RideReady Privacy Policy

Overview

Blue Sparrow is a solo developer based in India and operates RideReady, a cycling-weather and ride-planning app. This policy explains the information RideReady handles, why it is needed, where provider processing occurs and the choices available to you. RideReady is designed around data minimisation, purpose limitation and transparency, and is operated to support the EU General Data Protection Regulation, UK data-protection rules, the California Consumer Privacy Act as amended, India's Digital Personal Data Protection framework and comparable privacy requirements where they apply.

Most preferences, cached forecasts, notification history, chosen images and recent location records are stored on your device. Fresh forecasts, map tiles, optional sign-in, purchases and support necessarily connect to service providers.

Data we handle

RideReady may handle the following categories:

• Precise or approximate coordinates obtained with your device permission, a last-known location, or a location query you provide. Coordinates can also appear in locally cached forecast keys and RideReady's saved alert location.
• Forecast and environmental results, including place labels, weather, air quality, alerts, wind, visibility, UV and daylight information, together with generated ride scores and recommendations.
• Local preferences and activity state, such as units, language, theme, selected background, onboarding status, forecast cache, notification choices, thresholds, quiet hours and short notification-event history.
• Images you choose for an avatar or visual background. Custom images are copied into RideReady's private app storage. A Google profile photo may be downloaded and cached when you use it.
• Optional Google and Firebase account information, including an account identifier, email address, display name and profile image URL.
• A limited Firestore profile for signed-in users, which can include profile preferences, account timestamps, deletion-request timestamps, product identifiers and subscription or lifetime-entitlement status.
• Purchase and entitlement information handled by Google Play and RevenueCat, including product, receipt, transaction, renewal, expiry and subscription status. Blue Sparrow does not receive your full payment-card details.
• Support or feedback information you deliberately submit, including your reply email, name, subject, message, app version, platform and locale. Theme and other limited diagnostics are included only when you select the diagnostics option.
• Technical and security information used by Firebase App Check, Google Play Integrity, providers and network services, such as an app installation token, IP address, device or app version, request time and service logs.
• A random installation identifier sent to RideReady's weather proxy for request handling and quota protection. It is generated on the device and is separate from your Google account.

RideReady does not request contacts, SMS content, call history or microphone recordings. It has no advertising feature. The current application package does not include Firebase Analytics or Firebase Crashlytics SDKs, so the older statements that those products collect RideReady usage or crash data are not current. Other connected providers may still create the operational, security and purchase records described in their own notices.

Location and background checks

RideReady requests foreground coarse or precise location so it can obtain local forecasts, show your map position and support compass calculations. On Android, RideReady does not declare the always-location or background-location permission. On Apple platforms, it requests when-in-use location rather than always access.

If you enable RideReady weather notifications, the app stores recent coordinates on the device and schedules periodic operating-system work. A scheduled check may attempt to obtain a current or last-known position when the operating system and granted permission allow it; otherwise it uses the cached coordinates. It then sends the selected coordinates through the weather request path. This means location-based forecast processing can occur while the app is not visible after you have enabled monitoring, even though RideReady does not request Android's always-location permission. Background timing and access are controlled by the operating system and are not guaranteed.

You can turn weather monitoring off in notification settings, revoke location or notification permission in system settings, clear app storage, or uninstall RideReady. Revoking location prevents a fresh fix but does not by itself erase coordinates already cached in app storage; clear the relevant app data if you also want those removed.

How we use data

Information is used only as reasonably necessary to:

• Retrieve and cache weather, environmental and alert information for a requested or enabled-monitoring location.
• Calculate cycling scores, recommended time windows, daylight context, map position and compass information.
• Deliver user-selected local notifications and enforce thresholds, quiet hours, frequency limits and premium feature access.
• Save preferences, custom appearance choices and recent in-app notification history on the device.
• Authenticate an optional account, display a profile and keep premium access associated with the correct user.
• Process purchases, restore entitlements, prevent abuse and respond to subscription status changes.
• Receive and answer support or feedback that you choose to send.
• Protect RideReady and connected services with request attestation, rate controls, diagnostics and security logs.
• Meet applicable privacy, consumer-protection, accounting and security obligations.

RideReady does not sell or rent personal information. It does not use personal information for targeted advertising, cross-context behavioural advertising or a cross-app advertising profile.

Sharing and processors

Blue Sparrow does not share personal information for independent advertising. Limited information may be processed by these providers for the stated feature:

• Blue Sparrow's weather proxy receives the requested coordinates or place query, random installation identifier, app identifier, IP address and request metadata. It obtains forecast, alert and air-quality information from WeatherAPI or a configured upstream weather provider.
• MapLibre displays maps using MapTiler when a key is configured or the selected public demonstration tile service otherwise. Tile and style requests can reveal an IP address, device metadata and the map area being viewed to the applicable map provider.
• Google Sign-In, Firebase Authentication, Firebase App Check and Firestore handle optional identity, request attestation, limited profile and entitlement records. A Google profile image can be fetched from Google's image service.
• Google Play and RevenueCat handle products, purchases, receipts, subscription status, customer-centre functions and entitlement delivery.
• Blue Sparrow's support-request service and its delivery or infrastructure providers handle contact and feedback information when you submit a form.
• Device operating-system services handle location permission, background work, local notifications, app updates and any platform backup or device-transfer feature you enable.

These third-party providers operate under their own terms and privacy notices. They may generate security, billing, operational and access logs and may process information in locations selected by their infrastructure. Blue Sparrow may also disclose limited information when required by applicable obligations or when reasonably necessary to protect users and the service from fraud, abuse or a serious security threat.

