Privacy Policy

Introduction

Welcome to Radzi. We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and use when you use the Radzi mobile application.

By using Radzi, you agree to the collection and use of information in accordance with this policy.

Information We Collect

1. Account Information

When you create a Radzi account, we collect:

• Email address
• Name (first and last name)
• Password (stored securely in encrypted form)
• Date of birth (to confirm you meet our minimum age requirement)
• Gender identity (optional)
• Profile picture (optional)

2. Location Data

Radzi is a cycling and walking activity tracking app that collects location information to provide its core functionality:

• Foreground location: Collected when you use the app to track your position on the map and record your activities
• Background location: Collected when you enable automatic activity tracking, allowing the app to record complete trips even when the app is in the background or closed
• Trip data: We store the routes you travel, including GPS coordinates, distance, duration, and timestamps
• Weather location: A one-off, foreground check of your current location to show local weather on the home screen — separate from trip tracking

Why we collect location data: To track your cycling and walking activities, calculate distances, display your routes on maps, provide activity statistics, help you monitor your progress, and show local weather conditions.

3. Motion and Activity Data

We collect motion sensor data from your device to:

• Detect your activity type (walking, running, cycling)
• Provide more accurate automatic activity tracking
• Improve activity recognition

4. Photo Library Access

When you choose to:

• Upload a profile picture
• Share photos in club posts or feedback

We request access to your photo library to allow you to select images. We only access photos you explicitly choose to upload.

5. User-Generated Content

We collect content you create within the app:

• Feedback and comments about cycling/walking infrastructure
• Photos attached to feedback submissions
• Posts, comments, and photos shared in clubs
• Ratings and reviews of road sections

6. Usage and Device Information

We automatically collect:

• Device type and operating system
• App version
• Usage statistics (features used, screens viewed)
• Error logs and crash reports (to improve app stability)

7. Social Login Information

If you sign in with Google or Apple:

• We receive your email address and name from the provider
• We do not store your social media passwords
• Google may provide additional profile information if you grant permission (birthday, gender)

8. Notifications

If you enable push notifications, we collect:

• Your device's push notification token, used to deliver trip-completion and reminder notifications via Firebase Cloud Messaging
• Your notification preferences (which types of notifications you want to receive)

How We Use Your Information

We use the collected information for the following purposes:

Core App Functionality

• Create and manage your user account
• Track and record your cycling and walking activities
• Calculate activity statistics (distance, duration, CO2 saved)
• Display your trips and routes on maps
• Provide leaderboards and achievement tracking
• Enable social features (clubs, posts, comments)

Community and Feedback

• Display your feedback about infrastructure to help improve cycling and walking conditions
• Share your contributions with local authorities and community members
• Allow you to participate in clubs and engage with other users

Communication

• Send email verification codes during account creation
• Send password reset codes when requested
• Send important updates about the app or your account
• Send push notifications for trip completion and reminders

App Improvement

• Analyze usage patterns to improve app features
• Identify and fix bugs and technical issues
• Develop new features based on user needs

Personalization

• Generate personalized, AI-assisted messages on your home screen based on your aggregated activity statistics (see "Third-Party Services" below for exactly what's shared with our AI provider)

Data Sharing and Disclosure

Public Information

The following information may be visible to other Radzi users:

• Your name and profile picture
• Your club posts, comments, and shared photos
• Your public feedback submissions about infrastructure
• Your position on leaderboards (if you participate)

Third-Party Services

We may share data with trusted third-party service providers who assist us in operating the app:

