Privacy | Velospect

Effective date: August 29, 2026
Last updated: August 30, 2026

Velospect is a cycling, ride-tracking, fitness, social, and gamification application. This Privacy Policy explains how Velospect collects, uses, stores, shares, and protects information when you use the Velospect mobile application, Wear OS companion application, widgets, and related services (collectively, the “Service”).

Velospect is operated by Seyfullah Yusuf Bedir (“Velospect,” “we,” “us,” or “our”).

If you do not agree with this Privacy Policy, please do not use the Service.

1. Information We Collect

1.1 Account and profile information

When you create or manage an account, we may collect:

Your email address;
Your phone number, if you choose to add one;
Your username, display name, profile details, and account identifiers;
Authentication information and identifiers supplied by sign-in providers such as Google;
Account creation date, last sign-in information, and account preferences; and
Subscription status and purchase entitlement information.

Passwords and payment-card details are not stored directly by Velospect. Authentication is handled through our authentication provider, and payments are processed by Google Play or Apple, as applicable.

1.2 Location, route, and ride information

With your permission, Velospect may process precise or approximate location information to provide ride tracking, maps, route creation, navigation-related features, nearby obstacle reports, route suggestions, social location features, and ride verification. This information may include:

GPS coordinates and route points;
Current or recently updated location;
Ride start and end times;
Distance, duration, speed, elevation, and route name;
Saved, visited, suggested, or shared routes; and
Location-based obstacle reports and confirmations.

Your ride history and route coordinates may be synchronized to our cloud service so they remain available across sessions and devices.

Velospect includes location-sharing controls such as Everyone, Friends, and No one. Depending on the setting selected in the app, your current or recently updated location may be visible to other Velospect users. You should review this setting before using social location features. Location sharing can be restricted or disabled in the app, and location permission can be revoked through your device settings.

1.3 Health and fitness information

If you enable health or wearable features and grant the requested permissions, Velospect may access or process:

Heart-rate information from Apple Health, Health Connect, or a connected Wear OS device;
Step count;
Distance and other cycling or fitness measurements; and
Health-permission and synchronization status.

We use this information only to provide user-facing cycling, fitness, ride, health-display, coaching, progress, and reward features. We do not use Apple Health or Health Connect data for advertising, credit decisions, data-broker activities, or other unrelated purposes. Velospect is not a medical device and does not provide medical advice, diagnosis, or treatment.

You can pause health synchronization in Velospect and manage or revoke permissions through Apple Health, Health Connect, or your device settings.

1.4 Contacts and friend discovery

If you choose contact-based friend discovery and grant contacts permission, Velospect processes phone numbers from your address book on your device and converts them into one-way cryptographic hashes before matching them with discoverable Velospect accounts. We do not intentionally upload contact names or raw address-book phone numbers for this matching process.

You can decline or revoke contacts permission at any time. You can also control whether your own phone-number hash is discoverable by other users.

1.5 Camera, QR codes, images, and user content

If you grant camera or photo access, Velospect may process:

QR codes used for friend or account-related features;
Images you select or capture for obstacle reports or other user-submitted content; and
Ride summary images that you choose to generate or share.

QR scanning is generally performed on the device. Images you expressly submit may be uploaded to cloud storage. Obstacle-report images may be made available through a public URL and may be visible to other users. Do not upload content that you do not have the right to share or that contains unnecessary personal or sensitive information.

1.6 Social, progress, and gameplay information

We may collect information necessary for Velospect’s social and gamification features, including:

Friend requests, accepted friendships, and social-search activity;
Leaderboard, league, race, challenge, quest, streak, achievement, XP, gem, level, and reward information;
Bicycle selections, unlocked items, themes, language, and onboarding preferences;
Public or friends-only route and activity information; and
Obstacle reports, risk ratings, confirmations, and related timestamps.

Information you choose to make public or share with friends may be visible to those users and may be copied or reshared by them outside our control.

1.7 AI feature information

When you use AI-powered coaching, quest, route, or recommendation features, we may send your prompt and relevant context—such as ride statistics, preferences, or a location needed for the requested feature—to a Velospect backend service and a configured AI service provider. Do not include confidential or highly sensitive information in free-text prompts.

AI output may be inaccurate and should not be treated as medical, safety, legal, or professional advice.

1.8 Music-control and notification-access information

On Android, if you voluntarily grant notification access for music controls, Velospect may read active media-session information such as track title, artist, album, artwork, playback state, duration, and the media app’s package name. This information is used on the device to display and control currently playing media. Velospect does not intentionally upload this media metadata to our cloud service.

This permission can expose notification information at the operating-system level. You can revoke it at any time in Android notification-access settings.

1.9 Device, app, and technical information

Velospect and its service providers may automatically process limited technical information needed to operate and secure the Service, such as:

IP address and network request information;
Device type, operating-system version, app version, language, and time zone;
App instance, advertising, or similar identifiers where permitted;
Connectivity, permission, authentication, and error information; and
Connected Wear OS device name and connection state.

Some preferences, session information, ride data, and watch connection details may also be stored locally on your device.

1.10 Advertising information

Some versions of Velospect may display advertising through Google Mobile Ads. When advertising is enabled, Google and its partners may process advertising identifiers, IP address, device information, approximate location derived from IP, ad interactions, and similar data in accordance with their policies and your applicable consent choices. Some test or premium versions may disable ad loading and display.

Apple Health and Health Connect data is not used for advertising. We do not sell personal information for money. Advertising activities may be considered “sharing” or “targeted advertising” under certain laws; where required, we will provide applicable notices and controls.

