Megylla
Features Community FRX For Shops Pricing About Open Megylla →

// Legal

Privacy Policy

Last updated: August 20, 2026

Megylla is a bike-maintenance tracking and cycling-community platform operated by BrainChain Technology LLC (“Megylla,” “we,” “us,” or “our”). This policy explains what information we collect, how we use it, and the choices you have. It applies to the Megylla web app at app.megylla.com and to the Megylla mobile apps for iPhone and Android, which share the same account and the same underlying data.

The short version: we collect the information you give us and the data you choose to connect, we use it to run the Service and keep your account working across your devices, we don’t sell it, we don’t use it to train AI models, and you stay in control of what you share. The details are below.

The information we collect

We only collect information that’s necessary to provide the Service. Most of it is information you enter yourself.

Information you provide

  • Account information — your name and email address, created when you sign up. You can sign in with email, or with Sign in with Apple or Google, in which case we receive the basic account identifier those providers share.
  • Your bikes and garage — the bikes you add, including make, model, components, configuration, photos, and any notes or details you enter.
  • Maintenance records — the services, tasks, mileage, costs, dates, reminders, and notes you log for your bikes.
  • Profile and social content — your profile details, posts, photos, comments, “wrenches,” follows, and the visibility settings you choose for what you share (public, followers, or private).
  • FRX identifiers — if you associate a bike with the Frame Registry Exchange, the identifier and related frame details you provide.
  • Shop and mechanic information — if you run or belong to a bike shop on Megylla, your shop’s profile, posts, and team; and, if you authorize a shop or mechanic to work with one of your bikes, the fact of that authorization.
  • Reports and blocks — if you report content or another user, we store your report, including any reason you write, along with what you reported and when. If you block another user, we store that block.

Photos

When you upload a photo, we process it so that identifying metadata is not retained. We do not keep GPS coordinates, camera make or model, capture timestamps, or lens and serial information from your photos. What remains is purely technical image data — dimensions, orientation, resolution, color space, and encoding parameters — the kind of information any image encoder writes.

Information from services you connect

  • Strava — if you choose to connect Strava, we receive your ride and mileage data and your equipment (“gear”) information so we can keep your bikes’ mileage current automatically. We do not receive or store GPS routes or ride locations. Connecting Strava is optional, and you can disconnect it at any time.
  • Connection credentials — when you connect Strava, or sign in with Apple or Google, we store the access credentials those services issue so the connection keeps working without asking you to sign in repeatedly. Disconnecting a service, or deleting your account, clears the credentials we hold for it.

Information collected automatically

  • Basic technical information needed to operate and secure the Service — such as authentication sessions, and the app version and platform (web, iOS, or Android) so the Service works correctly on your device.
  • Push notification tokens — if you use the mobile apps and enable notifications, we store the device token needed to deliver push notifications to you. You can turn notifications off at any time in the app’s notification settings or in your device settings.
  • Analytics (web app only) — on app.megylla.com we use Vercel Web Analytics to understand aggregate traffic and performance: which pages are visited and how quickly they load. It does not use cookies and does not follow you across other websites or apps. The mobile apps contain no analytics software.

We do not use advertising networks, advertising identifiers, or cross-app tracking, and we do not build advertising profiles about you. Beyond the items above, Megylla’s data is the data you enter and the services you choose to connect.

How we use your information

We use your information to:

  • Create and manage your account and keep you signed in securely.
  • Store and display your bikes, maintenance history, reminders, and related records, and sync them across the web and mobile apps whenever you sign in.
  • Provide the community features you choose to use — posts, follows, comments, and shop pages — according to the visibility settings you set.
  • Keep your mileage current from Strava, when connected, and power mileage-based reminders and service suggestions.
  • Support FRX registry functionality when you enable it.
  • Enable shop and mechanic collaboration that you authorize — including allowing an authorized shop to see maintenance and mileage information for the specific bike you shared with them.
  • Send you transactional messages you’d expect — such as sign-in codes, a welcome email, and maintenance reminders — and, if you enable them, push notifications about activity relevant to you.
  • Review reports of content or conduct that users bring to our attention.
  • Maintain, secure, troubleshoot, and improve the Service.
  • Comply with legal obligations.

We do not sell your personal data. We do not share it with third parties for their own marketing. We do not use your content, photos, or maintenance records to train artificial intelligence or machine-learning models, and we do not provide them to others for that purpose.

Content moderation

We do not proactively monitor or read your posts, comments, photos, or maintenance records. Content is reviewed only when a user reports it.

When you submit a report, a Megylla administrator reviews the reported content and the reason you provided, and decides what action to take. We do not tell the reported user who reported them. Blocking another user is separate from reporting: a block takes effect immediately, applies in both directions for following, and is not reviewed by us.

How your information is shared

Your data is private by default. It is shared only in these ways:

  • Content you choose to make visible. Posts and profile information you mark as public or followers-only are visible to others on Megylla accordingly. Content you keep private is not shown to other users, except through a bike report link you create yourself (see below).
  • Bike report links you create. You can generate a shareable link to a bike’s maintenance report — for example, to show a prospective buyer the bike’s service history. Anyone who has the link can open the report without signing in, and the report shows the bike’s full maintenance history, including posts you have marked private. Creating the link is your decision to share that history. You can revoke a link at any time, which immediately stops it from working.
  • Shops and mechanics you authorize. When you authorize a shop or mechanic for a specific bike, they can see the maintenance and mileage information for that bike. You choose what to share and can revoke that access at any time.
  • Service providers. We use trusted providers to run Megylla — including, for example, Supabase (database, authentication, and storage), Vercel (hosting and web analytics), SendGrid (email delivery), and the Apple and Google push notification services (mobile notifications). They process data only to provide these services to us.
  • Connected services you enable. When you connect Strava, data flows between Megylla and Strava under your authorization and Strava’s own privacy policy.
  • Legal reasons. We may disclose information if required by law or to protect the rights, safety, and security of our users, the public, or Megylla.

