally share your live position with nearby riders peer-to-peer (default off) — this goes device-to-device only and never reaches our servers

Camera (Optional)

Used to capture photos for expedition journal entries; photos are stored locally on your device
You can deny camera permission and still use all other app features

Nearby Devices / Local Network and Microphone (Rally Radio)

Rally Radio uses Apple's MultipeerConnectivity framework and your microphone for peer-to-peer push-to-talk voice chat during group rides
Audio and any shared position travel directly device-to-device on the local network — no data passes through any server, nothing is recorded or stored, and no accounts or identities are created
Your group shares a ride code. Only phones with the same code can hear you or see a position you choose to share; everything sent is encrypted with a key made from that code. Share the code in person.

Apple Health (Optional)

If you allow it, the App reads cycling workouts (route, heart rate, cadence, power, calories) and heart-rate variability, and can save your rides to Health as workouts
Health data stays on your device. It is never sent to us and the App does not put it in iCloud Drive
Rides imported from Health and your daily recovery journal (practices, HRV, reflections, voice notes) are excluded from iCloud/device backups. Rides you record in the App are included in your own device backup, because they are the only copy
Earlier versions (up to 0.90 build 2) copied the daily recovery journal to your own iCloud Drive. That no longer happens; More → Mission Control can delete the journal on this device and, separately, remove copies an older version left in iCloud Drive. Copies already inside an older iCloud Backup can't be removed by the App

Data We Do NOT Collect

No name, email, phone number, or address
No device identifiers or fingerprinting
No usage analytics or telemetry
No crash reporting to external services
No advertising identifiers
No cookies or web tracking

Third-Party Services

The App does not integrate with any third-party analytics, advertising, or tracking services. The only external connections are:

Apple Maps (MapKit) — in-app maps and map images on shared ride cards are drawn by Apple Maps, which receives the map area being shown. Ride cards default to "Stats only", which requests no map.
Map tiles (MapLibre / OpenStreetMap) — loaded from public tile servers when viewing route maps or downloading offline packs. The requests reveal the area being viewed; no account or personal identifier is sent.
WordPress content (optional) — the App may fetch public community posts and events from stonebicyclecoalition.com. No personal data is sent.
Route & trail providers (optional, user-initiated) — if you look up trail conditions or connect a route provider, the App may send the route's location to services such as the U.S. Forest Service, Trailforks, Strava, Wahoo, or Ride with GPS to fetch conditions or sync routes. These run only when you request them; provider accounts require your authorization and their credentials are stored in the device Keychain.
App Store — for download and updates (managed by Apple).

Data Sharing

We do not share, sell, rent, or trade your personal data with any third party.

When you share a ride card or export a ride file, the App by default removes the first and last 250 m of the track and any privacy zone you set. Sending the exact route, start and finish is a separate, clearly labelled choice.

Data Retention and Deletion

All data is stored locally on your device. Deleting the App (iOS: Settings > General > iPhone Storage > StoneBC > Delete App) permanently removes it. Because the App sends us no personal data, there is nothing on our side to delete. (If you use a co-op edition that enabled route submission or member sign-in and want data removed from that co-op's server, contact that co-op.)

Children's Privacy

The App is not directed at children under 13 and we do not knowingly collect information from children. The App contains no user accounts, no social features requiring personal data, and no data collection mechanisms that could inadvertently capture children's data.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

Contact

If you have questions about this privacy policy:

Email: stonebicyclecoalition@gmail.com
Website: stonebicyclecoalition.com