Privacy Policy

Last updated: 26 Jul 2026

JEBA is a community exercise bike platform that helps people plan, complete and keep a record of their rides.

This Privacy Policy explains what personal information JEBA collects, why it is used, how it is protected and the choices available to you.

1. Who is responsible for your information?

JEBA is operated by:

JADON'S EXERCISE BIKE APP, trading as JEBA
Email: [PRIVACY CONTACT EMAIL]
Address: [BUSINESS OR CORRESPONDENCE ADDRESS]

For data protection purposes, this person or business is the controller of your personal information.

2. Information we collect

The information collected depends on whether you use JEBA as a guest or create an account.

Account information

When you register for an account, we may collect:

  • Your email address
  • Your display name
  • Authentication and account status information
  • The date and time your account was created
  • Your account preferences

Passwords are handled through our authentication provider. JEBA does not store or have access to your password in readable form.

Onboarding information

If you complete the JEBA onboarding process, we may collect:

  • Whether you usually ride at home, at a gym, or elsewhere
  • The type of exercise bike you use
  • Your main riding goal
  • Your preferred weekly ride target
  • How you discovered JEBA
  • Your onboarding progress and completion status

You can leave optional questions unanswered and return to finish onboarding later.

Ride and workout information

When you use a signed-in account, we may store:

  • Completed ride dates and times
  • Workout duration
  • Workout type or preset
  • Warm-up, recovery, work and cool-down durations
  • Number of rounds completed
  • Custom workout names and settings
  • Your saved custom workouts

JEBA is not designed to collect medical diagnoses, health conditions, heart-rate measurements or other clinical information. Please do not enter sensitive medical information into custom workout names or other free-text fields.

Preferences and device storage

JEBA may store information on your device to:

  • Keep you signed in
  • Remember your colour theme and sound preference
  • Maintain necessary app functionality
  • Remember an anonymous device identifier used for product analytics

Product analytics

JEBA collects limited information about how the app is used. This may include:

  • App opens
  • Sign-ins
  • Workouts selected
  • Rides started, completed or abandoned
  • Custom workouts created
  • App version
  • Device category
  • Workout type
  • Ride duration
  • An anonymous device identifier
  • Your JEBA account identifier when you are signed in

This information helps us understand whether JEBA is working properly and which parts of the service need improvement.

We do not use this information for advertising or sell it to data brokers.

Error and diagnostic information

We use error-monitoring technology to identify crashes and technical problems. Diagnostic information may include:

  • Browser and device information
  • App version
  • The page or feature where an error occurred
  • Technical error messages
  • Network and request information
  • An IP address or similar technical information where received automatically by the monitoring provider

JEBA does not intentionally attach your name or email address to error reports.

Information you provide when contacting us

If you contact JEBA, we may retain your name, contact details, message and any information you choose to provide so that we can respond.

3. Why we use your information

We use personal information to:

  • Create and secure your account
  • Verify your email address
  • Sign you in and maintain your session
  • Reset your password
  • Save and display your completed rides
  • Save your preferences and custom workouts
  • Calculate ride totals, minutes and streaks
  • Provide onboarding and personalised app content
  • Operate, maintain and improve JEBA
  • Diagnose errors and prevent misuse
  • Respond to questions and support requests
  • Meet legal and regulatory obligations

4. Our lawful bases

Under UK data protection law, we rely on the following lawful bases:

Contract

We process account, preference, ride and workout information when it is necessary to provide the JEBA service you request.

Legitimate interests

We may process limited technical, security and diagnostic information where necessary for our legitimate interests in:

  • Keeping JEBA secure
  • Preventing misuse
  • Identifying errors
  • Maintaining service reliability
  • Understanding and improving the service

We consider the effect of this processing on your rights and do not use legitimate interests where your rights override our interests.

Consent

We rely on consent where the law requires it, including for non-essential device storage, tracking or future marketing communications.

You may withdraw your consent at any time.

Legal obligation

We may process information where necessary to comply with the law, respond to lawful requests or establish, exercise or defend legal claims.

5. Device storage and analytics choices

JEBA uses browser storage and similar technologies.