Cloud storage and cross-device access

Your data is stored securely in the cloud so that your garage, maintenance records, and other information are available whenever you sign in — on the web or in the mobile apps, and across devices. We use reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or misuse. No system can be guaranteed perfectly secure, and you are responsible for keeping your account credentials confidential. If a security incident affects your personal information, we will notify you and any required authorities as the law requires.

Mobile apps

The Megylla iPhone and Android apps use the same account and data as the web app. In addition to the information above, the apps may request permissions on your device — for example, access to your photo library or camera if you choose to add a photo, and permission to send push notifications if you enable them. You can grant or revoke these permissions at any time in your device settings. The apps do not collect your device’s location, your contacts, or advertising identifiers, and do not track you across other apps or websites.

Strava

Megylla integrates with Strava only if you choose to connect it. When connected, we access your ride, mileage, and gear data to keep your bikes’ mileage current and to power reminders and suggestions. We do not ingest GPS routes or ride locations. You can disconnect Strava at any time from your integration settings, which stops further data access and clears the credentials we hold. Your use of Strava is also governed by Strava’s own privacy policy.

FRX (Frame Registry Exchange)

Megylla supports the Frame Registry Exchange (FRX), which associates a bike with a unique frame identifier and long-term history. Participation is optional. FRX-related data is linked only when you choose to enable it, and identifiers, maintenance history, and ownership records are shared or transferred only according to permissions you control. FRX data is treated with the same privacy and security standards as your other Megylla data.

Children’s privacy

You must be at least 13 years old to use Megylla — or older, where your jurisdiction sets a higher minimum age for using online services without parental consent. We do not knowingly collect personal information from children under 13 (or under the higher minimum age where applicable). If you believe a child has provided us information in violation of this policy, please contact us and we will delete it. If you are under the age of majority where you live, you may use Megylla only with the involvement and consent of a parent or guardian, and they should review this policy with you.

Retention, account deletion, and bike history

Bikes and service history

A bike’s maintenance history has value beyond any one owner. It is what makes a bike’s condition verifiable at resale, what a future owner inherits, and what the Frame Registry Exchange exists to preserve. For that reason, we treat maintenance records as records about the bike rather than records about you, and we retain bike and service history for as long as the bike exists in our systems — including after the account that created it is gone.

What happens when you delete your account

When you delete your account, your profile, posts, bikes, and reminders are removed from the Service immediately. They are no longer visible to you, to other users, in search, or through any shared link. Your follows are removed, any shop or mechanic authorizations you granted are revoked, your Strava connection is disconnected and its credentials cleared, and your push notification tokens are deleted.

For a period of up to 90 days after deletion, we retain the underlying records so that a deletion made in error can be reversed. If you deleted your account by mistake, contact us at support@megylla.com within that window and we can restore it.

After that period, we permanently disassociate your bikes and their maintenance history from you. The service history remains as a record about the bike, no longer connected to your identity, and your profile record is deleted.

Requesting erasure sooner, or in full

You can ask us to erase your information rather than waiting out the restoration window, and you can ask us to erase it entirely. Contact us at support@megylla.com. We handle these requests individually and within the timeframes the law requires where you live. We may retain limited records where we are legally required to, or where they are necessary to resolve a dispute or maintain the security of the Service.

Your privacy choices

You can:

  • Access and update your account and profile information.
  • Control the visibility of your posts and profile (public, followers, or private).
  • Create and revoke bike report links.
  • Connect or disconnect Strava, and grant or revoke shop or mechanic access per bike.
  • Enable or disable push notifications and email preferences.
  • Request a copy of your information, or request its deletion.

Megylla is designed so that you remain in control of your information.

Your rights in the EU, UK, and other regions

If you are in the European Economic Area, the United Kingdom, or another region with comparable privacy laws, you have the right to request access to the personal information we hold about you, to have inaccurate information corrected, to have your information erased, to receive a copy of it in a portable format, to object to or restrict certain processing, and to withdraw consent where our processing relies on it. To exercise any of these rights, contact us at support@megylla.com. We will respond within the period the applicable law allows, and we will not treat you differently for making a request.

Where we process your personal information, we rely on the following legal bases: performance of a contract (running your account and providing the Service you signed up for); your consent (connecting Strava, enabling push notifications, choosing to share content publicly); our legitimate interests (securing the Service, responding to reports of harmful content, and preserving bike service history in a form not tied to an identified person); and compliance with legal obligations.

If you believe we have not handled your information properly, you may lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.

International users

Megylla is operated in the United States, and your information is processed and stored in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country. We take steps to ensure your information continues to be protected in line with this policy wherever it is processed.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date above, and significant changes will be reflected on this page. If a change materially affects how we use your information, we’ll take reasonable steps to let you know. Your continued use of the Service after an update means you accept the revised policy.

Contact us

If you have questions or requests regarding this policy or your data:

BrainChain Technology LLC

support@megylla.com

Megylla
Features Community FRX For Shops Pricing About Open Megylla Privacy Terms Contact Get the app Instagram
© 2026 BrainChain Technology LLC