Privacy Policy

1Overview

Pixels Technologies ("we", "us", "our") operates the Bike Trip Planner application (the "Service"), available on iOS, Android and via our web platform at pixelstechnologies.com. This Privacy Policy explains what personal data we collect, how we use it, and the choices you have.

By creating an account or using any part of the Service, you agree to the collection and use of information in accordance with this policy. If you disagree, please discontinue use of the Service.

This policy is governed by the Information Technology Act, 2000 (India) and relevant rules thereunder. Where applicable, we also align with international best practices including GDPR principles.

2Information We Collect

2.1 Information You Provide Directly

• Account registration: Full name, email address, phone number, and password.
• Profile: Biography, profile photo, fitness level, preferred riding terrain, and emergency contact details.
• Trip data: Trip names, descriptions, start/end locations, route waypoints, participant limits, and visibility settings.
• Communications: Messages and support requests you send us.

2.2 Information Collected Automatically

2.3 Information from Third Parties

• Google Sign-In: If you authenticate via Google, we receive your name, email address and profile picture from Google.
• Apple Sign-In: If you use Sign in with Apple, we receive a name and an email address (or Apple's relay address).

3How We Use Your Information

• Service delivery: Create and manage your account; display your profile to trip participants you have accepted.
• Trip functionality: Show real-time positions of group members during active trips; generate invite links; broadcast SOS alerts.
• Safety & emergency: When you trigger an SOS, your GPS coordinates are immediately shared with your emergency contacts and current trip members.
• Analytics & improvement: Understand usage patterns to prioritise features and fix bugs.
• Communications: Send transactional emails (account verification, password reset, trip invites). We do not send marketing emails without explicit opt-in.
• Security & fraud prevention: Detect and prevent abuse, unauthorised access and violations of our Terms of Service.
• Legal obligations: Comply with applicable laws, court orders and governmental requests.

4Data Sharing & Disclosure

• With other trip participants: When you join a trip, your name, profile photo and live location are visible to others in the same trip.
• Emergency contacts: Your GPS location is sent to contacts you designate when you trigger SOS.
• Service providers: We engage third-party processors (cloud hosting, email delivery, crash reporting) under data processing agreements.
• Legal requirements: We may disclose information when required by law.
• Business transfers: In the event of a merger or acquisition, your data may transfer to the successor entity. We will notify you.

5Location Data

• Foreground location: Collected when the app is open and a trip is active.
• Background location: Collected only during active trip tracking sessions with your explicit permission.
• Location history: Your GPS track is stored per trip so you can review completed rides. You can delete individual ride histories from your profile.
• Location sharing: Your live location is only shared with members of trips you have actively joined. It is not shared after a trip ends.

6Cookies & Tracking Technologies

• Essential cookies: Authentication tokens (JWT) stored in cookies to keep you logged in.
• Preference cookies: Remember your display settings.
• Analytics: Aggregate, anonymised statistics about page usage. We do not use advertising pixels.

7Data Retention

When you delete your account, we initiate deletion of your personal data within 30 days, except where retention is required by law.

8Data Security

• All data transmitted is encrypted using TLS 1.2+.
• Passwords are hashed using bcrypt with a per-user salt. We never store plaintext passwords.
• Authentication uses short-lived JWTs (1 hour) with secure refresh token rotation.
• Our servers run on isolated cloud infrastructure with firewall rules restricting access.
• We perform regular security audits and dependency vulnerability scans.

If you discover a vulnerability, please report it to security@pixelstechnologies.com.

9Your Rights & Choices

• Access: Request a copy of personal data we hold about you.
• Correction: Update inaccurate data via your profile settings or by contacting us.
• Deletion: Delete your account via Profile → Settings → Delete Account.
• Portability: Export your ride history and profile data as JSON from your account settings.
• Withdraw consent: Revoke location permissions via your device settings at any time.

To exercise these rights, contact us at privacy@pixelstechnologies.com. We will respond within 30 days.

10Children's Privacy

The Service is not directed to individuals under the age of 13 (or 16 where required by local law). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact privacy@pixelstechnologies.com.

11International Data Transfers

Our servers are located in India (AWS Mumbai region). If you access the Service from outside India, your data may be transferred to and processed in India. For users in the European Economic Area (EEA), we rely on standard contractual clauses to ensure your data is protected to EEA standards.

12Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by displaying an in-app notification. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13Contact Us

• Privacy: privacy@pixelstechnologies.com
• General: hello@pixelstechnologies.com
• Website: pixelstechnologies.com

We aim to respond to all privacy-related enquiries within 10 business days.