Privacy Policy
Effective: April 29, 2026
This Privacy Policy describes how the Bidon iOS application ("Bidon", "we", "our", or "the app") handles information when you use it. We've kept it short because Bidon is built to require as little of your data as possible.
1. Summary
- Bidon does not require an account or login.
- We do not collect your name, email, location, contacts, photos, or health data.
- We do not use third-party analytics, advertising SDKs, attribution networks, or trackers.
- Your preferences (selected riders, team, widget theme, onboarding state) are stored only on your device.
- Bidon fetches publicly available Grand Tour race data from our own server. These requests do not include any personally identifying information.
2. Information Stored on Your Device
Bidon stores the following information locally on your device using Apple's standard storage APIs (UserDefaults inside an App Group container):
- The riders and team you selected during onboarding
- The widgets you've marked as favorites
- Your widget theme preference (Light, Dark, or Follow System)
- Onboarding completion state and a recent rate-prompt timestamp
- A locally cached copy of recent race results, stages, and standings so widgets render quickly when offline
This information is shared between the Bidon app and its widget
extension via an Apple App Group container (group.com.bidon.app)
so that widgets can display the same content you see in the app. None
of it is transmitted to us or to any third party. It stays on your
device until you delete the app.
3. Network Requests
To keep race information current, Bidon and its widgets make HTTPS requests to our race-data API at api.getbidon.com, hosted on Cloudflare. These requests fetch publicly available Grand Tour data (stage schedules, classification standings, team rosters) and do not include any account, identifier, or personal information from you.
As is standard for any internet request, your device's IP address is visible to Cloudflare for the brief moment needed to route the response. Cloudflare may retain short-term security and routing logs in accordance with Cloudflare's privacy policy. We do not associate IP addresses with any user identity, because we do not collect user identities.
4. Permissions Bidon Requests
The only iOS permission Bidon may ask for is:
-
Notifications: used only to schedule local
reminders for stage starts. These notifications are scheduled by
your device using
UNUserNotificationCenter; we do not send remote push notifications, and we cannot see whether or when you receive them. You can decline this permission and Bidon will continue to work; you'll simply not receive stage-start reminders.
Bidon does not request access to Location Services, Contacts, Photos, the Camera, the Microphone, HealthKit, HomeKit, Calendars, or your local network.
5. Third Parties
Bidon does not include any third-party analytics, advertising, attribution, crash-reporting, or marketing SDKs. The only third parties involved in providing the service are:
- Apple: the App Store distributes the app, and Apple's standard system services (notifications, widget refresh, App Store Connect) are used by every iOS app. Apple's handling of this information is governed by Apple's Privacy Policy.
- Cloudflare: hosts our race-data API. See section 3 above.
We do not sell, rent, trade, or otherwise share user data with any third party for advertising, marketing, profiling, or use-based data mining purposes. We don't collect such data in the first place.
6. Children's Privacy
Bidon is not directed to children under 13 (or the equivalent minimum age in your jurisdiction) and we do not knowingly collect personal information from children. The app is rated for general audiences and contains no chat features, in-app messaging, user-generated content, or third-party advertising. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the address below.
7. Your Choices and Rights
Revoking permissions
You can disable notification access at any time in iOS Settings → Bidon → Notifications. The app will continue to function without it.
Deleting your data
Because Bidon stores its data only on your device, deleting the app from your iPhone (long-press → Remove App → Delete App) permanently removes all locally stored Bidon data, including your preferences and any cached race data. There is no separate server-side account to delete because we don't maintain user accounts.
California residents (CCPA / CPRA)
We do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act. We do not collect the categories of personal information that would trigger CCPA access or deletion requests. If you have questions, contact us using the address below and we will respond consistent with applicable law.
EEA / UK residents (GDPR / UK GDPR)
We do not collect personal data within the meaning of the EU/UK General Data Protection Regulation. To the extent any limited data (such as an IP address visible during routing) is processed by our infrastructure provider, the lawful basis is our legitimate interest in operating and securing the service (Article 6(1)(f)). You may contact us at any time to exercise rights of access, rectification, erasure, restriction, or objection; in most cases we will have no personal data tied to you to respond with.
8. Data Security
On-device data is protected by iOS sandboxing and the encryption provided by your device. Network requests use HTTPS. We follow reasonable, industry-standard practices, but no system can be guaranteed perfectly secure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective" date at the top and, where appropriate, surface a notice in the app. Continued use of the app after an update constitutes acceptance of the revised policy.
10. Contact
Questions about this policy or your privacy? Email hello@getbidon.com.