At Laya, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cycling community platform and related services.

1. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically when you use the Service:

• Account Information: Name, email address, phone number, profile picture, date of birth, and gender when you register an account
• Social Login Data: When you sign in with Apple or Google, we receive authentication tokens and basic profile information from those providers
• User-Generated Content: Photos, comments, ride notes, and other content you post within the app
• Location Data: GPS coordinates, route data, cycling speed, elevation, and distance from your device when you use route tracking features
• Device Information: Device type, operating system version, unique device identifiers, and app version
• Usage Data: Features accessed, interactions, time spent, and other usage statistics
• Health and Fitness Data: If you connect third-party fitness apps or wearables, we may collect cycling performance metrics such as heart rate, cadence, and calories burned

2. How We Use Your Information

We use the collected information for the following purposes:

• Creating and managing your account
• Providing, maintaining, and improving the Service
• Tracking and recording your cycling routes and performance
• Facilitating connections with other cyclists in your area
• Sending service-related notifications and updates
• Responding to your comments, questions, and requests
• Monitoring and analyzing usage patterns and trends
• Detecting, preventing, and addressing technical issues and fraud
• Personalizing your experience and delivering relevant content
• Complying with legal obligations

3. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• With Other Users: Your profile information, cycling stats, and routes may be visible to other users of the platform based on your privacy settings
• With Service Providers: We share data with trusted third-party providers who assist in operating the Service, including cloud hosting, analytics, and customer support
• For Legal Compliance: We may disclose information if required by law, court order, or governmental regulation
• With Your Consent: We may share information for any other purpose with your explicit consent
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

4. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time. Even after account deletion, we may retain certain information for legal, tax, or regulatory compliance purposes, or as otherwise required by law.

Location history and route data can be deleted individually through your account settings.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and penetration testing
• Access controls and employee security training
• Secure data centers with physical security measures

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a machine-readable copy of your data
• Opt-Out: Opt out of marketing communications at any time
• Objection: Object to certain processing activities, such as targeted advertising
• Restriction: Request restriction of processing under certain circumstances

To exercise these rights, please contact us at privacy@layaapp.com. We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used to deliver relevant advertisements (opt-out available)

You can manage cookie preferences through your device settings or browser controls.

8. Location Data

Location data is essential for route tracking and discovering nearby cyclists. We collect location data only when the app is in use or running in the background, with your explicit permission.

You can enable or disable location services at any time through your device settings. Disabling location services may limit certain features of the app.

Location data shared publicly through the app (e.g., on your profile or in group rides) is done so at your discretion and can be controlled through your privacy settings.

9. Children's Privacy

The Service is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us at privacy@layaapp.com. Upon verification, we will promptly delete such information.

10. Third-Party Links

The Service may contain links to third-party websites or services, including social media platforms and fitness integrations. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or via email at least 30 days before the changes take effect. Your continued use of the Service after the changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@layaapp.com

Address: Laya Inc., 123 Cycling Lane, San Francisco, CA 94102

Data Protection Officer: dpo@layaapp.com