// Legal

Privacy Policy

Last updated: July 10, 2026

Megylla is a bike-maintenance tracking and cycling-community platform operated by BrainChain Technology LLC ("Megylla," "we," "us," or "our"). This policy explains what information we collect, how we use it, and the choices you have. It applies to the Megylla web app at app.megylla.com and to the Megylla mobile apps for iPhone and Android, which share the same account and the same underlying data.

The short version: we collect the information you give us and the data you choose to connect, we use it to run the Service and keep your account working across your devices, we don't sell it, and you stay in control of what you share. The details are below.

The information we collect

We only collect information that's necessary to provide the Service. Most of it is information you enter yourself.

Information you provide

• Account information — your name and email address, created when you sign up. You can sign in with email, or with Sign in with Apple or Google, in which case we receive the basic account identifier those providers share.
• Your bikes and garage — the bikes you add, including make, model, components, configuration, photos, and any notes or details you enter.
• Maintenance records — the services, tasks, mileage, costs, dates, reminders, and notes you log for your bikes.
• Profile and social content — your profile details, posts, photos, comments, "wrenches," follows, and the visibility settings you choose for what you share (public, followers, or private).
• FRX identifiers — if you associate a bike with the Frame Registry Exchange, the identifier and related frame details you provide.
• Shop and mechanic information — if you run or belong to a bike shop on Megylla, your shop's profile, posts, and team; and, if you authorize a shop or mechanic to work with one of your bikes, the fact of that authorization.

Information from services you connect

• Strava — if you choose to connect Strava, we receive your ride and mileage data and your equipment ("gear") information so we can keep your bikes' mileage current automatically. Connecting Strava is optional, and you can disconnect it at any time.

Information collected automatically

• Basic technical information needed to operate and secure the Service — such as authentication sessions, and the app version and platform (web, iOS, or Android) so the Service works correctly on your device.
• Push notification tokens — if you use the mobile apps and enable notifications, we store the device token needed to deliver push notifications to you. You can turn notifications off at any time in your device settings.

We do not use third-party advertising networks, advertising identifiers, behavioral-tracking SDKs, or cross-app tracking. We do not build advertising profiles about you. Beyond the items above, Megylla's data is the data you enter and the services you choose to connect.

How we use your information

We use your information to:

• Create and manage your account and keep you signed in securely.
• Store and display your bikes, maintenance history, reminders, and related records, and sync them across the web and mobile apps whenever you sign in.
• Provide the community features you choose to use — posts, follows, comments, and shop pages — according to the visibility settings you set.
• Keep your mileage current from Strava, when connected, and power mileage-based reminders and service suggestions.
• Support FRX registry functionality when you enable it.
• Enable shop and mechanic collaboration that you authorize — including allowing an authorized shop to see maintenance and mileage information for the specific bike you shared with them.
• Send you transactional messages you'd expect — such as sign-in codes, a welcome email, and maintenance reminders — and, if you enable them, push notifications about activity relevant to you.
• Maintain, secure, troubleshoot, and improve the Service.
• Comply with legal obligations.

Megylla does not sell your personal data, and we do not share it with third parties for their own marketing.

How your information is shared

Your data is private by default. It is shared only in these ways:

• Content you choose to make visible. Posts and profile information you mark as public or followers-only are visible to others on Megylla accordingly. Content you keep private is not shown to other users.
• Shops and mechanics you authorize. When you authorize a shop or mechanic for a specific bike, they can see the maintenance and mileage information for that bike. You choose what to share and can revoke that access at any time.
• Service providers. We use trusted providers to run Megylla — including Supabase (database, authentication, and storage), Vercel (hosting), SendGrid (email delivery), and the Apple and Google push notification services (mobile notifications). They process data only to provide these services to us.
• Connected services you enable. When you connect Strava, data flows between Megylla and Strava under your authorization and Strava's own privacy policy.
• Legal reasons. We may disclose information if required by law or to protect the rights, safety, and security of our users, the public, or Megylla.

Cloud storage and cross-device access

Your data is stored securely in the cloud so that your garage, maintenance records, and other information are available whenever you sign in — on the web or in the mobile apps, and across devices. We use reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or misuse. No system can be guaranteed perfectly secure, and you are responsible for keeping your account credentials confidential.

Mobile apps

The Megylla iPhone and Android apps use the same account and data as the web app. In addition to the information above, the apps may request permissions on your device — for example, access to your photo library or camera if you choose to add a photo, and permission to send push notifications if you enable them. You can grant or revoke these permissions at any time in your device settings. The apps do not collect location data, contacts, or advertising identifiers, and do not track you across other apps or websites.

Strava

Megylla integrates with Strava only if you choose to connect it. When connected, we access your ride, mileage, and gear data to keep your bikes' mileage current and to power reminders and suggestions. You can disconnect Strava at any time from your integration settings, which stops further data access. Your use of Strava is also governed by Strava's own privacy policy.

FRX (Frame Registry Exchange)

Megylla supports the Frame Registry Exchange (FRX), which associates a bike with a unique frame identifier and long-term history. Participation is optional. FRX-related data is linked only when you choose to enable it, and identifiers, maintenance history, and ownership records are shared or transferred only according to permissions you control. FRX data is treated with the same privacy and security standards as your other Megylla data.

Children's privacy

You must be at least 13 years old to use Megylla — or older, where your jurisdiction sets a higher minimum age for using online services without parental consent. We do not knowingly collect personal information from children under 13 (or under the higher minimum age where applicable). If you believe a child has provided us information in violation of this policy, please contact us and we will delete it. If you are under the age of majority where you live, you may use Megylla only with the involvement and consent of a parent or guardian, and they should review this policy with you.

Data retention and deletion

We retain your information for as long as your account is active or as needed to provide the Service and meet legal obligations. You may request:

• Deletion of your account.
• Removal of associated bike, maintenance, and FRX data.

You can make these requests through the app or by contacting us. When you delete your account, we remove or de-identify your personal data, except where we're required to retain certain records for legal or security reasons.

Your privacy choices

You can:

• Access and update your account and profile information.
• Control the visibility of your posts and profile (public, followers, or private).
• Connect or disconnect Strava, and grant or revoke shop/mechanic access per bike.
• Enable or disable push notifications and email preferences.
• Request deletion of your data.

Megylla is designed so that you remain in control of your information.

International users

Megylla is operated in the United States, and your information is processed and stored in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date above, and significant changes will be reflected on this page. Your continued use of the Service after an update means you accept the revised policy.

Contact us

If you have questions or requests regarding this policy or your data:

BrainChain Technology LLC

support@megylla.com