The short version
We collect only what we need to run Ingrano: your email address (for auth) and the builds you save. We don't sell your data. We don't track you across the web. We don't run ads. You own your data and can delete it at any time.
1. What We Collect
Account Data
When you create an account, we store your email address and a hashed password. We use Supabase Auth for authentication — your password is never stored in plain text.
Saved Builds & Bikes
If you save a build or add a bike to your garage, we store that configuration data (frame ID, component IDs, build name) linked to your account. This is the core feature — without it, Ingrano can't remember your builds.
Fit Profile
If you use the fit profile feature, we store your body measurements and riding position data. This data is used solely to provide frame size recommendations within Ingrano. It is never shared with third parties.
Usage Data (Anonymous)
We may collect anonymised usage metrics (e.g., which frames are viewed most often) to improve the product. This data is not linked to individual accounts.
2. What We Don't Do
- ✓We do not sell your personal data to anyone, ever.
- ✓We do not run ads and do not share your data with advertising networks.
- ✓We do not track you across other websites.
- ✓We do not share your personal data with third parties except as required by law.
3. Cookies
We use only the minimum cookies necessary to run Ingrano:
- Auth cookies — to keep you logged in across page refreshes. These are session cookies set by Supabase.
- Preference cookies — to remember small UI preferences (e.g., whether you've completed the product tour). These are stored in localStorage, not cookies.
We do not use tracking cookies, marketing cookies, or third-party analytics cookies.
4. How We Store Your Data
Your data is stored on Supabase (PostgreSQL database hosted on AWS infrastructure in the EU). All data is encrypted at rest and in transit. We apply row-level security policies so your builds and bikes are only accessible by you.
5. Your Rights (GDPR)
If you're in the EU or UK, you have the following rights:
- Access — request a copy of all data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — ask us to delete your account and all associated data
- Portability — request your data in a machine-readable format
- Objection — object to our processing of your data
To exercise any of these rights, email legal@ingrano.cc. We'll respond within 30 days.
6. Data Retention
We keep your data for as long as your account is active. If you delete your account, we'll delete your personal data within 30 days. Some anonymised, aggregated data (e.g., popular frame views) may be retained for product improvement.
7. Changes to This Policy
If we make significant changes to this policy, we'll notify registered users by email before the changes take effect. The "Last updated" date at the top will always reflect the current version.
Contact
Data controller: Ingrano
Email: legal@ingrano.cc