Privacy policy bike-energy app and web version

This privacy policy informs you about the processing of personal data when using the bike-energy app and the associated web version at map.bike-energy.com. The controller responsible for data processing is

Stranger Solution GmbH - bike-energy
Ennspark 2
5541 Altenmarkt
info@bike-energy.com

1. collection of data

The following personal data is collected about you when you create an account, but is not necessarily required:

• Username
• First name
• Last name
• E-mail address

You can view and change the data you have entered at any time (with the exception of geolocalization, which is determined based on the location of your device).

Device specifications: We may collect data about your device, such as operating system and device identifier. This data is required for the functionality of the app and to improve performance, security and troubleshooting.

Charging station data: You have the option of adding data (images, descriptions, etc.) to map markers/charging stations. The app can optionally access your camera and gallery for this purpose.

You can deny or restrict access to location, photos/camera at any time in the device settings. If you have any questions about changing this access, please contact the device manufacturer.

Customer support: We collect all the data you provide when you contact our customer support team to process your report.

2. use of data

Location data: You can activate the location query in the app to improve the user experience, e.g. to display charging stations in your vicinity. The location data is only processed locally on your device and is not stored or passed on.

We use your data for the following purposes:

• Provision of our services and functions
• Personalization of the content we provide to you
• Contacting you about updates and new features
• Analyzing usage and interaction with the app and testing new technologies and processes to improve the app
• Resolving disputes, resolving problems and enforcing our terms and conditions
• Investigating fraud and protecting our legal rights
• Protecting our users and third parties from harm

Please note that this list is not exhaustive and there may be other purposes for using your data, which are described in our Privacy Policy.

3. disclosure of data

Always remember that all information that you make available to the app can be viewed and shared by users. This content can also be viewed by non-users if, for example, a screenshot is taken and then shared with unauthorized persons.

Passing on data to other users:

• Data about your public profile, such as username
• Data that interacts with our services, such as created charging stations, uploaded images, edited map markers

Disclosure to third parties:

We may pass on personal data about you to service providers who provide services on our behalf, such as hosting the server. These service providers are contractually obliged to comply with data protection regulations and to process the data exclusively to fulfill our requirements.

We may share information about you with business partners who provide services and functionality.

Our app uses Mapbox to display map markers on a map. When using Mapbox, data such as your device data, interaction data and location data may be collected and processed by Mapbox. You can find more information in Mapbox's privacy policy:  Mapbox privacy policy.

Our app uses Stripe ffor processing recurring payments (for charging station owners with a Spark subscription). Details under Stripe privacy policy.

Our app uses Google Firebase to analyze and improve the user experience. As part of this use, personal data may be collected and processed by Google Firebase. We would like to explain to you transparently how and where this data is processed:

1. Collection of data:
   
   • Data from devices located in the EU (based on the geographical location according to the IP address) is collected via domains and servers in the EU.
   • This data includes your IP address, device data, interaction data and location data.

1. Processing of the data:

1. • The data collected is first collected and filtered in the EU.
   • IP data from EU-based traffic is discarded after collection and not used for other purposes.
   • After anonymization, the data is transferred to the USA for further processing and storage. The data is processed there for reporting and analysis purposes.

For detailed information about Google Firebase's privacy practices, please visit Google Firebase's privacy policy: Google Firebase Privacy Policy.

Firebase Cloud Messaging is a service from Google that makes it possible to send push notifications to Android, iOS and web applications. Firebase Cloud Messaging stores some data in order to provide the service. This includes device information such as the operating system, language settings and device ID. The tokens used to identify devices are also stored. Firebase Cloud Messaging uses Google servers, which may be located in different locations around the world (including in the USA), to ensure fast and reliable transmission of push notifications. However, Google ensures that all data is transmitted and stored in encrypted form to protect the privacy of users. Google privacy policy.

Disclosure for legal and security reasons:

• to fulfill legal requirements, such as official requests or court orders,
• to prosecute violations of our terms of use or other agreements,
• to protect our rights, property or the safety of our users and others,
• to detect and combat attempted fraud or security breaches,
• in the context of corporate restructuring such as mergers, takeovers or sales of company shares.

If we sell parts or all of our company, your data may be passed on to third parties as part of this sale.

4. duration of storage

We will only retain your personal data for as long as necessary to fulfill the purposes outlined in this Policy for which it was collected and in accordance with applicable law and legal requirements. In addition, we may retain your data for a maximum period of two years necessary for the establishment, exercise or defense of legal claims.

5. deletion of data

You can request the deletion of your account at any time by sending an email to info@bike-energy.com or by deleting your data directly in the app (Delete account). We will then delete your account and your data, unless there is a need to retain certain data to assert any contractual or legal rights we may have against you, e.g. in the event of legal disputes, or we are legally obliged to retain it. Please note that we need to retain certain data in order to ensure continued functionality for other users and that it may take some time to delete your data completely. Deleting your account will not cancel your subscriptions.

6. data access and data security

Only those employees who are responsible for the processing and implementation of the services offered have access to the data collected or generated through the use of the services. These persons are subject to the obligation of confidentiality. In order to protect the data from unauthorized access, we use various measures such as encrypted transmission. In addition, we take all technical and organizational measures available to us to protect your data (in accordance with Art. 32 GDPR). We regularly review and update our security measures to ensure that they correspond to the current state of the art.

7. your rights

You have the following rights under the applicable data protection laws in your country:

• Right to information: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed.
• Right to rectification: You have the right to demand the immediate correction of incorrect personal data concerning you.
• Right to erasure: You have the right to request the deletion of your personal data.
• Right to restriction of processing: You have the right to request the restriction of the processing of your personal data.
• Right to object: You have the right to object to the processing of your personal data. You can do this by discontinuing the use of the app.
• Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to request that it be transmitted to another controller.

If you believe that the processing of your data violates data protection law, you can contact the data protection authority.

8. right to information

As a user, you have the right to receive information about the personal data we have stored about you at any time in accordance with the applicable data protection laws. Send us a message by e-mail to info@bike-energy.com and we will immediately provide you with information about what data we have stored about you and where it is stored.

9. revision of the guidelines

We reserve the right to change this privacy policy at any time. You will be informed of any changes by updating the date of the privacy policy on the website and in the app. In addition, we will inform you via your e-mail (the address registered in your profile) or via a message via the bike-energy app. The amended privacy policy will enter into force on the date specified in the amended privacy policy.

Effective date: This Privacy Policy was last updated on March 27, 2025.