1. Who we are and what this policy covers
EverywhereRide is operated by More Web Services (“we”, “us” or “our”). This Privacy Policy explains how we handle personal information through our Android and iOS apps, browser riding service, website and support channels. Our privacy contact is support@everywhereride.com.
The service is in early access. Account sign-in, activity sync and third-party connections depend on your app version and whether the relevant feature has been enabled. The descriptions below apply when you use those features; they do not mean every integration is currently available.
2. Information we process
- Rider profile and settings: information you enter, such as display name, age, height, weight, bicycle type, training settings and estimated fitness values. Profile preferences, goals, career progress and route checkpoints are primarily stored on your device. Profile details included in a saved activity can also be uploaded when that activity is synced.
- Ride and sensor data: ride times, duration, distance, power, cadence, speed, heart rate when a monitor is connected, virtual route coordinates, elevation, workout information and calculated summaries. Heart-rate and fitness information may be sensitive personal data.
- Account information: if you sign in, your name, email address, provider account identifier, identity-verification information and device/session records. We receive sign-in information from Google or Apple, rather than your provider password.
- Shared-ride presence: a pseudonymous rider identifier, chosen display name, selected virtual route, progress, speed, power-to-weight information and riding status.
- Pilot diagnostics: trainer and heart-rate device names or identifiers, Bluetooth capabilities and packets, connection events, device/browser information, app build, errors and ride measurements. Diagnostic logging can start automatically with a trainer ride and can upload without an account. Raw packets may contain fitness readings and device identifiers.
- Support information: your name, email, message and any trainer, device, platform or app-version details you submit.
- Technical information: IP addresses, request times, requested pages, browser/device details, security events, necessary cookies and local-storage identifiers processed by us or our hosting and network providers.
3. Bluetooth, location and device storage
Bluetooth access connects to the trainer and sensors you select. You can disconnect them or revoke permission in your device settings. Without access, trainer measurements or control will not work, but a demo may still be available.
If you allow device location, the app can use your position to find a nearby road in a prepared world. Virtual riding coordinates describe the simulated route; they are not a continuous record of where you physically cycle. Weather requests use the selected riding region, with coordinates rounded to approximately an 11 km area before requests to the weather provider.
Ride history and settings are saved locally. The iOS app also maintains an on-device recovery copy of some settings and activities; downloaded route files are cached separately. Exported files and device or operating-system backups may create additional copies that you control.
4. How and why we use information
We use information to run rides and trainer controls, calculate and display fitness metrics, restore progress, authenticate users, sync activities you associate with an account, show riders on shared routes, handle exports and connections you request, answer support messages, diagnose compatibility problems, maintain security and comply with applicable obligations.
We rely on the grounds permitted by applicable law, such as providing the service you request, your consent where required, protecting the security and reliability of the service, and legal obligations. You can choose whether to sign in, connect third-party services, allow location or connect a heart-rate device. Declining optional information limits the corresponding feature. Information marked required in a form is needed to process that request.
5. Google and Apple sign-in
Where enabled, Google sign-in requests basic identity permissions: openid, email and profile. We use the name, verified email and provider identifier to identify your account, allow sign-in and associate your saved activities with that account. We do not request access to your Gmail messages, Google Drive files, contacts or calendar. We do not store your Google or Apple password.
Apple may provide a private relay email address and may provide your name only on the first authorization. If both providers supply the same verified email address, our service may associate them with the same EverywhereRide account.
We do not sell Google user data or use it for advertising, surveillance, credit decisions or training generalized AI models. Access is limited to operating and supporting the features described here, necessary service providers, authorized support/security work and legally required disclosures. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.
7. Storage, retention and security
Our website is hosted in Malaysia and our ride backend in Singapore. Cloudflare, Google, Apple, Strava and other providers may process information in other countries. Cross-border processing is subject to applicable law and appropriate safeguards; where consent is required, it must be obtained before the relevant processing.
- Local data: remains on your device until deleted, storage is cleared, the app is removed or the operating system removes it. Local recovery copies and exported files may need separate deletion.
- Account data and synced activities: are kept while your account exists or the activities remain saved. Account deletion removes linked account records and synced activities from the active account database. Activity-deletion identifiers may be retained while an account exists to prevent deleted rides from syncing back.
- Presence: is short-lived server memory; silent riders normally expire after about ten seconds.
