Privacy Policy

This privacy policy applies to the RuedaFeliz app (hereinafter referred to as "Application") for mobile devices, developed by Mattia Sangermano (hereinafter referred to as "Service Provider") as a free service. This service is provided "AS IS".

1. What information does the Application collect?

When you register and use the Application, the Service Provider collects the following information:

• Email address — provided during registration, used to identify your account.
• Reviews and ratings — the bike ratings and optional comments you submit through the Application.
• Account identifiers — a unique user ID generated by AWS Cognito upon registration.

The Application does not collect your precise location, device ID, or mobile operating system beyond what is technically required to operate the service.

2. How is your information used?

The information collected is used solely to:

• Provide and operate the Application's features (bike ratings and reviews).
• Identify your account and associate your reviews with your profile.
• Contact you with important notices related to the service if necessary.

The Service Provider does not use your data for advertising or sell it to third parties.

3. Does the Application use Artificial Intelligence (AI)?

The Application does not currently use Artificial Intelligence technologies to process your data or provide features.

4. Third-party services

The Application uses the following third-party services which may process your data according to their own privacy policies:

• Amazon Web Services (AWS) — used for user authentication (Cognito) and data storage (RDS).
• Expo — used as the mobile application framework.
• Sentry — may be used in the future for error monitoring. If enabled, Sentry's Privacy Policy will apply.

The Service Provider may also disclose your information:

• As required by law, such as to comply with a subpoena or similar legal process.
• When necessary to protect the rights, safety, or property of the Service Provider or users.
• To trusted service providers acting on the Service Provider's behalf, who are bound by confidentiality obligations.

5. Your rights under GDPR

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data under the General Data Protection Regulation (GDPR):

• Right of access — you can request a copy of the personal data held about you.
• Right to rectification — you can request correction of inaccurate or incomplete data.
• Right to erasure — you can request deletion of your personal data ("right to be forgotten").
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to the processing of your personal data in certain circumstances.
• Right to restrict processing — you can request that processing of your data be limited in certain circumstances.

To exercise any of these rights, please contact the Service Provider at [email protected]. Requests will be responded to within 30 days.

The legal basis for processing your data is the performance of the contract (providing the Application's service) and, where applicable, your consent.

6. Data retention

The Service Provider retains your personal data for as long as your account is active and for a reasonable period thereafter. If you request deletion of your account and data, it will be removed within 30 days. Note that some data may be retained if required by law.

7. Children's privacy

The Application is not directed at children under the age of 13. The Service Provider does not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal information, please contact [email protected] and the data will be deleted promptly.

8. Security

The Service Provider implements appropriate technical and organisational measures to protect your personal data, including encrypted data storage and secure authentication via AWS Cognito. No system can guarantee absolute security, but reasonable safeguards are maintained.

9. Opt-out and account deletion

You may stop using the Application at any time by uninstalling it. To request full deletion of your account and associated data, contact [email protected].

10. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time. The Service Provider will notify you of significant changes by updating this page. Continued use of the Application after changes constitutes acceptance of the revised policy.

11. Contact

For any questions or concerns regarding this Privacy Policy, please contact:
[email protected]