Privacy Policy
Last updated: April 5, 2026
Cyclosonics, Inc.
Table of Contents
- Introduction
- Information We Collect
- How We Use Your Information
- Lawful Bases for Processing (GDPR)
- Data Retention
- Third-Party Services
- International Data Transfers
- Your Rights
- California Residents (CCPA)
- Children’s Privacy
- Data Storage and Security
- Changes to This Policy
- Contact
1. Introduction
Cyclosonics (“we,” “our,” or “us”) operates the Cyclosonics mobile application (available on iOS and Android) and the cyclosonics.com website. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services. By using Cyclosonics, you agree to the practices described in this policy.
2. Information We Collect
Account Information
When you create an account, we collect your email address, username, and password (stored securely via Supabase authentication). This information is required to save presets, access the community library, and sync your settings across devices.
Preset Data
Sound presets you create and save are stored on our servers (Supabase) and are publicly visible to all Cyclosonics users along with your username. There is no private preset option — this is by design, as the community library is built on open sharing. You may delete your presets at any time from within the app.
Controller Telemetry
Cyclosonics connects to your eBike or electric motorcycle’s motor controller via Bluetooth Low Energy (BLE) to read throttle position and optional telemetry data (e.g., motor RPM, battery voltage). This data is processed entirely on your device in real time and is never transmitted to our servers or any third party. No ride data, location data, or telemetry history is collected or stored by us.
App Analytics
The Cyclosonics app uses PostHog, a privacy-focused product analytics platform, to collect anonymous usage data. This helps us understand how the app is used and improve the experience. PostHog collects:
- Screen views and feature interactions (e.g., which screens are visited, which controls are used)
- App version, device type, and operating system version
- Session duration and general usage patterns
- Crash reports and error events
PostHog does not collect your name, email address, or any data that directly identifies you. A random, device-level identifier is used to correlate events within a session. You may opt out of analytics at any time in the app’s Settings screen.
Website Analytics
Our website uses Cloudflare Web Analytics, which is privacy-focused and does not use cookies, fingerprinting, or any form of user tracking. It collects only aggregate, anonymized metrics (page views, referrers, browser/OS distribution). No personal data is collected through our website analytics.
Contact and Inquiry Data
If you contact us through our website, submit an integration inquiry, or join our waitlist, we collect the information you provide (name, email address, and message content) to respond to your inquiry.
3. How We Use Your Information
- To provide, operate, and maintain the Cyclosonics app and services
- To store and sync your presets across sessions and devices
- To enable the community preset library
- To respond to your inquiries and support requests
- To notify you of product updates (if you opted into the waitlist or enabled notifications)
- To understand how the app is used and improve its features, based on anonymous analytics data
- To detect, investigate, and prevent security incidents or abuse
We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.
4. Lawful Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following lawful bases:
| Data / Activity | Lawful Basis |
|---|---|
| Account creation and authentication | Performance of a contract (Art. 6(1)(b)) |
| Preset storage and sync | Performance of a contract (Art. 6(1)(b)) |
| App analytics (PostHog) | Legitimate interests — improving product quality and reliability (Art. 6(1)(f)) |
| Responding to inquiries | Legitimate interests — responding to communication (Art. 6(1)(f)) |
| Waitlist communications | Consent (Art. 6(1)(a)) |
| Security and fraud prevention | Legitimate interests — protecting users and infrastructure (Art. 6(1)(f)) |
Where we rely on legitimate interests, you have the right to object to that processing. See Section 8 for details.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information and presets | Until account deletion, plus up to 30 days in backups |
| App analytics events (PostHog) | 12 months from collection |
| Contact and inquiry data | 3 years from last interaction, or until deletion is requested |
| Security and audit logs | 90 days |
You may request early deletion of your data at any time. See Section 8.
6. Third-Party Services
We use the following third-party services, each of which has its own privacy policy governing its data handling:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Authentication, database, and file storage for accounts, presets, and wavetables | supabase.com/privacy |
| Cloudflare | Website hosting, CDN, and privacy-focused web analytics | cloudflare.com/privacypolicy |
| PostHog | Anonymous app usage analytics and error tracking | posthog.com/privacy |
| Apple App Store | iOS app distribution | apple.com/legal/privacy |
| Google Play Store | Android app distribution | policies.google.com/privacy |
7. International Data Transfers
Cyclosonics is operated from the United States. Our service providers — including Supabase and PostHog — may process data on servers located in the United States or other countries outside your jurisdiction.
If you are located in the EEA, UK, or Switzerland, please be aware that these transfers may not benefit from the same level of data protection as in your home country. Where required, we rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards as recognized under applicable law. By using Cyclosonics, you acknowledge this transfer.
8. Your Rights
Depending on where you live, you have various rights regarding your personal data. Regardless of location, we honor the following for all users:
- Access — Request a copy of the personal data we hold about you
- Correction — Request correction of inaccurate or incomplete data
- Deletion — Request deletion of your account and associated personal data
- Portability — Request your data in a structured, machine-readable format
- Withdraw consent — Withdraw consent for communications or analytics at any time (e.g., via the Settings screen in the app)
- Object to processing — Object to processing based on legitimate interests (e.g., analytics), in which case we will cease that processing unless we have compelling grounds
- Opt out of analytics — Disable PostHog analytics at any time via Settings → Privacy in the app
EEA, UK, and Swiss residents also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data appropriately.
To exercise any of these rights, contact us at admin@cyclosonics.com. We will respond within 30 days.
9. California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:
- Right to know — You may request disclosure of the categories and specific pieces of personal information we have collected about you, and how it has been used or disclosed
- Right to delete — You may request deletion of personal information we have collected, subject to certain exceptions
- Right to opt out of sale — We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising
- Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights
To exercise your California privacy rights, contact us at admin@cyclosonics.com.
10. Children’s Privacy
Cyclosonics is not intended for children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected such information, please contact us at admin@cyclosonics.com and we will promptly delete it.
11. Data Storage and Security
Account and preset data is stored on Supabase’s infrastructure with encryption at rest and in transit. Passwords are hashed and never stored in plaintext. We implement reasonable and industry-standard security measures to protect your data. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the “Last updated” date at the top of this policy, and where appropriate, by providing notice through the app or by email to the address associated with your account.
13. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
Cyclosonics, Inc.
Email: admin@cyclosonics.com