Privacy Policy

Last updated: 8 October 2026

This policy explains how Openbeta Limited (“we”, “us”) handles your personal data when you use the Bendle mobile app and this website (together, “Bendle”). We are the data controller for this data. You can contact us at any time at support@openbeta.works.

In short: your rides are private by default. We use your data to run Bendle. We do not sell it, and we do not show ads. You can export your rides and delete your account in the app whenever you like.

1. Data we collect

Account data

Guest accounts. If you continue as a Guest, we create an account with a random identifier. We do not collect a name or email address.
Sign-in details. If you sign in with Apple, Google or an email code, we receive your email address and an identifier from that provider. With Apple’s “Hide My Email” we only receive a relay address.
Profile. Any display name or profile details you choose to add.

Ride and location data

Recorded rides. While you record a ride, the app collects precise GPS locations with timestamps, including in the background and when the screen is locked. Recording only happens after you start a ride (or confirm one). From these points we calculate your route, distance, elevation, riding time, Atlas coverage and Great Road progress.
Approximate location for suggestions. We use your approximate location to suggest nearby roads and show local riding weather, but only after you tap “Use my location”. The app makes it coarse before sending it, and our server rounds it to an area of about 3 km. It is used to answer that request only. We never store it and never write it to our logs.
Ride detection. When you open the app, Bendle may check how fast your phone is moving (only if you already allowed precise location for recording) so it can offer to start a ride. If you turn on background ride detection, your phone also tells Bendle when you appear to set off (on iPhone this uses location “Always” and Motion & Fitness; on Android, physical activity). These checks happen on your phone only: the locations and motion data are never stored or sent to us. Bendle never starts recording without your tap. You can turn ride detection off in the app at any time.
Imported files. GPX files you import, and planned routes you add.

Content you add

Photos you choose. We re-encode every photo and remove all embedded metadata (EXIF, GPS, camera details) from the copies we store and show. We keep the capture time and location from the original privately, so the photo can appear in the right place on your own Atlas. They are never included in anything you share.
Your Garage. The bikes you add (name, make, model, year, an optional photo) and which bike you rode on each ride. Bike photos are stored without any metadata; we do not keep their location.
Notes, ride titles, road ratings, saved roads and share images you create.

Purchases

If you subscribe to Bendle Pro, Apple or Google processes your payment. We never receive your card details. Our subscription provider, RevenueCat, tells us your subscription status (product, renewal and expiry dates), linked to your Bendle account identifier.

Technical data

A random installation identifier, used only to prevent abuse (for example, mass creation of Guest accounts) and to keep ride uploads in sync.
Server logs: IP address, time, the requested path and the response status. We do not log request contents, access tokens or GPS data.
Your device’s permission states (location, photos, notifications). These stay on your device.

2. How we use your data and our legal bases

Purpose	Legal basis (UK GDPR / EU GDPR)
Providing Bendle: your account, recording and storing rides, your Atlas, Great Road and Collection progress, ride replay, photos, sharing and syncing across devices	Performance of our contract with you
Precise background location while you record, approximate location for suggestions, optional ride detection, and photo access	Your consent, given through your device’s permission prompts. You can withdraw it at any time in your device settings.
Road ratings and community road statistics (see section 4)	Performance of our contract with you, and our legitimate interest in providing useful road information
Bendle Pro subscriptions	Performance of our contract with you
Security, preventing abuse and fraud, and fixing problems	Our legitimate interests
Meeting legal obligations (for example, tax records for purchases)	Legal obligation

App Tracking Transparency

On iOS, Bendle asks for permission to track under Apple’s App Tracking Transparency framework. We only measure activity across other companies’ apps and websites (for example, to see whether a marketing campaign worked) if you allow it. Bendle does not currently share your data with advertising networks or data brokers. If that ever changes, we will update this policy first, and we will only do it with your permission. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

3. What is shared publicly

Your rides are private by default. Nothing is published unless you choose to share it. Share images use a privacy-safe version of your route. By default, the start and end of every ride are hidden, and so is the area around them. You can change this in Profile → Share privacy. Share images never contain your exact route data or photo metadata.

4. Road ratings and community statistics

You can rate a Great Road after you have ridden it. Your rating counts towards that road’s community statistics. Other riders see only those statistics (for example, the average rating), never your rides, your routes or who rated. Contributing a rating never makes a ride public.

5. Who we share data with

We use trusted service providers who process data on our behalf, under contracts that require them to protect it:

Provider	What they do
Supabase	Sign-in and account authentication; sending email sign-in codes; database hosting
Railway	Hosting for our application servers
Cloudflare (R2)	Storage for ride recordings, GPX files, photos and share images
RevenueCat	Managing Bendle Pro subscription status
Apple and Google	Sign in with Apple / Google, app distribution and in-app purchases
Open-Meteo	Weather forecasts. Our server requests forecasts for roads and coarse areas only, with no account information.
Map tile provider	Map images shown in the app. Your device downloads them directly, so the provider sees your IP address and which map area is displayed.

We may also disclose data if the law requires it, or to protect the rights and safety of our users or others. If our business is ever sold or reorganised, your data would pass to the new owner under this policy. We never sell your personal data.

6. International transfers

Some of our providers process data outside the UK and the European Economic Area, including in the United States. Where this happens, we rely on adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

7. How long we keep data

Your account and rides are kept until you delete them or delete your account.
Deleting a ride is immediate and permanent. The route, photos, notes and share images are erased, and your Atlas and progress are recalculated without that ride.
Deleting your account permanently erases all of your rides, photos, Atlas, ratings, saved roads, subscription records and your sign-in account. Community road statistics are recalculated without your ratings. We keep a record of the deletion that contains no personal content, only so that the deleted account cannot be used again.
Backups: deleted data may remain in encrypted database backups for up to 30 days until those backups expire. Backups are used only for disaster recovery.
Server logs are kept for a short period (normally no more than 30 days).
Purchase records may be kept by Apple, Google and RevenueCat as the law requires.

8. Your rights and choices

Depending on where you live, you have the right to access, correct, delete or export your personal data. You can also object to or restrict some processing, and withdraw your consent. Many of these you can do yourself in the app:

Export rides as GPX files from the ride screen.
Delete individual rides, or your whole account (Profile → Delete account). See how to delete your account.
Change location and photo access in your device settings.
Choose whether shared images hide the start and end of your rides.

For anything else, email support@openbeta.works. We will reply within one month. You also have the right to complain to a data protection authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk).

9. Security

Data is encrypted in transit. Stored files are private, and are only reachable through short-lived signed links. Access to production systems is restricted. No system is perfectly secure, but we work hard to protect your data and will tell you if a breach affects you, as the law requires.

10. Children

Bendle is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has given us personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. If the changes are significant, we will tell you in the app before they take effect. The date at the top shows when it last changed.

12. Contact

Openbeta Limited
Email: support@openbeta.works
Website: https://bendle.app