Last updated: July 1, 2026

This Privacy Policy explains how InsightIQ (“we”, “us”) collects, uses, and protects your information when you use the Vely mobile application (the “App”). We built Vely to be a helpful cycling assistant, and we designed it to collect as little personal data as possible.

If you have any question about this policy, contact us at contact@insightiq.dev.

1. Who we are

The data controller for the Vely App is InsightIQ. Contact: contact@insightiq.dev.

2. Data we collect and why

We only collect what the App needs to work. Depending on the features you use:

Location data. With your permission, Vely uses your location to show nearby stations and bikes, center the map, and detect the start and end of your trips. Trip detection relies on geofencing (entering/leaving an area) together with motion data. Vely does not continuously track or record your route in the background. Background access (“Always”) is only requested if you enable automatic trip detection, and you can revoke it at any time in iOS Settings.

Motion & fitness data. With your permission, Vely reads iOS motion activity (Core Motion) to detect when you start or stop cycling, so it can recognise your trips automatically. This data is processed on your device and is not sold.

Account information. Every user starts with an anonymous account. If you choose to create an account (e.g. with your email or Sign in with Apple), we store a minimal profile (such as a display name and, if provided, an email address) to sync your data across devices and identify your subscription status.

Trips and preferences. Your planned trips, favorite stations and addresses (for example “Home” and “Work”), ride history and impact statistics are stored to provide the service. These are kept locally on your device and synced to our backend so you can access them across devices.

Notifications. If you enable notifications, we store device push tokens (via Apple Push Notification service) to send you trip briefings and live ride updates.

Purchases. Subscriptions and purchases are handled by Apple through the App Store. We receive your subscription status but never your payment card details.

Weather. To show local conditions, Vely sends approximate coordinates to a weather provider (Open-Meteo) to retrieve the forecast for your area.

Diagnostics & usage analytics. We use limited, aggregated analytics to understand which features are used and to improve the App. We do not use this data to build advertising profiles.

3. How we use your data

We use the data above to: provide and personalise the App’s core features (briefings, live availability, trip planning and detection, impact tracking); sync your data across your devices; send the notifications you opt into; manage subscriptions; and keep the App reliable and secure. We do not sell your personal data.

Where the GDPR applies, we process your data on these bases: your consent (location, motion, notifications, which you can withdraw at any time); performance of a contract (providing the features you request); and our legitimate interest (keeping the App secure and improving it).

5. Sharing and third parties

We share data only with service providers that help us run the App, acting as our processors:

  • Apple: App Store, in-app purchases, push notifications, Sign in with Apple, and Maps.
  • Google Firebase: authentication and cloud database used to store and sync your account and trip data.
  • Open-Meteo: weather data (receives approximate coordinates only).
  • Bike-share operators: Vely reads public, real-time availability feeds. If you choose to unlock or navigate to a bike, you may be handed off to the operator’s own app or website, governed by their privacy policy.

6. International transfers

Some of our providers (such as Google Firebase and Apple) may process data outside the European Economic Area. Where that happens, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. Data retention

We keep your data for as long as your account is active. You can delete your trips and account data from within the App, and you can ask us to delete your data entirely by contacting contact@insightiq.dev. We delete or anonymise data we no longer need.

8. Your rights

Subject to applicable law, you have the right to access, correct, delete, export, or object to the processing of your personal data, and to withdraw consent at any time. To exercise these rights, email contact@insightiq.dev. You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

9. Security

We use industry-standard measures to protect your data in transit and at rest. No method of transmission or storage is completely secure, but we work to protect your information and to limit the data we collect in the first place.

10. Children

Vely is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide notice within the App.

12. Contact

InsightIQ: contact@insightiq.dev