City Bikeline Privacy Policy
City Bikeline is operated by Engram AI. This notice explains how the app uses information when it creates a personal cycling map and recommends exploration rides.
Information you choose to provide
- Apple Health cycling data: outdoor cycling workout dates, distance, duration, and route coordinates, read only after you grant Health access.
- Location: your precise location to choose a ride origin, display your position, and provide guidance during a ride you explicitly start, including while the screen is locked.
- Account information: identity-provider subject, name, profile, and verified email where supplied by a City Bikeline account, Apple, or Google, together with security and session records.
- Device integrity: App Attest keys, installation identifiers, and security events used to prevent unauthorized access.
How we use it
We use this information to import rides, attach them to canonical road segments, show visit frequency, estimate route novelty and ride time, generate cycling routes, guide an active ride, secure your account, diagnose failures, and respond to support requests.
Processing and service providers
Apple Health route geometry is sent only after a separate in-app consent. It is processed by City Bikeline's UK-hosted backend and self-hosted Valhalla routing services. OpenStreetMap supplies road and place data. ZITADEL provides the self-hosted identity service; Apple and Google provide optional federated sign-in. OVHcloud provides UK server infrastructure. Apple MapKit renders the base map under Apple's terms.
Continuous navigation location updates and route progress are processed on your iPhone and are not streamed to City Bikeline. The backend receives a current coordinate when you request a route and when the app requests a reroute after a confirmed deviation.
Retention
- Successful raw server-side route staging is deleted in the same transaction that stores the derived cycling map.
- Failed raw staging is deleted within 24 hours unless an active retry owns it.
- Derived road visits, destinations, and account data remain until you delete cycling history or your account.
- Security audit events and revoked-session records are deleted after 30 days.
Your original workouts remain in Apple Health. City Bikeline cannot modify or delete them.
Your choices
You can revoke Health or Location access in iOS Settings, delete uploaded cycling history without deleting local rides, or delete your City Bikeline account in the app. Account deletion removes City-owned account and ride data and trusted installations. Deleting a City Bikeline account removes City Bikeline's identity record, but does not delete your Apple or Google account. You can also remove City Bikeline from the connected-app controls offered by the sign-in provider you used.
Tracking and sale
City Bikeline does not sell personal information, serve advertising, or use your Health data for tracking or marketing.
Contact
For privacy questions or a data request, email support@engramai.co.