BIKO / TESTFLIGHT BETA

App privacy

Effective 29 September 2026. This notice covers the BIKO mobile beta, operated by the BIKO development team. Contact [email protected] about your data. BIKO is not yet publicly launched. The website privacy notice covers our Coming Soon website separately.

Accounts and community

We use your email address, account ID and authentication information to create and secure your account, send confirmation and recovery emails, and provide account features. Supabase processes authentication. Your profile may contain a username, display name, biography, home area, interests, social links and photos you choose to provide. Profile details identify you in community interactions. Profile and cover photos are served through public image URLs; do not upload images you want to keep private.

Friend requests, relationships, blocks, messages, shared routes and saved-route references are stored to deliver these features. Public routes can be seen by others; privately shared routes are restricted to their permitted recipients. Messages are intended for their participants. These access restrictions are not end-to-end encryption: authorised service administration can access server-stored content for operation, support, security or legal obligations.

Location and routes

With your permission, BIKO uses your location to centre maps, suggest nearby drives and record routes. Recording can continue in the background when you explicitly start it and grant the necessary permission. Recordings include coordinates and timing information used to display the drive and calculate route statistics. Route drafts and recordings are stored on your device; when you share a route, its route geometry and associated details are uploaded. Review routes before sharing, because they may reveal your home, workplace or other sensitive places.

Road routing sends selected coordinates to routing.openstreetmap.de. Map requests go to OpenFreeMap and, when satellite view is selected, Esri's imagery service. These providers receive your IP address and requests that can reveal the area being viewed. Opening directions, event registration, social or official-source links sends you to the chosen provider, which applies its own privacy practices. You can stop recording and change location permissions in device settings. This beta does not request motion-activity data.

Garage, photographs and documents

Vehicle details and selected vehicle photos are kept on your device. If you choose account backup, vehicle details and photos are uploaded to private account storage. Camera and photo access are used for the images you choose. Images may contain identifying details such as registration plates; review them before uploading.

Shaken certificate recognition runs on the device. The scanner does not upload the document image or its raw recognised text. Selected vehicle facts, such as type code, engine, weight and first-registration details, can be retained locally after you approve the result. Certificate data is excluded from garage cloud backups. Your original library photo is not deleted by scanning. Other locally saved content, including meet plans, remains on the device unless you explicitly use a sharing or upload feature.

Optional voice trial

Voice chat is available only to invited test accounts. When you choose to join a room, LiveKit Cloud processes your account identifier, room and connection information to connect you with the other participants. You join muted; microphone permission and an explicit unmute are required before sending audio. Microphone audio is transmitted through LiveKit to the room's participants. An active voice session can continue in the background until you leave or it ends. You can mute, leave the room or change microphone permission in device settings.

This implementation does not record or transcribe voice audio and does not use an AI voice agent. Voice traffic is encrypted in transit, but this trial does not enable end-to-end encryption. LiveKit processes connection and session diagnostics to operate the service; processing is not restricted to Japan.

Optional notifications

If you allow notifications while signed in, BIKO registers your device's push token, platform, account/session identifiers and notification preferences with Supabase. Message and friend-request alerts are sent through Expo's push service and Apple's notification service on iOS. Those providers receive the device token and alert payload. Remote alerts use generic text, an alert type and a notification identifier; they do not include message contents or the sender's name. Delivery and error information is used to operate notifications.

Meet reminders are scheduled locally on your device for plans marked Going; their meet details are not sent to Expo for delivery. You can enable or disable message, friend-request and meet-reminder alerts separately in BIKO Settings, or change permission in device settings.

Service providers and beta diagnostics

Supabase provides account, database and file-storage services. Resend sends account emails. Cloudflare hosts our website and forwards support email to our support inbox. LiveKit provides the optional voice trial, and Expo and Apple deliver remote notifications as described above. These services process the data needed to provide their functions, including technical connection and delivery logs. Infrastructure and support processing may occur outside Japan.

Apple processes TestFlight installation, usage, crash and feedback information and makes beta testing information available to us. We use it to investigate faults and improve BIKO. See Apple's TestFlight privacy notice. If you send screenshots, logs or email feedback, avoid including passwords, verification codes or other people's private information.

This beta has no advertising or cross-app advertising tracking. We do not sell your personal data.

Retention, controls and deletion

Local content remains until you remove it or the app's local data. Cloud account information and saved content are retained to provide your account and the features you use, until you delete supported items or request account deletion. Technical logs and provider backups may remain for their retention periods; deleting an item does not immediately erase every backup or a copy already saved by another person. We may retain information necessary for security, resolving disputes or legal obligations.

You can edit your profile, manage sharing and block other users in the app. For access, correction or account-deletion requests, email [email protected] from your account address. We verify ownership and explain the requested deletion's scope. Do not send passwords or identity documents. See account-deletion instructions. Uninstalling BIKO does not delete your cloud account.

BIKO uses HTTPS for its cloud connections and account-based access controls. No storage or transmission system is risk-free. The beta is not directed at children under 13. Contact us if you believe a child has provided account information. We will update this notice when the app's data practices change and identify the effective date here.