Privacy policy

Privacy Policy

Last updated: April 2026

This Privacy Policy describes how Bikelab Inc. (“we”, “us”, “our”) collects, uses, and shares your personal information when you visit or make a purchase from dirtlab.bike or bikelab-in.myshopify.com (the “Site”).

1. Information We Collect

Device Information: When you visit the Site, we automatically collect information about your device, including your web browser, IP address, time zone, and cookies installed on your device. We also collect information about the pages you view, referring websites or search terms, and how you interact with the Site.

We collect Device Information using:

  • Cookies — data files placed on your device that often include an anonymous unique identifier. For more information about cookies and how to disable them, visit allaboutcookies.org.
  • Log files — track actions on the Site and collect data including IP address, browser type, ISP, referring/exit pages, and timestamps.
  • Web beacons, tags, and pixels — electronic files used to record how you browse the Site.

Order Information: When you make or attempt to make a purchase, we collect your name, billing address, shipping address, payment information (credit card numbers are processed securely through our payment provider and never stored by us), email address, and phone number.

Warranty Registration: If you register your frame for warranty coverage, we collect your name, email, frame serial number, order number, purchase date, and country.

2. How We Use Your Information

We use Order Information to:

  • Fulfill orders (processing payment, arranging shipping, providing order confirmations)
  • Communicate with you about your order or warranty
  • Screen orders for potential risk or fraud
  • Provide product updates and information relevant to your purchase (with your consent)

We use Device Information to:

  • Screen for potential risk and fraud (using your IP address)
  • Improve and optimize the Site (analytics on browsing behavior and marketing effectiveness)

3. Sharing Your Information

We share your personal information with the following third parties:

We may also share your information to comply with applicable laws and regulations, respond to lawful requests (subpoenas, search warrants), or protect our rights.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Advertising & Cookies

We may use your information to provide targeted advertisements. You can opt out of targeted advertising through:

5. Do Not Track

We do not alter our data collection and use practices when we detect a Do Not Track signal from your browser.

6. Your Rights

European residents (GDPR): You have the right to access, correct, update, or request deletion of your personal information. To exercise these rights, contact us using the details below. Note that your information may be transferred outside of Europe, including to Taiwan and the United States, to fulfill our contractual obligations.

California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information.

All customers: You may request access to, correction of, or deletion of your personal data at any time by contacting us.

7. Data Retention

We retain your Order Information for our records unless you request deletion. Warranty registration data is retained for the duration of the applicable warranty period plus 2 years. Device Information and analytics data are retained for up to 26 months.

8. Security

We implement industry-standard security measures to protect your personal information. Payment information is encrypted during transmission using SSL/TLS. We do not store credit card numbers on our servers.

9. Minors

The Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The updated policy will be posted on this page with a revised date.

11. Contact

For questions about this Privacy Policy or to exercise your data rights:
Email: sales@bikelab-inc.com
Mail: Bikelab Inc., No. 8, Ln. 550, Sec. 1, Fengxing Rd., Tanzi District, Taichung City 427, Taiwan

Range Calculator data contributions

Our public Range Calculator at /pages/range-calculator lets you upload a GPX file from any route-planning tool (Komoot, AllTrails, Garmin Connect, Strava, etc.) to model whether a Paratu CP can cover that ride. We process your file entirely in your browser — by default, nothing leaves your device.

After processing your GPX, we may invite you to contribute the ride's abstract profile to help us improve range predictions for every Paratu CP rider. Contribution is strictly opt-in via clearly-labelled checkboxes. Below is exactly what each opt-in tier collects and what we never collect.

1. Always processed in your browser only (no opt-in needed — nothing is sent)

  • The full GPX file contents (every track point, timestamp, and embedded sensor reading)
  • Computed totals (distance, climb, descent, gradient distribution)
  • Your slider settings (rider weight, battery, terrain, etc.)

None of this leaves your browser unless you explicitly contribute it (next section). If you close the tab, it's gone.