Cloud and backups

RideReady does not provide a Blue Sparrow cloud backup of your local forecast cache, custom images, notification history or appearance preferences. Android, Apple or another platform may include app files or preferences in an operating-system backup or device transfer unless you disable that feature; those copies are controlled by your platform account and may outlive an uninstall.

For signed-in users, the app creates or updates a limited Firestore user record. It is separate from the local forecast cache and does not contain a history of every weather screen you view. The repository configures Firestore for the eur3 European multi-region. This EU configuration applies to the Firestore records only and does not extend to Firebase Authentication, App Check, Google Sign-In, weather, map, support, purchase or platform-backup processing.

The in-app deletion flow currently records a deletion request and a date 30 days later in Firestore, clears the local premium flag and signs you out. Completion of server-side profile and authentication deletion depends on the deployed backend. The flow does not cancel a store subscription and does not itself prove that all local files, provider logs, support records or store records were erased. For confirmation or a broader privacy request, contact [email protected].

Retention

Retention depends on the type of information:

• Successful weather responses are cached on the device and entries older than 24 hours are pruned when the cache is used. A saved last location, alert coordinates and preferences can remain longer, until removed through app or system controls, app storage is cleared, or RideReady is uninstalled. Platform backups may restore some local data.
• In-app notification-event history is kept on the device for up to 72 hours and capped at 200 events. Notification configuration remains until changed or app data is cleared.
• Custom avatars and backgrounds remain in app storage until replaced or removed, app data is cleared, or the app is uninstalled, subject to any platform backup.
• Firebase profile and entitlement records remain while the account or related service is active and for a limited period afterwards as needed for deletion completion, security, purchase integrity and applicable record-keeping.
• Purchase records are retained by Google Play and RevenueCat under their own requirements. Store records may remain after account deletion or cancellation.
• Support messages and limited delivery logs are retained only as long as reasonably needed to answer the request, protect the service and meet applicable obligations.
• Weather, map, Firebase, support and security providers retain their own request or operational logs under their published practices.

Where exact provider periods are not controlled by Blue Sparrow, you can consult the provider's notice or ask [email protected] for the current information available to Blue Sparrow.

Security

RideReady uses operating-system app isolation for local files, encrypted network transport for connected services, Firebase security rules for signed-in profile records, App Check attestation for supported requests and restricted support-request fields. Access to Firebase profile data is tied to the authenticated user under the applicable rules.

No storage or transmission method is risk-free. Protect your device and Google account, install trusted operating-system updates, review app permissions and avoid placing secrets or unnecessary sensitive information in support messages or chosen images. Report a suspected privacy or security issue to [email protected].

Your rights

Depending on where you live, you may have rights to request access, confirmation, correction, deletion, restriction, objection, portability or withdrawal of consent, and to complain to a privacy regulator. Mandatory rights are not limited by this policy.

• In the EEA and UK, processing may rely on performing the service you request, consent for optional features, legitimate interests in security and reliability, and compliance with applicable obligations. You may object to processing based on legitimate interests and withdraw consent for future optional processing.
• In California and other US states with applicable privacy laws, you may request to know, access, correct or delete covered information and obtain a portable copy. RideReady does not sell personal information or share it for cross-context behavioural advertising, so there is no sale or targeted-advertising opt-out to exercise. Blue Sparrow does not discriminate for using an applicable privacy right.
• In India, you may request access to available information about processing, correction or erasure, use the grievance contact below and exercise nomination or other rights when the applicable provisions provide them.
• Comparable access, correction, deletion and consent rights are supported in other regions where they apply.

Use in-app controls first for location, notifications, images, preferences and account deletion. Manage subscriptions separately in Google Play or RevenueCat's customer centre. For a privacy request, email [email protected] from the address connected to your account where possible and describe the app and request. Blue Sparrow may need proportionate verification before acting and may retain limited information where an applicable exception requires it. An authorised agent may submit a request where local rules permit and authority can be verified.

Children

RideReady is a general-audience cycling utility and is not designed specifically for children. It does not knowingly use personal information for targeted advertising. If you are below the age at which you can make privacy or purchase choices independently where you live, use RideReady with a parent or guardian and do not create an account, buy a product or submit support information without appropriate involvement.

If a parent or guardian believes a child supplied personal information inappropriately, contact [email protected]. Blue Sparrow will review and take appropriate deletion or restriction steps after reasonable verification.

International transfers

Blue Sparrow is based in India and supports users globally. RideReady's Firestore database is configured for the eur3 European multi-region, so Blue Sparrow intends those limited Firestore profile and entitlement records to remain in EU infrastructure subject to Google's service operation and resilience arrangements.

Not every category stays exclusively in the EU. Firebase Authentication and App Check, Google Sign-In, Google Play, RevenueCat, weather and map providers, the support path and platform backups may process information in India, the United States, Europe or other locations. Where required, Blue Sparrow and its providers rely on recognised safeguards and apply data minimisation and security measures appropriate to the transfer. You can contact [email protected] for current information about a specific RideReady processing path.

Changes

RideReady and its providers may evolve. Material policy changes will be explained through the app or https://bluesparrow.dev, and the updated date will change. Advance notice or renewed choice will be provided where required. Earlier versions may be retained for transparency.

Contact

For privacy questions, rights requests or data concerns, email [email protected]. For product support, email [email protected]. Current app and policy information is available at https://bluesparrow.dev.

Blue Sparrow operates RideReady as a solo developer based in India and provides contact electronically through the website and email.