Bicino policy

Privacy

Last updated 20 October 2026

What we collect

When you join the Bicino waitlist, we collect the email address and location you provide. We store this information in Firebase Firestore; joining the waitlist does not create a Stripe customer or collect payment information.

When you buy bicino one, we collect the delivery name, email address, and shipping address you provide. Stripe processes payment details and stores the customer, Checkout, payment, and shipping records needed for the order.

If you create a Bicino account, Firebase Authentication receives a stable account identifier and the name, email address, and sign-in provider information that Apple or Google makes available. Apple may provide a private relay email address instead of your personal address.

When you delete an Apple-linked account, Bicino temporarily processes the fresh Apple access token only to ask Firebase to revoke Apple access before deleting the Firebase account. Bicino does not retain that token.

Optional social riding

When social riding is enabled and you choose to use it, Bicino stores your public rider name, username, profile photo, friendships, invitations, and routes you explicitly share. Profile photos are resized and their metadata is removed.

When you explicitly create, join, or accept an invitation to a group ride, Bicino starts sharing your live location and GPS-derived speed, distance, moving time, and elapsed time with the other accepted riders in that ride. Opening an invite link or viewing your profile alone does not start sharing. Positions expire after 60 seconds without a fresh update; group sessions expire within 24 hours of their scheduled start. Stopping sharing, leaving, blocking, and account deletion revoke access. Heart rate, power, and other sensitive health measurements are not shared. Push notifications contain generic invitation or request notices.

A group invitation can include a public preview showing a map snapshot of the route, its name, and distance. Anyone with that preview URL, including messaging services fetching a link preview, can view it without joining. It does not include live positions or the rider list. Ending the ride or revoking the preview stops new reads from Bicino; copies already cached by recipients or messaging services cannot be recalled.

To keep shared routes with their owners, the service records a one-way fingerprint of a route’s geometry when another rider’s route is shared with you, and those copies cannot be republished as yours. To deliver alerts safely, the app keeps a random installation identifier and secret on your device; the service stores the identifier and a one-way digest of the secret with your push token. Requests that need no sign-in, such as opening a share link or confirming a deletion, are rate limited using a one-way digest of the requesting network address. These hourly counters expire within two hours and are removed by scheduled maintenance.

Published content remains until you remove it or delete your account. Expired messages and retry records are removed within 24 hours. Account deletion immediately disables social access; a retryable cleanup removes media and publications. A one-way digest of an app-held deletion receipt is kept for 30 days so the app can confirm the deletion if its response was lost. Previously saved copies on another rider’s device cannot be recalled. Deletion does not remove private workouts in Apple Health or local routes. Social storage and private object storage providers process this information only to deliver the feature; it is not used for advertising.

How we use it

We use waitlist information to send Bicino availability updates and understand where riders want Bicino to become available. We do not sell personal information.

We use purchase information to create and fulfil the order, reserve one of the 100 Founders Edition devices, send receipts and delivery updates, prevent fraud, provide support, and meet legal obligations. We do not sell personal information.

We use account information to authenticate you, connect a purchase to the correct customer, protect account-only features, support account recovery and deletion, and prevent unauthorized access. Signing in is optional for browsing and required to buy.

Processors and retention

Stripe stores purchase and payment records under its own privacy terms. Google processes Firebase Authentication, waitlist, and inventory data, and Apple or Google processes the sign-in you choose under its own privacy terms. Hosting and operational providers may process limited technical data needed to run bicino.com. Order records are retained for fulfilment, support, fraud prevention, tax, accounting, and other legal requirements. Firebase account data remains until you delete the account or ask us to do so, subject to security and legal retention needs. Waitlist data remains until you ask us to remove it or it is no longer needed for Bicino availability updates.

Your choices

Signed-in customers can delete their Firebase account from the account page. Deleting an account does not delete purchase records that Bicino must retain to fulfil an order or meet legal obligations. You can also ask to leave the waitlist at any time. To ask about, correct, or request deletion of your information, email hi@bicino.com.