1. Introduction

Welcome to Into The Gnar ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "App").

By using Into The Gnar, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the App.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when using the App, including but not limited to:

• Account Information: Email address, username, full name, profile photo, location, age, skill level, riding preferences, bio
• Risk Assessment Data: Terrain evaluations, mental state assessments, equipment checks, emergency preparedness responses, confidence ratings, decision outcomes (ride/skip)
• Crash Reports: Crash date, location (GPS coordinates), ride type, weather conditions, trail conditions, fatigue levels, mental state, equipment worn, crash descriptions, injury details, personal reflections
• Bike Setup Information: Bike brand/model/size, suspension settings (air pressure, sag, compression/rebound clicks), tire pressures, cockpit measurements, component details, setup notes, performance ratings
• Mindset Reset Data: Exercise type selections, completion status, personal preferences
• Safety Toolkit Data: Pre-ride checklists, emergency contact information, ride plans, expected return times
• Game Scores: Brain Game, Reaction Challenge, and SEND5 daily word game scores, gameplay statistics, achievements, streaks, difficulty preferences, environment/avatar selections, challenge interactions with other players
• Community Content: Posts, comments, likes, photos, videos, shared bike setups, AI insights you choose to share, video analysis projects, voiceover recordings, workout/training logs
• Riding Group Data: Group names, descriptions, locations (GPS coordinates), member lists, scheduled rides, ride RSVPs, group chat messages, ride logs (distance, elevation, duration), group goals and progress
• Professional Profiles (Network): Athlete profiles, brand profiles, coach profiles, media professional profiles, mechanic profiles, trail builder profiles, ski tuner profiles, boot fitter profiles, event organizer profiles, sports medicine professional profiles, adventure guide profiles, sports nutritionist profiles, mental performance coach profiles, team profiles, and camp/training program profiles including contact information, certifications, portfolios, pricing, availability, experience, and service offerings
• Marketplace Interactions: Campaign requests, coaching inquiries, media project inquiries, mechanic service inquiries, trail building inquiries, ski tuning inquiries, boot fitting inquiries, event organization inquiries, sports medicine inquiries, adventure guide inquiries, nutrition consultations, mental performance coaching inquiries, team job applications, camp registrations, conversation messages, file attachments, reviews and ratings
• Sales Hub Data: Product catalogs, inventory records, orders, pricing tiers, payment terms, lookbooks, and dealer/brand communications
• Team & Camp Data: Team profiles, job postings, applications, camp schedules, coach bios, event calendars, and participant inquiries
• Direct Messages: Message content, conversation metadata, file attachments, read receipts, invitation responses
• User Connections: Following/follower relationships, connection status
• Content Reports: When you report content or behaviour, we collect the type of content reported, the reason for the report, any description you provide, and your email address as the reporter
• Notifications Data: In-app notification history, read/unread status, and interaction data related to comments, likes, challenges, and mentions across all community features
• Video Analysis Data: Uploaded video files, annotations, bookmarks, analysis notes, voiceover recordings, and sharing preferences for video analysis projects
• Performance & Training Data: Workout sessions, exercise logs, training calendars, performance goals, race debriefs, and activity metrics you choose to log
• 1:1 Ongoing Coaching (HPA) Data: Coaching program details, athlete onboarding forms, session logs, custom training variables, coach notes, video analysis requests, training calendar items, and coach-athlete messaging
• Daily Check-Ins: Energy levels, sleep quality, stress levels, soreness, motivation, hydration, mood, emotions, what went well, what could be better, and voice transcripts
• Coaching Bookings: Booking type, session details, customer information, rider emails, payment status, intake forms, waivers signed, booking status, jersey orders, and camp registrations
• Camp Event Data: Camp event details, schedules, coach assignments, session reports, participant rosters, planning items, incident reports, feedback, lessons learned, and media galleries
• Fantasy League Data: Fantasy league participation, rider picks, scores, rankings, and league administration data
• Charity Fund Data: Annual charity fund totals derived from 10% of shop sales revenue (no personal donor data)
• Ambassador & Referral Data: Ambassador profiles, referral codes, referral tracking, and ambassador application data
• Payment Data: When you make purchases (coaching sessions, camp registrations, HPA programs, shop merchandise, professional subscriptions), we collect billing name, email, and transaction details. Payment card information is processed securely by Stripe and is NOT stored on our servers.