Some storage is necessary to provide requested features, such as maintaining a signed-in session. JEBA may also use storage to remember appearance preferences.

Where permitted, limited analytics may be used solely to produce statistics that help improve the service. JEBA will provide clear information and a simple, free way to object to this use.

If analytics are used for identifying or tracking individual visitors beyond this limited statistical purpose, JEBA will request consent before using them.

You can also clear stored information through your browser or device settings. Doing so may sign you out or reset your preferences.

6. Who we share information with

We use trusted service providers to operate JEBA, including:

  • Supabase for authentication, database storage and backend functions
  • Hostinger for website and application hosting
  • Sentry for technical error monitoring
  • Resend for sending operational reports and service-related emails
  • WordPress and related website technology for the main JEBA website

These providers process information only as needed to deliver their services and are subject to their own security and data protection obligations.

We may also disclose information:

  • Where required by law
  • To respond to a valid legal request
  • To protect users, JEBA or the public
  • As part of a business sale, merger or restructuring, subject to appropriate safeguards

JEBA does not sell your personal information.

7. International transfers

Some service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we use an appropriate legal safeguard, such as:

  • UK adequacy regulations
  • Approved contractual protections
  • The UK International Data Transfer Agreement
  • The UK Addendum to approved standard contractual clauses

You may contact us for more information about the safeguards used.

8. How long we keep information

We only retain personal information for as long as reasonably necessary.

Our intended retention periods are:

  • Account, profile and preference information: while your account remains active
  • Saved rides and custom workouts: until you delete them or delete your account
  • Incomplete onboarding information: while your account remains active or until you change or delete it
  • Individual analytics events: up to 30 days
  • Aggregated analytics: may be retained for longer where individuals can no longer reasonably be identified
  • Technical error reports: up to 90 days
  • Support messages: up to 12 months after the last interaction
  • Security and legal records: for as long as reasonably required to protect the service or comply with the law

When an account is deleted, its active account data is removed. Limited information may remain temporarily in secure backups or where retention is required for security, fraud prevention or legal compliance.

9. Account deletion

You can request permanent account deletion from the JEBA account area.

Account deletion requires an additional confirmation step to help prevent accidental deletion. Once confirmed, JEBA will delete the account and associated profile, preferences, saved rides and custom workouts from the active service.

Account deletion cannot normally be reversed.

10. How we protect information

We use reasonable technical and organisational safeguards, including:

  • Encrypted connections
  • Restricted database access
  • Row-level database security
  • Authentication controls
  • Separation of public and private credentials
  • Error monitoring
  • Limited access to administrative systems

No online service can guarantee complete security. You should use a strong, unique password and keep access to your email account secure.

11. Your data protection rights

Depending on the circumstances, you may have the right to:

  • Ask for a copy of your personal information
  • Correct inaccurate or incomplete information
  • Ask for your information to be deleted
  • Restrict how your information is used
  • Object to certain processing
  • Receive certain information in a portable format
  • Withdraw consent
  • Complain about how your information is handled

Some rights are subject to legal conditions and exceptions.

To exercise a right, contact [PRIVACY CONTACT EMAIL]. We may need to verify your identity before completing the request.

12. Automated decisions

JEBA does not currently make solely automated decisions about users that produce legal or similarly significant effects.

Workout suggestions, summaries, targets and streak calculations are informational app features and are not medical decisions.

13. Children

JEBA is not intended for children under 16.

We do not knowingly collect personal information from children below this age. If you believe a child has created an account contrary to this policy, please contact us so that we can investigate and remove the account where appropriate.

14. Health and fitness information

JEBA provides general exercise-bike timing, tracking and community features. It does not provide medical advice, diagnosis or treatment.

Information displayed by JEBA should not replace advice from a qualified healthcare professional. Please read the separate Health and Fitness Disclaimer before beginning a workout.

15. Changes to this policy

We may update this Privacy Policy when JEBA’s features, providers or legal obligations change.

The latest version will be published on the JEBA website with its updated date. We will provide an additional notice where a change materially affects how personal information is used.

16. Complaints

Please contact us first if you have concerns about how JEBA handles your information.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113