Last updated: July 13, 2026

This Privacy Policy explains what information Middle of Town Cycling ("MOTC", "we", "our") collects through the MOTC mobile app and website, and how it is used.

**Account information.** When you create an account, we collect your name, email address, and a unique identifier from our authentication provider (Firebase Authentication). If you sign in with Apple or Google, we receive the name and email you choose to share through that provider.

**Device information for notifications.** If you enable push notifications, we store a device push token (via Expo's push notification service, Apple Push Notification service, or Firebase Cloud Messaging) so we can deliver maintenance reminders and ride updates to your device.

**Bike and ride data you provide.** Bikes, components, install dates, mileage, service history, ride logs, and notes you enter into the app are stored so we can track maintenance schedules and show your history back to you.

**Strava data (optional).** If you connect a Strava account, we receive OAuth tokens and ride/gear data from Strava's API (athlete name, bike gear list, ride mileage) to keep your bike mileage and ride history in sync. You can disconnect Strava at any time, which revokes our access to your Strava data.

**Service request information.** If you request service from the shop, we collect the bike/component details and preferred date you submit, and may email this request to shop staff.

**Wishlist sharing.** If you share a wishlist, we collect the recipient's email address solely to send the share notification.

- To operate your account and authenticate you (Firebase Authentication). - To track bike/component maintenance and send you reminders. - To notify the shop when you request service or hit a maintenance interval. - To sync ride and gear data from Strava, if you connect it. - To send push notifications and emails you've opted into. - To operate group ride RSVPs and the community newsfeed.

We do not sell your personal information. We do not use your data for third-party advertising.

- Firebase (Google) — authentication and, if applicable, push notification delivery. - Strava — only if you connect your account; data flows both ways via Strava's OAuth API. - Resend — to send maintenance, service-request, and wishlist-share emails. - Render.com — hosts our backend API and database.

We do not share your information with any other third party except as required by law.

We retain account and bike/ride data for as long as your account is active. You can request deletion of your account and associated data by contacting us at sales@middleoftowncycling.com.

- You can disconnect Strava at any time from within the app. - You can turn off push notification categories (maintenance, news, sales) individually in account settings. - You can request account deletion at any time.

This app is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Questions about this policy or your data: sales@middleoftowncycling.com