Privacy policy

Introduction

This Privacy Policy explains how Downsized B.V. ("we", "us", "our"), trading as Dialed, handles your personal data when you use our web application, our iOS app or our Android app (package bike.dialed.app), together "the apps". We are the data controller. We process your data in line with the General Data Protection Regulation (GDPR) and Dutch law.

Data we collect

We collect only what we need to run Dialed:

Account data: your name, email address and a securely hashed password.
Rider profile: your weight, height, riding level, style and focus. These are body-related data, used to tailor and compare suspension setups; the relevant values are frozen into each setup you create at the moment you create it.
Garage and setups: your bikes, their components, suspension and tyre settings, and service records.
Community data: posts, photos, follows and teams, each with the visibility settings you choose.
Location data: when you start recording a ride, the apps record your precise GPS location for the duration of that ride and upload it as a GPX trace linked to your account. The apps also use your location to show trails near you. Location permission is asked at the moment a feature needs it and is optional; without it you can still use Dialed, only recording and nearby trails are unavailable.
Photos: you add photos through your device's system photo picker or camera. The apps have no access to the rest of your photo library; only the photos you pick are uploaded.
Push notification data: if you allow notifications, we store a device push token together with the platform (iOS or Android) and the app version, so we can deliver notifications to that device.
Billing data: your plan and subscription state. Payments are processed by Mollie B.V.; we never receive your full card or bank details.
Technical data: logs, IP address and basic device information, collected to keep the service secure and working.

The apps contain no analytics, advertising or crash-reporting SDKs. We do not track you across other apps or websites.

How we use your data

To run the service and keep your garage, setups and history available.
To sync your data between the Dialed web application, the iOS app and the Android app.
To record your rides and show trails near you, when you allow location access.
To power community features according to the privacy choices you make.
To handle billing and manage your subscription.
To send transactional email, such as account and billing notices, and push notifications you have allowed.
To keep the service and your account secure, including checking that requests come from a genuine, unmodified copy of the apps.

Legal basis

We rely on the following legal bases under the GDPR: performance of a contract to provide the service you sign up for; legitimate interest to keep Dialed secure and to improve it; consent where it applies, which you can withdraw at any time; and legal obligation for keeping billing and tax records.

We do not sell your data, and we do not use advertising networks. We share data only with processors that help us run the service, under contract and only as needed:

Mollie B.V. for processing payments.
EU-based hosting for running the application and storing data.
A transactional email provider for account and billing email.
Apple MapKit to display trail maps in the web application and the iOS app when you view a map.
Google Maps SDK to display maps in the Android app. When you view a map, Google receives the map area you look at (viewport and tile requests) and your device's IP address.
Apple Push Notification service (iOS) and Firebase Cloud Messaging by Google (Android) to deliver push notifications to your device.
Apple App Attest (iOS) and Google Play Integrity (Android) to verify that requests come from a genuine app on a genuine device, for fraud prevention and security.
chaosdesk.eu, the helpdesk we use for support tickets. When you contact support, it receives your name, email address, the content of your message, any attachments you add and the app and device diagnostics you choose to send. It is operated from the Netherlands on EU-based servers.
Cloudflare Turnstile for bot protection on login, registration and the support form. Cloudflare receives your IP address and browser signals to tell people from automated traffic.

Community content is visible to others only according to the privacy setting on each item.

Retention

We keep your data for as long as your account exists. Billing records are kept for 7 years to meet Dutch fiscal retention requirements. When you close your account, we delete your personal data and anonymise any remaining community content so it is no longer linked to you.

You can delete your account yourself in the apps (under your profile) or in the web application. You can also ask us to delete it via dialed.at/support or by emailing [email protected].

Security

We protect your data with HTTPS in transit, encryption at rest where the platform supports it, hashed passwords, and role-based access controls that limit who can see what. The apps use device integrity checks (Apple App Attest on iOS, Google Play Integrity on Android) to block requests from tampered or emulated clients.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability and objection regarding your personal data. To exercise any of these, email us at [email protected]. You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Cookies

Dialed uses functional cookies only. See our Cookie Policy for the details.

Changes

We may update this Privacy Policy as Dialed evolves. If we make a material change, we will give reasonable notice, for example by email or in the app.

Contact

Questions about your privacy? Email us at [email protected].