Privacy Policy

Last updated: June 8, 2026

Introduction

VicBUG ("we", "our", or "us") is operated by Bike Routes PTY LTD. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

By using VicBUG, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Contact Information

  • Name: We collect your first and last name to display on your profile and leaderboards so other cyclists can recognize you.
  • Email Address: Used for account creation, authentication, password recovery, and important service communications.

Location Data

  • Precise Location: We collect your precise location to provide turn-by-turn navigation, display your position on maps, track route coverage, and enable location-based features like nearby hazards and collectible points of interest.
  • Location data is only collected when you use navigation features or when tracking routes.

User Content

  • Photos or Videos: When you report hazards, you may optionally upload photos to help other cyclists identify the issue.
  • Other User Content: This includes hazard reports, star ratings, route data, and feedback you provide within the app.

Identifiers

  • User ID: A unique identifier (Firebase UID) is assigned to your account for authentication and linking your data (routes, achievements, etc.).

Usage Data

  • Product Interaction: We collect analytics about which features you use to improve the app experience and understand user needs.

Connected Cycling Account Data

  • Garmin Connect: If you connect Garmin Connect, we may import cycling activity data you authorize, including route geometry, timestamps, distance, duration, and speed information.
  • Strava: If you connect Strava, we access cycling activity data according to Strava's authorization and privacy policies.

Diagnostics

  • Crash Data: Anonymized crash reports help us identify and fix bugs to improve app stability.
  • Performance Data: We monitor app performance metrics (load times, network requests) to optimize speed and responsiveness.

How We Use Your Information

We use the collected information for:

  • App Functionality: Providing navigation, route planning, hazard reporting, achievement tracking, and all core features.
  • Analytics: Understanding how users interact with the app to prioritize improvements and new features.
  • Account Management: Creating and maintaining your account, authentication, and profile.
  • Safety: Displaying community-reported hazards to keep cyclists informed of road conditions.
  • Community Features: Showing your progress on leaderboards and enabling social aspects of the app.
  • Technical Support: Debugging issues, responding to support requests, and improving app stability.
  • Connected Cycling Features: Showing private personal ride coverage, importing cycling activity history, improving route-time estimates, and creating aggregated, de-identified cycling insights.

Garmin Connect Data

Garmin Connect is optional. We only collect Garmin Connect data after you choose to connect Garmin Connect to VicBUG and authorize the requested Garmin permissions.

  • Data collected: Authorized cycling activity data, which may include activity identifiers, route geometry/GPS track points, timestamps, distance, duration, speed, elevation, activity type, and related activity metadata made available by Garmin Connect.
  • How we use it: To show your private personal ride coverage, import your cycling activity history, improve route-time estimates, and create aggregated, de-identified cycling insights such as community heatmaps and speed maps.
  • Storage and processing: Garmin Connect data is stored and processed in VicBUG systems using Firebase and Google Cloud services, including Firestore, Cloud Storage, Cloud Functions, authentication, logging, and security monitoring. Access is limited to providing, maintaining, securing, and improving VicBUG cycling features.
  • Third-party processing: Firebase and Google Cloud process Garmin Connect data as infrastructure service providers for VicBUG. We do not provide Garmin Connect activity files or Garmin-derived personal activity records to third-party AI services for processing.
  • Sharing: Your individual Garmin Connect activities are not shown publicly and are not sold. We may share aggregated, de-identified cycling insights with advocacy, council, Bicycle Network, or transport partners only where individual users and individual activities cannot reasonably be identified.
  • Retention and deletion: Garmin Connect data is retained while your VicBUG account and Garmin Connect integration remain active, or as needed to provide VicBUG services. You can disconnect Garmin Connect at any time. Account deletion removes your linked Garmin integration and personal Garmin-derived activity data from active systems.

Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

  • Public Information: Your display name, profile photo, and route coverage appear on public leaderboards. Hazard reports you submit are visible to all app users.
  • Service Providers: We use Firebase (Google) for authentication, database, analytics, and crash reporting. These services operate under their own privacy policies.
  • Strava Integration: If you connect your Strava account, we access your activity data according to Strava's authorization and privacy policies.
  • Garmin Connect Integration: If you connect Garmin Connect, your individual Garmin activities remain private to you. We do not sell Garmin activity data. Aggregated, de-identified cycling insights may be shared with advocacy, council, or transport partners where individual users and individual activities cannot reasonably be identified.
  • Legal Requirements: We may disclose information if required by law or to protect the rights, property, or safety of VicBUG, our users, or others.
  • Bicycle Network Partnership: VicBUG partners with Bicycle Network (BN) to promote cycling infrastructure advocacy. We may share aggregated, anonymized usage statistics with BN (e.g. popular routes, infrastructure gaps). Your individual data is never shared — only combined, de-identified trends.

Third-Party Services

VicBUG uses the following third-party services:

  • Firebase (Google): Authentication, database, analytics, performance monitoring, crash reporting
  • Strava: Optional integration to upload routes to Strava Route Builder
  • Wahoo: Optional integration to upload routes directly to your Wahoo cycling computer
  • Garmin Connect: Optional integration to upload routes as courses to your Garmin device and, with your consent, import cycling activity data for personal coverage and aggregated/de-identified cycling insights
  • MapLibre/Mapbox: Map rendering and display
  • GraphHopper: Routing and navigation engine
  • Bicycle Network: Advocacy partner — receives only aggregated, anonymized usage data

These services have their own privacy policies governing their collection and use of data. When you connect Wahoo, we only upload routes you choose to share. When you connect Garmin Connect or Strava, we only access activity data you authorize for cycling-related VicBUG features.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account:

  • Your account data, routes, and personal information will be permanently deleted from our systems.
  • Public contributions (like hazard reports) may be retained in anonymized form to maintain community safety data.
  • Analytics and diagnostic data are automatically anonymized and not tied to your deleted account.

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: You can view and edit your profile information in the app settings.
  • Deletion: You can delete your account at any time from the app settings, which will permanently remove your personal data.
  • Location Control: You can disable location access in your device settings, though this will limit navigation and tracking features.
  • Marketing: We do not send marketing emails. All communications are service-related.
  • Strava Disconnect: You can disconnect your Strava integration at any time from app settings.
  • Garmin Disconnect: You can disconnect Garmin Connect at any time. Account deletion removes your linked Garmin integration and personal Garmin-derived activity data from our active systems.

Account Deletion

You can delete your VicBUG account and all associated data at any time. To delete your account:

  1. Open the VicBUG app
  2. Go to Settings (gear icon)
  3. Tap on your Profile
  4. Scroll down and tap Delete Account
  5. Confirm deletion when prompted

When you delete your account:

  • Your profile, routes, achievements, and personal data will be permanently deleted
  • Your Strava connection (if any) will be disconnected
  • Public hazard reports may be retained anonymously for community safety
  • This action cannot be undone

If you cannot access the app, contact us at vicbug.app/support to request account deletion.

Children's Privacy

VicBUG is rated for users 13 years and older due to user-generated content (hazard reports with community ratings). We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Firebase security rules to control data access
  • Secure authentication with industry-standard practices
  • Regular security reviews and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of VicBUG after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through our website:

Open Source and Transparency

VicBUG is committed to transparency. Our infrastructure data and algorithms are documented publicly. We believe cyclists deserve to know exactly how their data is used and how routing decisions are made.