Privacy Policy

Shreddi is a mountain-bike app for ranking the trails you've ridden and finding ones riders like you love. It is operated by Ruan Abarbanel ("we"). This policy says what the app collects, what other riders can see, and the choices you have. Effective October 8, 2026.

The short version

• You can browse Shreddi without an account. Then nothing about you is stored on our servers. A rider profile, ranking trails and saving trails need an account.
• If you create an account, your profile, your rankings and the notes you add to them are stored on our servers and other signed-in riders can see them. Your email, saved trails and home region are never shown to other riders.
• Your location is used on your device to show trails near you. We do not store it on our servers.
• No ads, no ad tracking, and we do not sell your data. We keep our own simple usage records (which screens and features are used, and errors the app hits) on our servers; nothing goes to any analytics company.

What we collect

Without an account you browse as a guest: there is no rider profile, and the only thing kept is on your device (your map settings). You need an account to set up a profile and rank trails.

When you create an account, we store:

• Your email address, used to sign you in.
• Your profile: username, skill level, bikes and riding preferences, and a profile picture if you add one. The picture is stored as a public file: other signed-in riders see it beside your name, and anyone with its web address could load it.
• Your rankings: the trail, the direction you rode it, how you felt about it, the style and difficulty you gave it, the score that results, and when you ranked it.
• The notes you add to rankings, which are public: other signed-in riders can see them.
• Your private items: your saved trails, and your home region (a place name and its coordinates).

If you ask us to bring Shreddi to your state, we store the state or province you asked for with a random identifier for your install of the app, and your account if you are signed in.

If you send a bug report, we store what you wrote along with the app version, your device's make, model and operating system version, the same random install identifier, and your account if you are signed in. We use it only to find and fix the problem.

What other riders can see

Shreddi works by comparing your rankings with other riders'. Once you have an account, other signed-in riders can see your username, skill level, bikes, riding preferences, and your rankings and scores.

Other riders can see the notes you add to your rankings. They can never see your email address, your saved trails, your home region or your location.

Riders without an account see community scores built from other riders' rankings, but not who those riders are.

Location

If you allow it, Shreddi uses your device's location to center the map and to work out which trails are near you. This happens on your device. Your position is kept on the device so the app opens where you left off; it is not sent to our servers.

Two things do leave your device, and neither includes your identity:

• When you search for a place, the text you type is sent to OpenStreetMap's place search.
• When you ask us to bring Shreddi to your state, your position, rounded to about a kilometre, is sent to OpenStreetMap's lookup service to find which state you are in.

You can turn location off at any time in your device's settings. The app then uses your home region, if you gave one.

Strava

Connecting Strava is optional. If you connect it, Shreddi reads the rides you have recorded there (their names, dates and routes, apart from any you have made private) to work out which trails you have ridden, so it can invite you to rank them.

• The routes are compared with the trail map on your device. Only the result is kept, on your device: which trails you rode, which way, and when. The routes themselves are not stored, by us or on the device.
• Our servers keep your Strava athlete id and name and the permission Strava issued, so the app can read new rides. Nothing from your Strava account is shown to other riders or used for anything else.
• You can disconnect in Settings at any time. That withdraws the permission at Strava and removes it from our servers, along with what was found on the device. Deleting your account does the same on our servers.

How we use it

• To show your rankings and scores, and keep them in sync across your devices.
• To find riders whose rankings resemble yours and recommend trails from theirs.
• To show community averages, grades and styles for each trail.
• To sign you in and to respond when you contact us.
• To decide which regions to add next.

Services we rely on

These companies handle data on our behalf or receive requests from the app:

• Supabase stores accounts, profiles and rankings, and sends sign-in emails through our email provider.
• Map imagery and terrain come from OpenFreeMap, Esri and openly published elevation data. Like any website, these services see your device's network address and the area of map you are looking at.
• OpenStreetMap provides the trail data and the place search described above.
• Strava, if you connect it, provides the rides you have recorded, as described above.

We do not use advertising or third-party analytics services, and we do not sell or rent personal data to anyone. We do keep our own usage records: when the app is opened, which screens are shown, and when a trail is ranked, opened, searched for or shared, with the app version, the device type and the random install identifier, and your account if you are signed in. We also record errors the app hits, with the error text and the screen it was on. These records are only used to understand how Shreddi is used and to fix problems, and are deleted after 90 days.

Keeping and deleting your data

We keep your account data for as long as you have an account.

You can delete your account from Settings in the app (Profile → Settings). That permanently removes your profile and its picture, rankings, notes, saved trails and home region from our servers, and clears them from the device.

Signing out removes your data from that device and leaves it in your account.

You can also ask us for a copy of your data, or to correct or delete it, by writing to info@shreddi.bike. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA; write to the same address to use them.

Children

Shreddi is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, write to us and we will delete it.

Security

Data is sent over encrypted connections, and access to each rider's private items is restricted to that rider. No service can promise perfect security; if we learn of a breach affecting your data we will tell you.

Changes

If we change this policy in a way that matters, we will say so in the app before the change takes effect. The date at the top shows when this version began.

Contact

Questions or requests: info@shreddi.bike.