- Routine diagnostic files: are normally scheduled for cleanup after fourteen days of inactivity. Copies needed for an ongoing support/security investigation or retained in backups may remain longer for that purpose.
- Support and technical records: are kept as needed to handle requests, maintain security, meet legal obligations and resolve disputes, with operational logs subject to rotation. Backup copies may remain until replaced or removed through the backup process.
We use HTTPS, access controls and other reasonable safeguards. No transmission, device or storage system is completely secure. We do not promise that all stored data is encrypted at rest. Keep your device and sign-in accounts secure.
8. Your choices, access and deletion
You can edit local rider information, delete saved activities, export ride files, disconnect sensors, decline location access, change available shared-ride visibility settings and disconnect Strava. Signing out does not by itself delete your account, local rides, diagnostic uploads or third-party copies.
Where account features are enabled, use Account & settings → Delete account to remove your server-side account and synced activities. Local ride history remains on your device. Deleting an account or a ride in EverywhereRide does not delete activities already uploaded to Strava; remove those in Strava separately. Revoke Google/Apple access through the provider’s account settings if desired. A disconnection request cannot guarantee removal of copies already held by a third party.
Contact support@everywhereride.com to request access, correction, an available copy, deletion, restriction, withdrawal of consent, or to ask about diagnostics. We may need to verify your identity and locate the relevant record. Rights and any exceptions depend on applicable law. Withdrawing consent does not affect earlier lawful processing and may prevent us from providing the corresponding feature. You may also raise concerns with the relevant data-protection authority, including Malaysia’s Personal Data Protection Commissioner.
10. Children, changes and contact
The current pilot is intended for adults aged eighteen and over. We do not direct the service to children. If you believe a child’s information has been provided, contact us so we can investigate and take appropriate action.
We will update the date on this page when the policy changes. For material changes we will provide an appropriate notice and obtain fresh consent where required before using information for a new purpose.
Privacy contact: More Web Services, operator of EverywhereRide — support@everywhereride.com. You can also use our contact form. Please do not send passwords or private sign-in tokens.
BAHASA MALAYSIA
Notis Privasi
Berkuat kuasa: 30 Oktober 2026. EverywhereRide dikendalikan oleh More Web Services. Notis ini menerangkan pengendalian data peribadi melalui aplikasi Android/iOS, perkhidmatan pelayaran, laman web dan saluran sokongan kami. Hubungi support@everywhereride.com untuk pertanyaan privasi. Ciri akaun, penyegerakan dan integrasi pihak ketiga bergantung pada versi aplikasi serta pengaktifan ciri tersebut.
1. Maklumat yang diproses
Kami memproses maklumat yang anda berikan seperti nama paparan, umur, ketinggian, berat badan, jenis basikal dan tetapan latihan. Data kayuhan termasuk masa, jarak, kuasa, kadens, kelajuan, kadar denyutan jantung apabila sensor disambungkan, lokasi laluan maya, ketinggian dan ringkasan latihan. Maklumat kesihatan dan kecergasan mungkin merupakan data peribadi sensitif. Tetapan, sasaran dan kemajuan disimpan terutamanya pada peranti; butiran profil dalam rekod aktiviti juga boleh dimuat naik apabila aktiviti disegerakkan.
Jika anda mendaftar masuk, kami menerima nama, alamat e-mel, pengecam penyedia identiti dan maklumat pengesahan serta sesi/peranti. Maklumat kehadiran bersama merangkumi pengecam samaran, nama paparan, laluan maya, kemajuan, kelajuan, nisbah kuasa kepada berat dan status kayuhan. Log diagnostik boleh bermula secara automatik semasa kayuhan menggunakan trainer, termasuk tanpa akaun, dan mengandungi nama/pengecam peranti, paket Bluetooth, masalah sambungan, maklumat aplikasi/peranti serta ukuran kayuhan. Paket mentah mungkin mengandungi bacaan kecergasan.
Apabila anda menghubungi kami, kami memproses nama, e-mel, mesej dan butiran trainer/peranti yang diberikan. Kami serta pembekal pengehosan/rangkaian juga memproses alamat IP, masa permintaan, halaman yang diminta, maklumat pelayar, log keselamatan, kuki perlu dan pengecam storan setempat.
