Draft. This document is pending legal review and may change before launch.
Scatto — Privacy Policy
Last updated: {{ DATE }} Provider: Redcroft Lab (REDCROFT LAB PTY LTD, ABN 47 703 493 967, Suite 2, Level 3, 13-15 Wentworth Ave, Sydney NSW 2000, Australia) Contact: scatto@redcroftlab.com
This policy explains what Scatto collects, why, who can see it, where it goes, and what you can do about it. It covers the Scatto iOS app and the services behind it.
1. The short version
- Scatto records your activities, so it collects precise location and, if you allow it, health and fitness data. Both are sensitive, and we treat them that way.
- We do not sell your data and we do not use it for advertising. There is no advertising SDK and no analytics SDK of ours in the app. We only count, without knowing whose, how many times each feature is used per day.
- We do not use your data to train AI models, ours or anyone else’s, and we do not give it to anyone for that.
- You decide what other people see. By default only you see your activities. Friends, crews, live sharing and coaches see what is described in section 4, and only after you connect with them.
- You can export your activities and delete your account from inside the app.
2. What we collect, and why
Account
| Data | Source | Why |
|---|---|---|
| Name | Sign in with Apple / Google | Shown on your profile, to friends and on leaderboards |
| Email address | Sign in with Apple / Google | Identifying your account, service messages |
| Account identifier | Created at sign-up | Every record you own is keyed to it |
With Sign in with Apple you can use Hide My Email; we then only see Apple’s relay address.
Profile you enter
Date of birth, weight, height, maximum and resting heart rate, heart-rate thresholds, the sports you choose, your time zone, and your bikes (name, type, weight, kilometres).
Why: they drive the numbers. Weight feeds the power estimate; date of birth estimates your maximum heart rate when you have not measured one, and zones and training load are computed from it.
Activities
For each outdoor activity: the GPS route and its timestamps, distance, time, elevation, speed, heart rate, cadence and power when a sensor provides them, training load, the weather at the start, the app version, and a per-second series of altitude, speed and heart rate.
For indoor sessions (gym, yoga, pilates, cardio): the exercises, sets, repetitions and weights you log, the machine and what its console said, the time, and heart rate if a sensor is connected.
Why: this is the app. The per-second series also lets us check that an activity was done under your own power, which is what keeps leaderboards meaningful (section 7).
Health data from Apple Health (only if you allow it)
We read heart rate, heart-rate variability, resting heart rate, active and basal energy, steps, body mass, height, VO2 max, sleep, date of birth and biological sex. We write your finished activities to Apple Health as workouts.
- Access is optional. If you decline, those fields show “—” and everything else works.
- Health data is never used for advertising or marketing and is never sold or shared with data brokers.
- You can change access at any time in the Health app.
Sensors, camera and photos
- Bluetooth sensors: the name and identifier of the heart-rate, cadence and power sensors you pair, so the app can reconnect to them.
- Camera and photos: if you photograph a gym machine’s console, the numbers are read on your device; the photo is not uploaded. Photos and videos you add to a share image are combined with your stats on your device and are not uploaded to us.
- Motion: the phone’s barometer, to measure climbing.
Social features
The friends you connect with, crews you belong to, crew events and whether you are going, the energy (“bolts”) you give to activities, people you block, and reports you send.
Notifications
A device token, so we can send you notifications you would expect (a friend request, a crew event, an invitation to ride together, someone sharing an outing live with you).
Support and diagnostics
Messages you send us from the app, suggestions you send us, and the diagnostic text you choose to attach (sync status and a short app log). It is sent only when you send it. If you pick a reason when you go to cancel your plan, we keep the reason, your plan and the day, without your name or account.
App usage, without identifying you
Your phone adds up how many times you used each feature that day (for example, “opened sharing 3 times”) and sends us those totals once a day, without your identifier. On our side only the sum of everyone remains: we don’t know what each person did. We use it to decide what to improve.
Purchases
Whether you have an active plan, a trial or a promotional code. Payments are handled by Apple; we never see your card details.
What we do not collect
- No advertising identifier and no tracking across other apps or websites.
- No contacts, browsing history or keyboard data.
3. Location, in detail
- Location is collected while you record an activity, including in the background, so the recording continues with the screen off. We ask for “Always” access for that reason only.
- Outside a recording, the app uses your location to show the map around you, the weather and tracks near you.
- If you share an outing live, or ride with a crew or with someone you invited, your current position is sent to our servers every few seconds while the outing lasts so the people you chose can see it. It is not kept after the outing ends.
