Groupset Privacy Policy

Last Updated: April 14, 2026

1. Introduction

Groupset ("we," "our," or "us") operates the Groupset mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By downloading or using Groupset, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not use the App.

2. App Name and Contact Information

• App Name: Groupset
• Contact Email: support@groupset.app

3. Permissions and Data Collection

Camera Access

Purpose: Used when you choose to upload a profile photo, team logo, or other images within the App.

How it works: The camera is only activated when you explicitly tap to take a photo or select from your gallery. Images are processed locally on your device and uploaded to our secure servers only when you choose to submit them. We do not automatically capture or transmit any images without your explicit action.

Photo/Media Library Access

Purpose: Allows you to select existing photos from your device for profile pictures, team logos, or chat attachments.

How it works: You control all access to your photo library. Selected photos are only transmitted when you choose to upload them.

Location Services

Purpose: For GPS tracking during cycling activities when you choose to sync with Strava.

How it works: Location data is collected only when you actively start an activity tracking session. You can disable location services at any time through your device settings.

Device Information

Purpose: To help us understand how the App is being used and to improve our services.

Data collected: Device type, operating system version, app version, and anonymous usage statistics.

4. Data Storage and Security

Where Data is Stored

Your data is stored on Supabase, Inc. ("Supabase"), our third-party backend service provider. Supabase provides secure cloud database infrastructure.

Security Measures

• All data is encrypted in transit using industry-standard TLS/SSL
• Authentication tokens are securely stored using platform-native secure storage
• We implement appropriate technical and organizational measures to protect your data

5. User Accounts and Authentication

Groupset requires account creation to use the App. We collect:

• Email address (for authentication)
• Name (for profile display)
• Team/organization affiliation

You are responsible for maintaining the confidentiality of your account credentials.

6. Third-Party Services

Strava

If you connect your Strava account, Strava's privacy policy and terms of service apply to any data shared between Strava and Groupset. You can disconnect your Strava account at any time through the App settings.

Stripe

Payment processing is handled by Stripe, Inc. We do not store your credit card or payment information on our servers. Stripe's privacy policy applies to all payment transactions.

7. Children's Privacy

Groupset is intended for use by mountain bike teams and may include members under 18 years of age. For users under 18:

• Parental consent is required for account creation
• Parents can review and manage their child's account information
• We do not knowingly collect personal information from children without parental consent

8. Data Sharing

We do not sell, trade, or otherwise transfer your personal information to outside parties. We may share information with:

• Service providers who assist us in operating the App (e.g., Supabase, Stripe)
• Legal authorities when required by law or to protect our rights

9. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Export your data in a portable format

To exercise these rights, contact us at support@groupset.app.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

11. Consent

By using Groupset, you consent to the collection and use of information in accordance with this policy.