• Hosting infrastructure (Railway): For database storage and backend infrastructure
• File storage (AWS S3): For storing profile pictures and photos attached to club posts and feedback submissions
• Authentication (Google Sign-In, Apple Sign-In, and Firebase): Your email and name if you sign in with Google or Apple; Firebase also delivers push notifications using your device's notification token
• Map services (Mapbox): Your location coordinates, to display maps and routes
• Weather services (OpenWeatherMap): Your approximate location, to show local weather on the home screen
• AI-generated content (Google Gemini API): Aggregated activity statistics — your 7-day trip count, cycling and walking distance, CO2 saved, current and longest streak, whether you've been active today, your total trophy count, and the name and progress percentage of your next unearned trophy — used to generate personalized home-screen messages. We do not send your name, email address, GPS coordinates, or any free-text content (such as posts, comments, or feedback) to this provider.
• Email service (Postmark): Your email address, for sending verification codes and password-reset codes
• Analytics services: To understand app usage and improve performance

These third parties are contractually obligated to protect your data and only use it for the purposes we specify.

Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes (court orders, subpoenas)
• Requests from law enforcement or government authorities
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

Local Authorities

With your consent, aggregated and anonymized feedback data about cycling and walking infrastructure may be shared with local authorities to help improve urban planning and infrastructure.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account data: Retained until you delete your account
• Trip history: Retained as long as your account exists
• Feedback submissions: May be retained longer for infrastructure planning purposes; some feedback may be kept with the link to your account removed (anonymized) rather than deleted outright
• Deleted accounts: Deletion is immediate and permanent — see "Account Deletion" below for exactly what's removed

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Update

• View and edit your profile information within the app
• Access your trip history and activity data
• Update your preferences and settings

Data Portability

• Request a copy of your personal data in a portable format
• Contact us at privacy@radzi.com to request your data

Account Deletion

You can delete your account directly in the app: open Radzi, go to the You tab, scroll to the bottom, and select Delete Account. This is immediate, permanent, and cannot be undone — there is no grace period.

Deleting your account permanently removes:

• Your trips and activity records
• Your trophies and personal records
• Club posts, comments, and likes you've authored
• Your club join requests
• Your map and road feedback submissions
• Your push notification token and notification preferences
• Any pending verification or password-reset codes
• Your profile picture
• Your active login session (it cannot be reused)

Some feedback submissions may be retained with the link to your account removed (anonymized) rather than deleted outright, to preserve infrastructure and safety insights.

If you own a club, you'll be asked to transfer ownership to another member before your account can be deleted — this ensures deleting your own account never removes a club or content belonging to other members.

Deleting your Radzi account does not revoke Google or Apple sign-in permissions on their end. If you'd like to fully revoke access, do so separately from your Google or Apple account settings.

If you don't have the app installed, email us at privacy@radzi.com from the address on your account, and we'll delete your account and data within 30 days. See our Account & Data Deletion page for full details.

Location Tracking

• Enable or disable location tracking in your device settings
• Control background location access through app permissions
• Note: Disabling location will prevent activity tracking features from working

Marketing Communications

• Opt out of promotional emails (if we send them in the future)
• You cannot opt out of transactional emails (verification codes, password resets)

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Passwords are encrypted using industry-standard hashing algorithms
• Data transmission is encrypted using HTTPS/TLS
• Access to personal data is restricted to authorized personnel only
• Regular security audits and updates
• Secure cloud infrastructure with backup systems

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children's Privacy

Radzi is intended for users aged 18 and over. By creating an account, you confirm that you meet this minimum age requirement. We do not knowingly collect personal information from children under 18.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using Radzi, you consent to the transfer of your information to these countries.

Third-Party Links

The app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy in the app
• Updating the “Last Updated” date at the top of this policy
• Sending an email notification for material changes (if we have your email)

Your continued use of Radzi after changes are posted constitutes acceptance of the updated policy.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete your personal information (with certain exceptions)
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@radzi.com.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing your data includes:

• Contract performance: Processing necessary to provide app services
• Legitimate interests: Improving our services and ensuring security
• Consent: For optional features like photo uploads
• Legal obligations: Compliance with applicable laws

To exercise your rights, contact our Data Protection Officer at privacy@radzi.com.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@radzi.com
Website: www.radzi.com

For data protection inquiries (EU): privacy@radzi.com