Partner
Get the App →

Bike Karma — Privacy Policy

Effective Date: 1st June 2026 | Governing Law: Province of British Columbia, Canada

Last updated: 1 June 2026

A Note Before We Start

We built Bike Karma to bring people outside, not to build a data business. This Privacy Policy explains, as plainly as we can, what we collect, why, and who we share it with — in compliance with British Columbia's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

If you're registering for an in-person Adventure Activity, our Waiver and Terms Agreement — specifically Part H — covers the data practices specific to that registration in more detail, including health disclosures and emergency contacts. This Privacy Policy is the broader reference for how Bike Karma handles personal information across the whole platform; for anything specific to event registration, Part H of the Waiver is the more detailed source.

Part A — Who We Are

Bike Karma Inc. operates the Bike Karma platform, website, and mobile application, based in Vancouver, British Columbia, Canada.

Part B — Plain Language Summary

  • We collect account info, location/ride data during activities, and content you choose to share.
  • We use it to run the app, keep the community safe, and improve route recommendations — never to sell your data.
  • We work with a small number of trusted service providers (named below) to run Bike Karma. We don't sell your personal information to advertisers or data brokers.
  • If you're visiting BC from elsewhere, see Part K — your data is handled under Canadian law while you use the app here.
  • How long we keep your data, and what happens if Bike Karma is ever acquired, are covered in Parts I and J.

Part C — What Information We Collect

  • Account information: name, email address, profile photo, and any information provided via Google Sign-In (or, in future, Strava, if you choose to connect it).
  • Location and route data: GPS location and route data recorded during Adventure Activities.
  • Ride statistics: distance, speed, elevation, and duration of recorded activities.
  • Health and biometric data: heart rate, cadence, calories, and similar metrics, if you connect a wearable device. We treat this as sensitive personal information — see Part E.
  • Content you share: photos, messages, bike parking reviews, and other Content you post through the app.
  • Emergency contact information: provided through your profile, used by Community Hosts if needed during an Adventure Activity.
  • Usage and analytics data: how you interact with the app, collected through Google Analytics (GA4).
  • Device and technical data: device type, operating system, and similar diagnostic information needed to keep the app running smoothly.

Part D — How We Use Your Information

  • To provide core app functionality — route tracking, ride summaries, event discovery and participation history
  • To improve platform safety features and route recommendations
  • To personalize your experience — recommending adventures and businesses based on your interests and location
  • In aggregated, de-identified form, for community insights, advocacy, and platform improvements
  • To communicate with you about your account, events you've joined, and important updates, sent from our '@bikekarma.ca' addresses

Part E — Who We Share It With

We work with a small number of service providers to run Bike Karma. We name them here rather than hiding behind "third-party partners," because we think you should know exactly who touches your data:

  • Supabase — hosts our database, authentication, and backend infrastructure
  • Mapbox — powers in-app maps and navigation, and receives location data needed for that purpose
  • Google — provides Sign-In and, separately, Analytics (GA4) on app usage
  • Amazon Web Services (AWS) — hosts the Bike Karma web and mobile application
  • Resend — delivers transactional emails (account confirmations, event updates) from our @bikekarma.ca addresses
  • Strava — not yet active, but if we introduce a sign-in or data-sharing integration in the future, this Privacy Policy will already cover that: data would only be exchanged with your explicit choice to connect the account, governed by both our practices and Strava's

Health and biometric data specifically is never sold or shared with third parties for commercial purposes. More broadly, we do not sell your personal information to advertisers or data brokers.

Part F — Cookies and Tracking

We don't currently run a cookie consent banner, but we do use Google Analytics (GA4) to understand how people use the app, which relies on standard analytics cookies/identifiers. As Bike Karma grows, we'll introduce a proper cookie consent tool and expand this section accordingly — this is an area we expect to update.

Part G — Data Security

All personal data is stored with industry-standard encryption, both at rest and in transit. Health and biometric data is treated as sensitive personal information under this policy.

Part H — Your Rights

You have the right to access, correct, or request deletion of your personal data by contacting us at hello@bikekarma.ca. We'll respond as promptly as we can, consistent with our obligations under PIPA and PIPEDA. We're also working on an in-app "Delete My Account" option so you won't need to email us for this at all — until that ships, the address above is the fastest way to reach us.

Part I — How Long We Keep It

We hold your personal data for as long as your account stays active. If you delete your account or ask us to remove your data, we'll wipe it from our active systems within 30 days, and from backups shortly after. Some information may be kept longer where we're legally required to (for example, records tied to an incident during an Adventure Activity), but only for as long as that requirement applies.

Part J — If Bike Karma Is Ever Acquired

We don't plan on going anywhere, but in the interest of being upfront: if Bike Karma is ever acquired by or merged into another company, your personal information would transfer as part of that deal. This Privacy Policy continues to protect it regardless — any new owner would need to honour the commitments made here, at least until they've given you clear notice of and a chance to review updated terms of their own.

Part K — Visitors and Tourists

Bike Karma is built for BC's outdoor community, and we know that includes visitors from outside Canada — including, we hope, plenty of people discovering Vancouver during major events like the FIFA World Cup 2026. If you're using Bike Karma while visiting from elsewhere, your personal information is collected and processed in Canada under Canadian federal and provincial privacy law (PIPEDA and PIPA), regardless of your home country's own data protection rules.

If you're a resident of the European Union, European Economic Area, or United Kingdom, you may also retain rights under the General Data Protection Regulation (GDPR) or equivalent local law while you use Bike Karma. That includes rights to access, correct, delete, or receive a copy of your personal data. You can exercise these rights the same way as anyone else — by contacting us at hello@bikekarma.ca — and we'll honour them alongside our obligations under PIPEDA and PIPA.

Part L — Age and Children's Privacy

Bike Karma is intended for users 19 years of age or older, matching the eligibility requirement in Part C of our Terms of Service and the age threshold in our Waiver. We don't knowingly collect personal information from anyone younger than that through the app directly. Minors may participate in in-person Adventure Activities only under a parent or guardian's registration and consent, as set out in Part J of our Waiver.

Part M — Changes to This Policy

We may update this Privacy Policy as Bike Karma evolves — particularly as we expand third-party integrations or introduce cookie consent tooling. We'll note the "last updated" date at the top whenever we do, and flag material changes through the app.

Part N — Contact Us

Questions about this Privacy Policy, or want to exercise your data rights? Reach us at hello@bikekarma.ca.