2. Bluetooth, lokasi dan storan peranti
Bluetooth digunakan untuk trainer dan sensor yang anda pilih. Anda boleh memutuskan sambungan atau menarik balik kebenaran dalam tetapan peranti; ukuran atau kawalan trainer tidak akan berfungsi tanpa akses tersebut. Jika lokasi dibenarkan, aplikasi boleh mencari jalan berhampiran dalam kawasan maya yang disediakan. Koordinat maya menerangkan laluan simulasi, bukan penjejakan berterusan pergerakan fizikal anda. Permintaan cuaca menggunakan kawasan kayuhan yang dipilih, dibundarkan kepada kawasan kira-kira 11 km sebelum dihantar kepada pembekal cuaca.
Sejarah kayuhan dan tetapan disimpan pada peranti. iOS turut menyimpan salinan pemulihan setempat bagi sebahagian tetapan dan aktiviti, serta cache laluan berasingan. Eksport fail dan sandaran sistem pengendalian boleh mewujudkan salinan tambahan di bawah kawalan anda.
3. Tujuan dan pilihan anda
Data digunakan untuk menjalankan kayuhan dan kawalan trainer, mengira metrik, memulihkan kemajuan, mengesahkan akaun, menyegerakkan aktiviti, memaparkan penunggang pada laluan sama, melaksanakan eksport/integrasi yang diminta, memberikan sokongan, mendiagnosis masalah, menjaga keselamatan dan memenuhi kewajipan undang-undang. Asas pemprosesan bergantung pada undang-undang berkenaan, termasuk pelaksanaan perkhidmatan, persetujuan jika diperlukan, keselamatan dan kewajipan undang-undang.
Anda boleh memilih sama ada hendak mendaftar masuk, menyambung perkhidmatan lain, membenarkan lokasi atau menyambung sensor jantung. Menolak maklumat pilihan mengehadkan ciri berkaitan. Maklumat bertanda wajib pada borang diperlukan untuk mengendalikan permintaan tersebut.
4. Google, Apple dan Strava
Log masuk Google, apabila diaktifkan, meminta skop identiti asas openid, email dan profile. Nama, e-mel yang disahkan dan pengecam penyedia digunakan untuk log masuk dan mengaitkan aktiviti dengan akaun. Kami tidak meminta akses kepada mesej Gmail, Drive, kenalan atau kalendar, dan tidak menyimpan kata laluan Google/Apple. Apple boleh memberikan e-mel perantara peribadi dan nama hanya pada kebenaran pertama. Identiti Google/Apple dengan e-mel disahkan yang sama boleh dikaitkan dengan akaun EverywhereRide yang sama.
Kami tidak menjual data Google atau menggunakannya untuk iklan, pemantauan, keputusan kredit atau melatih model AI kegunaan umum. Akses dihadkan kepada ciri yang diterangkan, pembekal perlu, sokongan/keselamatan yang dibenarkan dan kewajipan undang-undang. Penggunaan dan pemindahan data Google akan mematuhi Google API Services User Data Policy, termasuk syarat Limited Use apabila berkenaan.
Jika anda membenarkan Strava, kami menerima nama/pengecam atlet serta token akses dan pembaharuan. Muat naik yang dibenarkan boleh mengandungi masa, jarak, ketinggian, kuasa, kadens dan kadar denyutan jantung. Aktiviti trainer yang baharu boleh dimuat naik secara automatik jika tetapan tersebut diaktifkan. Tetapan privasi serta salinan dalam Strava dikawal oleh Strava.
5. Pendedahan dan pemindahan antarabangsa
Apabila keterlihatan bersama diaktifkan, penunggang pada laluan sama boleh melihat maklumat kehadiran di atas. E-mel akaun dan kadar denyutan jantung tidak disertakan dalam respons kehadiran. Gunakan nama paparan yang tidak mengenal pasti diri dan kawalan keterlihatan yang tersedia.
Exabytes, ServerPoint, Cloudflare, Google dan pembekal berkaitan membantu pengehosan, penghantaran trafik, keselamatan, fon, log masuk serta e-mel sokongan. Permintaan Google Fonts mendedahkan maklumat rangkaian/pelayar kepada Google. Open-Meteo menerima kawasan anggaran bagi cuaca. Fail eksport dihantar ke destinasi yang anda pilih. Pendedahan yang perlu juga boleh dibuat bagi undang-undang, perlindungan hak, penyiasatan penyalahgunaan atau perubahan pemilikan dengan perlindungan, notis dan persetujuan jika diperlukan.
