Privacy Policy
OST Studio (“we,” “us,” or “our”) publishes the MTB Crew app and operates mtbcrew.app. This policy explains what information we process, how we use and share it, and the choices available to you.
Information we collect
Account information. When you use MTB Crew, we may create a guest account identifier. If you sign in with Apple or Google, we receive the identifiers and account information needed to authenticate you, which may include your name and email address.
Profile and social information. You may provide a username, display name, photo, biography, age, home riding zone, bike details, riding preferences, and links or handles for services such as Instagram and Strava. We also process crew connections and requests, ride reactions, and activity needed for social features and leaderboards.
Rides, location, and sensor information. When you record a ride, MTB Crew processes location points, route, time, distance, speed, elevation, and related ride information. Depending on the sensors and permissions you use, a ride may also include heart rate, cadence, energy, and other sensor readings. Location collection may continue in the background while a ride is being recorded. We use location to record and display rides, show maps and nearby trails, calculate ride information, and provide location-based conditions such as weather.
Content you submit. We process ride titles and other details you add, along with trail ratings, reviews, descriptions, and photos you submit.
Health information. If you authorize Apple Health access, MTB Crew may read the health and workout information you permit and write supported workout, route, distance, heart-rate, and energy information to Apple Health. Health access is optional and can be changed in iOS settings. We do not use information obtained from Apple Health for advertising.
Purchases and notifications. We process subscription status and entitlement information needed to provide paid features. If you enable notifications, we process a device push token and information needed to deliver account and crew notifications. Apple handles App Store purchases and billing.
Usage and diagnostics. We process app events, device and app information, performance data, and error reports to operate and improve MTB Crew. Error reports may include a screenshot or a description of the visible screen. Ride diagnostics may include detailed location points, timestamps, and accuracy information when a recorded ride is analyzed or a problem is investigated.
Website and support information. When you visit our website, hosting providers may process information such as your IP address, browser information, and requests needed to serve and protect the site. If you contact us, we process your message and contact details to respond.
How we use information
- Create and secure accounts; save and synchronize rides and profiles across devices.
- Record rides; provide maps, trails, weather, sensor features, and optional Apple Health or Strava features.
- Show the social features you use, including crew connections, shared rides, reactions, and leaderboards.
- Deliver notifications, subscriptions, and support.
- Diagnose errors, prevent misuse, maintain security, and improve the app.
- Meet applicable legal obligations.
Where applicable law requires a legal basis, we process information to provide the service you request, with your consent for optional activities where required, for legitimate interests such as security and diagnostics, or to meet legal obligations. You can withdraw an optional device permission in iOS settings; doing so may limit the related feature.
Where ride data is stored and who can see it
MTB Crew stores ride data on your device. For signed-in accounts, complete ride backups may also be stored in our cloud systems. These backups can contain detailed location and sensor samples.
MTB Crew separately creates a smaller ride record for social features. It can include ride statistics and an encoded route line. New social ride records default to the “Crew” audience. When a ride is shared with your crew, accepted crew members may see its shared details and route. A route can reveal places you visit, including a home or work location. Use the ride visibility control before sharing a route you want to keep private.
Profile details you choose to provide may be displayed to other users. In particular, a username, avatar, riding style, and home riding zone may be discoverable by signed-in users. Trail reviews, ratings, descriptions, and photos you submit may be visible to others, including people who are not signed in.
Service providers and connected services
We use providers to run MTB Crew. They process information according to the services they provide to us:
- Google Firebase and Google Cloud for authentication, cloud storage, databases, messaging, app configuration, analytics, and performance services. Account, profile, social, and ride records may be stored in Firebase Authentication, Cloud Firestore, Cloud Storage, and Firebase SQL Connect, which uses Cloud SQL for PostgreSQL.
- Apple and Google for sign-in services; Apple for App Store billing, Apple Health, and WeatherKit when you use those features.
- Mapbox to provide maps and location-based map features.
- Amplitude and Sentry for usage measurement, errors, and diagnostics.
- RevenueCat and Superwall for subscription entitlements, purchase experiences, and related measurement.
- Meta App Events for app activity and advertising measurement, subject to applicable settings and permissions.
- Strava, only when you choose to connect it or export a ride. An exported ride may include its route and available sensor information.
These providers may process identifiers and technical information needed for their functions. MTB Crew does not use Apple Health information for advertising. Information you choose to send to a connected service, such as Strava, is also governed by that service’s privacy policy. Your iOS settings provide controls for location, health access, notifications, and tracking permissions.
Retention and account deletion
We keep account information and associated content while your account is active and for as long as needed to provide MTB Crew. We keep other information only as long as needed for its stated purpose, security, dispute resolution, or a legal obligation.
You can initiate account deletion in the app. Deletion removes your account and associated personal data from our active systems, including cloud ride backups, social ride records, profile information, crew relationships, push registrations, and content you submitted, except information we must retain under applicable law or have another lawful reason to keep. Temporary backup copies may remain until they are overwritten under our backup retention process. We will tell you when a deletion request requires additional processing and confirm when it is complete.
Information stored only on your device is managed separately; removing the app and its local data removes that copy. Deleting your MTB Crew account does not delete a ride you previously exported to Strava or other information held independently by another service.
Deleting your account does not automatically cancel an App Store subscription. You can manage or cancel it in Apple’s subscription settings.
You can also contact us at mtbcrew@oststudio.dev about access, correction, deletion, or other privacy requests.
Your choices and rights
You can edit supported profile details and control the audience for supported ride sharing features in the app. You can change location, Apple Health, Bluetooth, notification, and tracking permissions in iOS settings. You can choose whether to connect Strava and whether to export a ride.
Depending on where you live, you may have additional rights to access, correct, receive, restrict, object to processing of, or delete your personal information. Contact us to make a request. We may need to verify your identity before fulfilling it.
Security and international processing
We use account authentication, access controls, and other technical and organizational measures to protect information. No system can guarantee absolute security. Our providers may process information in countries other than the one where you live, subject to applicable legal requirements.
Children
If you are a parent or guardian and believe a child has provided personal information through MTB Crew without consent required by law, contact us. We will review the request and take appropriate action.
Changes to this policy
We may update this policy as MTB Crew changes. We will post the revised policy with a new effective date and provide any additional notice required by law.
Contact
For privacy questions or requests, email mtbcrew@oststudio.dev. MTB Crew is published and operated by OST Studio.