2. Anonymous contribution (Layer 1) — opt-in checkbox

If you tick the "Share this ride's profile anonymously" checkbox, we save the following fields and only the following fields:

  • Total distance (km), total ascent (m), total descent (m)
  • Gradient distribution (% of the route that is flat / easy climb / moderate / steep / extreme)
  • Auto-classified terrain category (e.g. "Alpine Climb")
  • Ambient temperature if your file recorded it
  • Month and year of the ride (not the exact date)
  • The town and region where the ride started, looked up by your browser from a public map service (OpenStreetMap's Nominatim) — for example "Wörgl, Tirol, AT". The precise GPS coordinates of your start point never leave your browser; only the town/region label is sent to us.
  • The calculator settings you used (riding style, battery configuration, verdict)
  • A hash of the consent text version you agreed to

What we DO NOT save in Layer 1:

  • Any GPS coordinates from your track
  • Your name, email, or any account identifier
  • The exact date or time of your ride
  • Your home address, IP address, or device ID (we store a one-way hash of IP + browser only for rate-limiting and de-duplication; the raw values are discarded)

This data is anonymous statistics — under GDPR Article 4 it does not identify a natural person, and under CCPA it is not "personal information." Because contributions are anonymous, we cannot link them back to you individually, which means we cannot honour a per-record deletion request after submission. You can stop contributing at any time by simply not ticking the box on future uploads.

3. Heart-rate / power / cadence (Layer 3) — separate opt-in for special-category data

If your uploaded file contains heart-rate, power, or cadence data and you tick the second checkbox ("Also share heart-rate / power / cadence data anonymously for our range-prediction research"), we additionally save:

  • Average and maximum heart-rate (bpm)
  • Average and maximum pedal power (watts)
  • Average cadence (rpm)

Heart-rate data is classified as special category data under Article 9 of the GDPR. We process it only with your explicit, separate consent under Article 9(2)(a), purely for the purpose of improving the Range Calculator's rider-effort model. We record the exact consent text you agreed to in our database, alongside a consent version identifier (currently 260527-v1). If the consent text changes in future versions, we will record the new version separately.

This special-category data is stored linked to the anonymous Layer 1 record above; because the Layer 1 record is anonymous, the Layer 3 record is also de facto anonymous to us — we cannot identify the person who submitted it, even after they've consented. You can withdraw consent for future contributions at any time by not ticking the box.

Retention

Anonymous Layer 1 contributions are kept indefinitely for ongoing range-prediction tuning. Layer 3 special-category contributions are kept for as long as they remain useful for our research, or until you contact us to request that all records matching a given month + region be purged — although given the data is anonymous, the purge will affect every record in that bucket, not a single contributor.

Where the data lives

Contribution data is stored on our own server in Taichung, Taiwan, in a database operated by Bikelab Inc. It is not shared with any third party, not sold, not used for advertising, and not transferred outside our internal range-prediction systems. The reverse-geocoding lookup that converts your start coordinates to a town/region label is performed by your browser directly against the OpenStreetMap Nominatim public service — we never see your raw coordinates.

Your rights (GDPR + CCPA)

Because contributions are anonymous and cannot be linked to you, the standard right-to-access, right-to-portability, and right-to-delete cannot be honoured per individual. We disclose this clearly at the point of consent so you can make an informed choice. You always have the right to:

  • Not contribute (the default — nothing is sent unless you tick the box)
  • Stop contributing on future uploads
  • Ask us questions about our processing by emailing info@dirtlab.bike (or to info.mbagencies@gmail.com while the dirtlab.bike domain is being activated)

Region auto-detect for max assist speed default

The Range Calculator picks a sensible default for the legal motor-assist cutoff speed in your region (25 km/h for EU/UK/EEA + CH; 32 km/h / 20 MPH for US/CA/rest of world). To make this default match where you are, the page reads only your country code (e.g. "DE" or "US") from a Cloudflare HTTP header (CF-IPCountry) that the Cloudflare edge network adds based on your IP address. We do not log your IP, we do not store your country code, and we do not pass either value to any third party. The country code is used in your browser only, to set the toggle default — you can override it with one click. If you are not on Cloudflare or the header is unavailable, we default to 32 km/h (which matches the riders our predictions were calibrated against).

Changes to this section

If we extend Range Calculator data collection (for example, adding public-trail matching against OpenStreetMap or other open trail databases), we will update this section with a new dated subsection and a new consent version identifier. Your current consent only covers the version you agreed to at the time you contributed.

Last updated: 2026-05-27 — Range Calculator W4 deploy + max-assist-speed region default. Consent version: 260527-v1.