Privacy notice

Who is responsible

Cycling Without Age, Rentemestervej 80, st., 2400 København NV, Denmark, CVR no. 36655305, is the controller for the personal data processed in this app.

Coding for Change e.V., Enzianstraße 3, 85748 Garching, Germany, develops and hosts the app for us and processes data only on our instructions under a data processing agreement.

Contact for privacy questions: support@cyklingudenalder.dk

What we store

• Your account: name, email address or phone number, language.
• Your profile: what you choose to share, such as a photo, a short bio or what helps you on a ride.
• Your rides: bookings, rosters and the rides you have taken part in.
• Chat: the messages you send and receive.
• Your devices: what we need to send you notifications.

If a caretaker or your chapter adds you as a passenger, they enter your name, how to reach you and where to pick you up. They confirm that you, or your legal representative, agree to it.

Why we store it

• Running your account and organising rides, rosters and training: Art. 6(1)(b) GDPR — providing the service you signed up for
• Chat between passengers, pilots, caretakers and chapters: Art. 6(1)(b) GDPR
• Health-related details in a profile, such as what helps you on a ride: Art. 9(2)(a) GDPR — your explicit consent, which you can withdraw at any time
• Profile and ride photos: Art. 6(1)(a) GDPR — your consent
• Push notifications: Art. 6(1)(a) GDPR — your consent in your device's settings
• Keeping the app secure, stopping abuse and fixing errors: Art. 6(1)(f) GDPR — our legitimate interest in a safe, working service
• Reviewing reported messages and profiles: Art. 6(1)(f) GDPR — protecting the people who use the app

We do not sell your data, show advertising or build profiles for marketing.

Who we share it with

Inside the app, people see what they need for a ride: your chapter's admins see its members and rides, pilots see the passengers on their ride, and chat members see the messages in their chat. People who sign up for the same event see each other's names in its group chat.

These service providers process data on our behalf:

• Coding for Change e.V.: Development, operation and support (Germany)
• Hetzner Online GmbH: Servers, database and backups (Germany)
• Cloudflare, Inc.: Storage of photos and videos (EU)
• Resend, Inc.: Sending emails (EU)
• GatewayAPI (OnlineCity.IO ApS): Sending text messages with sign-in codes (Denmark)
• Google (Firebase Cloud Messaging): Delivering push notifications on Android (USA)
• Apple (Push Notification service): Delivering push notifications on iOS (USA)
• Google (Sign-in): Signing in with Google, only if you choose it (USA)
• Functional Software, Inc. (Sentry): Error reports, without message content (EU)
• Mapbox, Inc.: Showing maps and finding addresses (USA)

Where data goes to the USA, the transfer is covered by the EU–US Data Privacy Framework or the EU standard contractual clauses.

A push notification about a chat message may show a short preview of the message. You can turn previews off in your device's notification settings.

How long we keep it

• Account and profile: Until you delete your account
• Chat messages: 12 months, then deleted automatically
• Copies of reported messages: 60 days after the report is closed
• Sign-in sessions: 90 days
• Device tokens for notifications: Until you sign out, or after 270 days without use
• Sign-in codes: 10 minutes

When you delete your account, we delete your account, profile, devices and messages. Records your chapter needs about rides that took place are kept without a link to your account.

Reported messages

When someone reports a chat message, we keep a copy of only that message, together with who sent it, when and in which chapter, so an admin can review it. The copy is deleted 60 days after the report is closed.

Cookies and storage on your device

The app only uses storage it needs to work, so it does not ask for cookie consent:

• a sign-in cookie that keeps you signed in for up to 90 days
• your language and colour theme
• the chapter you are looking at and whether the sidebar is open
• a draft of a form you started, so it survives reloading the page
• the push token your device needs to receive notifications

We use no analytics, advertising or tracking cookies.

Your rights

You can see, correct, download and delete your data. You can delete your account at any time in the app under Account → Delete account.

You also have the right to restrict or object to processing, to data portability, and to withdraw a consent at any time without affecting what happened before. Write to us at the contact above.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk, or to the supervisory authority where you live.

Changes to this notice

When this notice changes, we update the version and the date at the top of this page.