4. What other people can see
| Who | What they see |
|---|---|
| Everyone | Your name and your times on public tracks, on leaderboards. You can choose to appear anonymously on world leaderboards. Tracks you create: their route and name. |
| Friends (after you both accept) | Your activities: route, distance, time, elevation, and weather. Heart rate and power only if you leave those switches on. Exercises and weights of gym sessions. Your “aura”. |
| Privacy zones | You can define zones (for example, home or work). The parts of your routes inside a zone are hidden from your friends. They are not hidden in live sharing (see below). |
| Crew members | Activities you tag with that crew, events, and who is going. |
| People you share an outing live with | During the outing: your position, your full route so far — including near your home — distance, time, speed, elevation and heart rate. |
| People riding with you (crew outing or an invitation you accepted) | During the outing: your current position on the map. Not your route. |
| Your coach (if you link with one) | The sessions they assign you, whether you did them and how, and the routes of your activities. |
| People you block | Nothing, and you see nothing of theirs. |
| Everyone, in aggregate | Counts that do not identify you: how many people have ridden a track, or that several riders reported it as dangerous. If you delete your account, your part is removed from them. |
There is no directory and no search by name. Connections are made with an invitation link or QR code that you share yourself, or by someone who already knows the email address of your account. When you invite someone by email, they see the email address of your account.
5. Who processes your data for us
| Processor | Role | Location |
|---|---|---|
| Supabase | Database, authentication, server functions | Singapore |
| PowerSync | Sync between your phone and the database | Australia |
| Apple | Sign in, Apple Health (on your device), weather, push notifications, payments | Per Apple’s terms |
| Sign in with Google (if you use it) | Per Google’s terms | |
| Mapbox | Maps, route planning, place search and turn-by-turn navigation | Per Mapbox’s terms |
To draw a map, plan a route or search for a place, the app sends Mapbox the relevant coordinates or the text you typed. To show the weather, it sends Apple an approximate position. Mapbox’s own usage reporting (telemetry) is switched off in the app: Mapbox receives only what is needed to draw the map, plan the route or find the place.
Your data is stored on servers in Singapore (the database) and Australia (sync). If you live in Colombia, it leaves your country.
6. When we have to share
We share your data outside the companies in section 5 only in these cases:
- If the law requires it: a court order or a lawful request from an authority. Where we are allowed to, we tell you first.
- To protect someone from serious harm, when we believe in good faith that it is urgent.
- If Scatto is sold or merged. The new owner would have to keep the promises in this policy, and we would tell you before your data moved to them.
When we use data that does not identify you, we don’t try to identify you from it, and we don’t let anyone else do so.
7. Automated checks
Scatto analyses each activity automatically (speed, acceleration, gradient and heart rate) to detect stretches that were probably not done under your own power, such as a drive home with the recording left on. A flagged activity stays in your history but does not count for leaderboards, training load or your bike’s odometer. You can see which stretch was flagged and why, and remove it. The check can be wrong; write to us and a person will look at it.
These checks are rules we wrote ourselves, not an artificial intelligence model. If we ever add a feature that uses AI, we will tell you beforehand what is sent, to whom and why, and add it to the table in section 5.
8. How long we keep it
- While your account exists, we keep your profile and activities so your history stays intact.
- An activity you delete is removed from your account and kept in an archive for up to six months, in case it was deleted by mistake, and then erased.
- Live positions are erased when the outing ends.
- Deleting your account: you ask in the app, you are signed out, and 14 days later the account is erased with its activities, routes, times, bikes, sensors, routines, privacy zones and connections, including the archive above. Signing in again within the 14 days lets you keep it. Tracks you created remain, without your name. Our database provider keeps daily backups for up to 7 days, so deleted data can remain in them for that time before it is gone for good.
9. Your rights
Wherever you live you can ask us to: see what we hold about you, correct it, delete it, receive a copy, and withdraw consent for optional data (Health, location, notifications) in iOS Settings. In the app you can already export your activities and delete your account yourself.
In Australia you may complain to the Office of the Australian Information Commissioner (OAIC).
In Colombia you have the rights to conocer, actualizar, rectificar y suprimir your data and to revoke your authorisation under Ley 1581 de 2012, and you may complain to the Superintendencia de Industria y Comercio (SIC).
Write to scatto@redcroftlab.com. We answer enquiries within 10 business days and complaints within 15 business days at most, as Colombia’s Law 1581 of 2012 sets; if we need more time we will tell you before the deadline. {{ CONFIRM WITH THE LAWYER }}
10. Children
Scatto is not directed at children under 13, and we do not knowingly collect their data: anyone who declares they are under 13 cannot continue, and their account is deleted.
From 13 to 17 we handle a minor’s data only with the authorisation of their parent or guardian, who gives it on the minor’s phone after reading what we keep. We ask for this in every country; in Colombia it is required by Law 1581 (art. 7) and Decree 1377 of 2013 (art. 12). If this policy changes, we ask for the authorisation again.
Under 16, nobody outside their safety contacts sees their outings, and on leaderboards they appear without a name.
We keep a record of every declaration and acceptance: the declared age and how it was confirmed, the name of whoever authorised it, the date and the fingerprint of the exact text that was read. That record is kept even if the account is deleted, because it is the proof of what was accepted and when.
11. Security
Data travels encrypted (HTTPS). Your session is kept in the iOS Keychain. The database enforces, row by row, who can read what. No system is perfectly secure, and we do not claim otherwise; if a breach affects you we will tell you.
12. Changes
If this policy changes in a way that matters, we will tell you in the app before it takes effect.
13. Contact
REDCROFT LAB PTY LTD · Suite 2, Level 3, 13-15 Wentworth Ave, Sydney NSW 2000, Australia · scatto@redcroftlab.com