SpokeFam · Privacy

Your privacy.

This notice explains how the current SpokeFam app and website use information. You choose whether to share observations, connect Strava or identify your reports to friends.

Updated November 2, 2026. This notice covers the private-testing app and current website, including optional website tips. Features and this notice will be reviewed before the app’s public release.

What stays on your phone

Your recorded rides, ride notes, metrics, private location reminders and avatar selection are stored on your iPhone. Starting with build 167, the local ride archive is excluded from device backups because it can contain heart-rate readings. It stays on your phone, but replacing the phone or deleting the app can remove this history. Export a ride track if you want a separate copy; track exports do not include heart-rate readings. Exporting a ride or uploading it to Strava creates a copy elsewhere. Earlier device backups may retain older copies.

Heart rate and Apple Health

Heart-rate recording is optional. With your permission, a supported sensor or paired Apple Watch can provide readings during a ride. Readings saved with the ride remain in the protected local archive; they are not included in shared road reports, live ride links, marketing or the current Strava upload. If you choose to save a workout to Apple Health, that creates a separate Health record. Deleting your SpokeFam account or local ride does not delete that record; manage it in Health. Health data is not used for advertising.

Voice observations use on-device speech recognition. You review the suggested report before saving. SpokeFam does not save or upload the audio or transcript.

What reaches SpokeFam

• Your account: email address, account identifier and authentication information used to sign you in, confirm your email and reset your password.
• Saved routes: routes you choose to save to your account, including route geometry and available instructions, so you can reopen them on your devices.
• Shared observations: report type, precise location, capture time, status and confirmation feedback. Sharing is optional. Other verified riders can see shared report locations and times, so avoid publishing a location you want to keep private.
• Friends: your chosen rider name, invitations, accepted connections, shared ride titles and dates, and companion responses. Attaching a recording shares its attached status; it does not share that recording’s track, notes or metrics.
• Membership: Apple purchase identifiers, product, purchase environment, subscription status, expiration, renewal setting and verification times linked to your SpokeFam account, so we can verify membership on the app and website. We do not receive your Apple Account password or full payment-card details.
• Safety and support: blocks, abuse reports, and information you choose to send us when asking for help.

Your email and account identifier are not displayed on community map reports. Accepted friends can see your rider name on reports only if you enable report attribution. A report’s location and time can still reveal where someone was; reports are not guaranteed to be anonymous.

Follow my ride — invited testing

Live ride sharing is limited to invited test accounts while we complete phone testing. It requires your consent for each ride. Sharing sends the latest qualifying precise location, accuracy, capture time and last reported riding or paused state to SpokeFam. It does not send your full recorded track, planned route, ride notes or email address to the recipient.

Anyone holding a private ride link, including someone it is forwarded to, can view that ride’s latest shared location without an account. Account blocks cannot identify anonymous link holders. Keep the link private, replace it to invalidate the old link, or stop sharing. A link does not provide access to future rides. Access can also end when the account’s test invitation or originating sign-in session ends. Apple mapping services receive the location needed to display the recipient’s map.

Stopping or finishing ends access when the server confirms it. If the rider’s phone is offline, the last point may remain accessible until that confirmation or the session’s expiry, at most 12 hours after sharing started. The browser displays update times, removes the location when it learns sharing has ended or expired, and hides it while the page is offline or in the background. Updates are periodic and may stop; they are not a guarantee of the rider’s current location or safety.

The server retains only the latest point. Confirmed closure clears coordinates immediately. Expired sessions deny access immediately; scheduled cleanup removes their stored positions about every 15 minutes and closed session metadata after 24 hours. A replacement link prevents further access through the old link, but cannot erase a location someone already saw or saved. Provider logs and backups have separate retention settings.

Services that help the app work

• Supabase provides account authentication and backend storage.
• Apple mapping services and GraphHopper receive the searches, locations or route points needed for the mapping or route-planning feature you use. GraphHopper requests go through our backend.
• Strava receives your ride track, ride name and notes when you choose an upload or enable automatic uploads. SpokeFam stores the authorization needed to make those uploads. Strava applies its own privacy settings to the resulting activity.
• Brevo delivers account confirmation, password-reset and support emails, and supports our controlled signup-email testing. Public marketing signup and marketing-contact syncing are not enabled.
• Cloudflare hosts the website. Hosting and service providers can process connection information, including IP addresses and operational logs, when you use their services.

We use this information to provide the features you request, secure the service and respond to problems. The current website has no advertising or analytics scripts, and the app does not use cross-app advertising tracking.

Browser password recovery

When you request a password reset on our account page, your browser stores a temporary verification proof and a hash used to match your account email. The proof expires after one hour; it is removed after a successful link exchange or when the page next checks an expired proof. Your new password goes directly to Supabase over an encrypted connection. Passwords and access or refresh tokens are not saved in browser storage by this page. The temporary recovery session stays in page memory and is cleared when you leave or finish. Open the email in the same browser and device that requested it.

Apple subscriptions

Apple processes app subscription payments. SpokeFam verifies subscription information with Apple and receives subscription-update notifications. Sandbox test purchases are kept separate from real purchases. Deleting your SpokeFam account removes its linked membership records from our service, but does not cancel your Apple subscription or remove records held by Apple. Manage or cancel in your Apple subscription settings. Operational backups and logs have separate retention settings.

Optional website tips

If you choose Support the Fam, you leave our website for a Stripe-hosted checkout. Stripe collects the contact and payment information you enter and processes the payment under its privacy policy. Your full card number and security code are not collected by the SpokeFam website.

SpokeFam can access payment records in Stripe, including the amount, date, payment status and contact details supplied at checkout, to handle payment questions, refunds and accounting. Tips are optional, one-time payments. They do not create a membership, unlock app features or subscribe you to marketing emails. No SpokeFam account is required.

Deleting a SpokeFam account does not automatically delete Stripe payment records. Payment and accounting records may need to be retained for legal and financial obligations. Contact [email protected] with payment or privacy questions.

Your controls

You can record a ride without an account. Use Account to control sharing and Strava uploads. Turning off observation sharing stops new uploads; withdraw an already shared observation to remove it from the community view. Disabling automatic Strava upload does not remove activities already sent to Strava.

You can change location, microphone, speech, Bluetooth and notification permissions in iPhone Settings. Some features will be unavailable when their permission is off. Removing a friend or blocking a rider removes the associated social connection; it does not erase someone else’s independently recorded ride.

Deletion and retention

In Account, enter your password and choose Delete Account. Finish an active ride first. Confirmed deletion removes your account, shared reports, synced routes, social associations and linked email signup. Old signup links and queued signup updates are removed too. The initiating phone then removes that account’s local rides and related data. Keep the app installed until it confirms completion.

Other devices’ local files, exports, device backups, already delivered emails and Strava activities are not remotely erased by this action. Manage those copies in the relevant device or service. If you cannot access your account, contact us for help; we may need to verify your identity.

Account-associated data remains available while your account exists unless you remove it. A report becoming stale or disappearing from alerts does not automatically erase its stored record. Completed deletion receipts retain a random request hash and completion information without an account reference; automatic expiry is not currently configured. Provider logs and backups have separate retention settings and are not instantly erased by account deletion.

For an access, correction or deletion request, or questions about retained data, email [email protected]. Please do not send a password or authentication link.

Changes to this notice

We will update this page when data use changes. Public launch will require a further review of retention settings, provider disclosures and the App Store privacy information.