Laman web dihoskan di Malaysia dan pelayan kayuhan di Singapura. Pembekal boleh memproses data di negara lain. Pemindahan antarabangsa tertakluk kepada undang-undang dan perlindungan yang sesuai; persetujuan diperoleh terlebih dahulu jika diwajibkan. Kami tidak menjual data peribadi atau menggunakan data kecergasan/log masuk untuk iklan bersasar. Aplikasi kini tidak memasukkan penjejak iklan atau SDK analitik pemasaran pihak ketiga; pembekal infrastruktur masih boleh menyimpan log operasi dan statistik trafik perkhidmatan.
6. Penyimpanan, keselamatan dan tempoh pengekalan
Data setempat kekal sehingga dipadamkan, storan dikosongkan, aplikasi dibuang atau sistem pengendalian memadamkannya; salinan pemulihan dan fail eksport mungkin perlu dipadamkan berasingan. Data akaun/aktiviti yang disegerakkan dikekalkan sehingga dipadamkan atau akaun dipadamkan. Pengecam aktiviti yang dipadamkan boleh disimpan sementara akaun wujud untuk mengelakkan penyegerakan semula. Kehadiran berada dalam memori sementara dan biasanya luput selepas kira-kira sepuluh saat tanpa kemas kini.
Fail diagnostik rutin biasanya dijadualkan dibersihkan selepas empat belas hari tidak aktif. Salinan bagi penyiasatan sokongan/keselamatan atau sandaran boleh disimpan lebih lama bagi tujuan tersebut. Rekod sokongan dan teknikal disimpan mengikut keperluan pengendalian permintaan, keselamatan, undang-undang dan pertikaian; log operasi digilirkan. Salinan sandaran kekal sehingga diganti atau dipadamkan melalui proses sandaran.
Kami menggunakan HTTPS, kawalan akses dan perlindungan munasabah. Tiada sistem yang selamat sepenuhnya. Kami tidak menjamin semua data tersimpan disulitkan. Lindungi peranti dan akaun log masuk anda.
7. Akses, pembetulan, pemadaman dan penarikan persetujuan
Anda boleh mengedit profil, memadam/mengeksport aktiviti, menukar keterlihatan yang tersedia, memutuskan sensor/Strava dan menolak lokasi. Log keluar tidak memadamkan akaun, kayuhan setempat, log diagnostik atau salinan pihak ketiga. Apabila ciri akaun tersedia, gunakan Account & settings → Delete account untuk memadamkan akaun dan aktiviti pelayan; sejarah setempat kekal. Aktiviti yang telah dihantar ke Strava mesti dipadamkan dalam Strava. Anda juga boleh membatalkan akses melalui tetapan Google/Apple.
Hubungi support@everywhereride.com untuk memohon akses, pembetulan, salinan yang tersedia, pemadaman, sekatan, penarikan persetujuan atau pertanyaan diagnostik. Kami mungkin mengesahkan identiti dan mencari rekod berkaitan. Hak dan pengecualian bergantung pada undang-undang; penarikan persetujuan tidak menjejaskan pemprosesan terdahulu yang sah dan boleh mengehadkan ciri berkaitan. Aduan boleh dikemukakan kepada pihak berkuasa perlindungan data yang berkenaan, termasuk Pesuruhjaya Perlindungan Data Peribadi Malaysia.
8. Kuki, umur dan perubahan
Borang sokongan menggunakan kuki sesi bagi keselamatan dan rekod cap masa IP yang dihash bagi mengehadkan penyalahgunaan. Aplikasi menggunakan storan setempat, pangkalan data dan fail untuk sesi, tetapan, kayuhan dan cache. Cloudflare boleh menggunakan kuki keselamatan. Menyekat atau memadamkan storan boleh mengeluarkan anda daripada akaun atau memadamkan kayuhan yang belum disegerakkan. Storan ini tidak digunakan untuk pemprofilan iklan.
Pilot ini ditujukan kepada orang dewasa berumur lapan belas tahun ke atas, bukan kanak-kanak. Hubungi kami jika data kanak-kanak telah diberikan. Tarikh pada halaman ini akan dikemas kini apabila notis berubah. Perubahan penting akan disertai notis yang sesuai dan persetujuan baharu jika diperlukan sebelum penggunaan untuk tujuan baharu. Hubungan privasi: More Web Services, pengendali EverywhereRide, support@everywhereride.com atau borang hubungan. Jangan hantar kata laluan atau token peribadi.