2. How We Use Information

We use information to:

Create, authenticate, secure, and maintain accounts;
Record and synchronize rides, routes, progress, preferences, and rewards;
Display maps, calculate routes, provide location-based features, and verify activities;
Operate Apple Health, Health Connect, and Wear OS features requested by you;
Match contacts and support friend, social, leaderboard, challenge, and race features;
Provide AI-assisted coaching, quests, and recommendations;
Process subscriptions, restore purchases, and determine premium status;
Deliver local or push notifications and home-screen widget content;
Display and control media when you enable music integration;
Serve advertising in versions where advertising is enabled;
Detect fraud, abuse, manipulated ride data, security incidents, and violations of our terms;
Troubleshoot, maintain, analyze, and improve the Service; and
Comply with legal obligations and enforce our rights.

Where applicable law requires a legal basis, we rely on performance of our contract with you, your consent, our legitimate interests in operating and securing the Service, and compliance with legal obligations. You may withdraw consent at any time, but this does not affect processing already performed lawfully.

3. How We Share Information

We may share or make information available in the following circumstances:

Service providers

We use service providers that process information on our behalf or as independent controllers, including:

Supabase for authentication, databases, storage, synchronization, and server functions;
Google for Google Sign-In, Google Play purchases, Health Connect, Wear OS connectivity, Firebase-related services where enabled, and Google Mobile Ads where enabled;
Apple for Sign in with Apple, Apple Health, App Store purchases, notifications, widgets, and platform services on Apple devices;
OpenStreetMap contributors and tile services for map display;
openrouteservice or related routing/geocoding services for route, directions, and place-search requests; and
Configured AI service providers for AI features you choose to use.

These providers may receive information such as IP address, device or request metadata, location or route coordinates needed to answer a route request, account identifiers, purchase information, advertising identifiers, or AI prompts, depending on the feature used.

Relevant provider privacy information includes Google’s Privacy Policy, Apple’s Privacy Policy, Supabase’s Privacy Policy, and the OpenStreetMap Foundation Privacy Policy.

Other users and the public

We share information with other users when necessary for features you use, including public or friends-only profiles, leaderboards, rides, races, routes, location sharing, friend discovery, obstacle reports, and user-submitted images. Visibility depends on the feature and available privacy settings.

Legal, safety, and business reasons

We may disclose information when reasonably necessary to comply with law, legal process, or regulatory requests; protect users, the public, or the Service; investigate fraud or abuse; enforce agreements; or complete a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

4. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including while your account is active, to provide requested features, resolve disputes, prevent fraud, maintain security, and comply with legal obligations.

In general:

Account, profile, progress, ride, route, friendship, and purchase-entitlement information is retained while your account is active or until it is deleted, subject to legal and security exceptions;
Public reports and content may remain available until they expire, are removed, or are no longer needed for the feature;
Local data remains on your device until removed through the app, the operating system, or app uninstallation; and
Residual copies may remain temporarily in encrypted backups or logs until those systems complete their normal deletion cycle.

We may retain limited records longer when required by law, necessary to establish or defend legal claims, or needed to prevent repeat fraud or abuse.

5. Account and Data Deletion

You can permanently delete your Velospect account and associated personal data from Settings → User information → Delete account. You may also contact us at yusufbedr123@gmail.com with the subject “Delete My Velospect Account.” We may ask you to verify account ownership before completing a support-assisted request.

Upon a verified deletion request, we will delete or anonymize account data that we are not required or permitted to retain. Public content already copied or reshared by others may remain outside our control, and limited information may remain temporarily in backups or where retention is required for legal, security, fraud-prevention, or dispute-resolution purposes.

Deleting your Velospect account does not automatically cancel an Apple App Store or Google Play subscription. You must cancel active subscriptions through the store account used to purchase them.

You can also delete certain data or restrict processing by changing privacy settings, deleting content where the feature allows it, revoking operating-system permissions, disconnecting Health Connect, or uninstalling the app.

6. Your Choices and Rights

Depending on your location, you may have rights to:

Access or receive a copy of your personal information;
Correct inaccurate information;
Delete your account or personal information;
Restrict or object to certain processing;
Withdraw consent;
Request data portability; and
Complain to your local data-protection authority.

To exercise a right, contact yusufbedr123@gmail.com. We may need to verify your identity and may decline or limit a request where permitted by law.

You can manage many permissions—including location, contacts, camera, notifications, Apple Health, Health Connect, and notification access—through Velospect or your device settings. Disabling a permission may prevent the related feature from working.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These include encrypted network transmission, authenticated access, database access controls, and permission-based access to sensitive device data. However, no system or transmission method is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and device access. Please notify us if you believe your account or information has been compromised.

8. International Data Transfers

Velospect and its service providers may process information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we use appropriate legal safeguards for international transfers.

9. Children’s Privacy

Velospect is not directed to children under 13, or under the minimum age required to consent to data processing in their country. We do not knowingly collect personal information from children without legally valid authorization. If you believe a child has provided personal information in violation of this section, contact us so that we can investigate and delete it where appropriate.

10. Third-Party Services and Links

The Service may contain links to or integrations with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy. We encourage you to review those policies before using the relevant feature.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Service, law, or our data practices. We will update the “Last updated” date and provide additional notice where required. Your continued use of the Service after an update becomes effective means the updated Policy applies to your subsequent use, to the extent permitted by law.

12. Contact Us

For privacy questions, requests, or complaints, contact:

Data controller: Seyfullah Yusuf Bedir
App: Velospect
Email: yusufbedr123@gmail.com