2.2 Automatically Collected Information

When you use the App, we may automatically collect:

• Device Information: Device type, operating system, browser type, IP address
• Usage Data: Pages visited, features used, time spent, interactions with content
• Location Data: GPS coordinates when you share locations for crash reports, riding groups, ride plans, or group rides (only when you explicitly provide or enable location sharing)
• Gamification Data: Points earned, achievement badges unlocked, activity streaks, leaderboard rankings
• Analytics Data: App performance metrics, error logs, feature usage patterns

2.3 Third-Party Content

We aggregate and display content from third-party sources including:

• YouTube Videos: Event coverage, rider channels, and MTB media content fetched via YouTube Data API v3
• External Media: Links to Instagram, Pinkbike, Vital MTB, Red Bull, and other MTB media platforms
• These third-party sources have their own privacy policies which govern their data collection practices

3. How We Use Your Information

We use the information we collect for the following purposes:

• Core Safety Features: To provide risk assessment tools, crash pattern analysis, safety checklists, emergency preparedness resources, and personalized safety insights
• Progression Tracking: To track your assessments, decisions, mindset resets, safety checks, and overall progression over time
• Bike Setup Management: To help you track, compare, and optimize your bike setups based on conditions and performance feedback
• Community Features: To enable you to create posts, comment, like content, share bike setups, share video analyses, share workout logs, follow other riders, challenge other players, and engage with the community across all sections (Flow, Garage, Video Analysis, Performance, SEND5, Clubs & Groups)
• Riding Groups & Events: To facilitate group creation and management, ride scheduling, RSVP tracking, group chat, ride logging, progress tracking toward group goals, and coordination for clubs, trail associations, and trail maintenance days
• Professional Network: To connect athletes with brands, coaches with students, media professionals with clients, mechanics with bike owners, trail builders with landowners, ski tuners with skiers, boot fitters with clients, event organizers with participants, sports medicine professionals with athletes, adventure guides with adventurers, nutritionists with clients, mental performance coaches with athletes, teams with potential members, and camps with participants
• Sales Hub & B2B Features: To facilitate brand-to-dealer sales, order management, inventory tracking, product catalogs, and wholesale business relationships
• Teams & Camps: To enable teams to post job opportunities and manage applications, and for camps/training programs to list events, manage schedules, and handle participant inquiries
• Gamification & Engagement: To provide game experiences, track scores and achievements, award points, maintain leaderboards, and deliver daily challenges
• AI-Powered Insights: To generate personalized insights based on your assessment patterns, crash data, and riding behavior to help you make safer decisions
• Content Curation: To display relevant MTB videos, events, and media content based on your interests
• Communication & Notifications: To send you direct messages from other users, ride invitations, group invitations, marketplace inquiries, comment and reply notifications, like notifications, challenge notifications, content report notifications (to admins), and important app updates
• Content Moderation: To process content reports submitted by users, review reported behaviour, and take appropriate action including content removal, warnings, or account restrictions to maintain a safe community environment
• App Improvement: To analyze usage patterns, identify bugs, improve features, and develop new capabilities
• Legal Compliance: To comply with legal obligations and protect against fraudulent, illegal, or harmful activities

4. How We Share Your Information

We may share your information in the following circumstances:

• With Other Users (By Your Choice): Your community posts, comments, shared bike setups, riding group information, and professional profiles are visible to other users as per your privacy settings. You control what you share publicly.
• Within Riding Groups: Group members can see your group chat messages, ride RSVPs, ride logs you share, and group activity. Group admins can view member lists and manage group settings.
• Professional Marketplace: When you create an athlete, brand, coach, or media professional profile, the information you choose to display is visible to other users for networking purposes. You control what information is public vs. private (e.g., pricing visibility).
• Leaderboards: Your game scores and player name appear on public leaderboards if you choose to save scores while logged in.
• Service Providers: We use third-party service providers (Base44 platform for hosting, YouTube API for video content, OpenAI API for AI features, email services) who have access to your data only to perform services on our behalf and are obligated not to disclose or use it for other purposes.
• Legal Requirements: We may disclose your information if required by law, court order, or government request, or to protect the safety and rights of our users and the public.
• Business Transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

5. Third-Party Services & Integrations

The App integrates with the following third-party services:

• Base44 Platform: Backend infrastructure, database, authentication, and file storage services
• YouTube Data API v3: We fetch and display MTB videos from YouTube. YouTube's privacy policy governs data collected when you watch embedded videos. YouTube Privacy Policy
• AI Services (OpenAI, Google Gemini, Anthropic Claude): Used for generating AI-powered insights, pattern analysis, personalized recommendations, voice transcription, content generation, and video analysis. Your data is processed by these providers in accordance with their respective privacy policies: OpenAI, Google, Anthropic
• Stripe: Payment processing for coaching sessions, camp registrations, HPA coaching programs, shop merchandise, and professional subscriptions. Stripe handles all payment card data securely. Stripe Privacy Policy
• Strava: Optional integration for importing ride/activity data from your Strava account. Only data you explicitly import is accessed. Strava Privacy Policy
• Google Calendar: Optional integration for syncing coaching sessions and camp events to your calendar. Only event data you choose to sync is accessed. Google Privacy Policy
• Google Maps / Location Services: Used for displaying trail locations, group meeting points, and crash locations (only when you choose to share location data)
• Email Service Providers: Used to send transactional emails such as invitations, notifications, and account-related communications
• OpenAI Whisper API: Used for transcribing voice-to-text recordings in check-ins, session logs, and coaching notes

These third-party services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of these external services.

6. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (HTTPS/SSL)
• Secure authentication mechanisms
• Access controls and user permissions (Row-Level Security)
• Regular security audits and updates
• Secure file storage with access controls

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You use the App at your own risk.

7. Your Rights & Choices

You have the following rights regarding your personal information:

• Access & Download: You can access and download your data through your profile settings and individual feature sections (assessments, crash logs, bike setups, etc.)
• Update & Correct: You can edit your profile, bike setups, group information, professional profiles, and other data you've created at any time
• Delete: You can delete your posts, comments, bike setups, crash reports, assessments, and other user-generated content. You can also request account deletion by contacting us
• Privacy Controls: You can control visibility of your professional profiles (pricing privacy), riding groups (public vs. private), shared bike setups (public vs. private), and community posts (anonymous posting option)
• Opt-Out: You can disable sound effects, notifications, and certain features. You can leave riding groups and unfollow other users at any time
• Data Portability: You can request a copy of your data in a portable format by contacting us

8. Feature-Specific Data Practices

8.1 Riding Groups (For Riders, Clubs & Trail Associations)

Our Riding Groups feature is designed for individual riders, MTB clubs, and trail associations to organize rides, trail maintenance days, and community events. Data practices include:

• Public groups are visible to all users; private groups are invitation-only
• Group chat messages are visible to all group members
• Ride schedules, RSVPs, and participant lists are shared within the group
• Group admins can manage members, rides, and settings
• Clubs and trail associations can use groups to coordinate volunteer trail days, organize events, track participation, and communicate with members
• You can leave any group at any time, which removes your access to group content

8.2 Professional Network

The Network connects a wide range of action sports professionals including athletes, brands, coaches, media professionals, mechanics, trail builders, ski tuners, boot fitters, event organizers, sports medicine professionals, adventure guides, nutritionists, mental performance coaches, teams, and camps. Your professional profile visibility is controlled by you:

• Public profiles are searchable and visible to all users
• You can mark pricing information as private
• Inquiries create private conversation threads with disclaimer acceptance workflows
• Reviews and ratings are public to build trust in the marketplace
• You can deactivate your profile at any time to remove it from public view
• Professional subscription tiers may apply for unlimited inquiry handling

8.3 Teams & Job Applications

Teams can create profiles and post job opportunities. Data practices include:

• Team profiles are publicly visible and searchable
• Job postings include role details, requirements, and application processes
• Applications create private threads between applicants and team administrators
• Both parties must accept disclaimers before messaging can begin
• Application status and communications are private to the parties involved

8.4 Camps & Training Programs

Camps and training programs can list their offerings and manage participant inquiries:

• Camp profiles include schedules, coach information, pricing, and event details
• Inquiries from potential participants create private conversation threads
• Camp administrators can manage events, schedules, and communications
• Participant information is kept private and only shared with camp administrators

8.5 Sales Hub (B2B Features)

The Sales Hub enables brand-to-dealer business relationships:

• Brands can create product catalogs, set pricing tiers, and manage orders
• Dealers can browse catalogs, place orders, and communicate with brands
• Order information, pricing, and business communications are private between parties
• Lookbooks and product information may be shared as PDFs with authorized dealers
• Sales Hub subscription tiers apply for brands using these features

8.6 AI-Powered Insights & Analysis

We use AI (powered by OpenAI) to analyze your data and provide personalized insights:

• Pattern recognition in your assessments (after 3+ assessments)
• Crash pattern analysis to identify risk factors
• Bike setup recommendations based on conditions and feedback
• These insights are private to you unless you choose to share them in the community
• Your data is processed by OpenAI's API in accordance with their privacy policy

8.7 Games & Leaderboards

Our Brain Game and Reaction Challenge features:

• Can be played without logging in (scores are saved locally only)
• Logged-in users can save scores to global leaderboards (your player name and scores become public)
• Game statistics and achievements are tracked and visible in your profile
• You can share your scores with friends or groups through the app's sharing features
• Send5 daily word game tracks your streaks, scores, and statistics

8.8 Backcountry Assessment

For backcountry skiing and snowboarding users:

• Avalanche danger level selections and terrain assessments are stored
• Equipment checklists and emergency preparedness data is tracked
• Location data for backcountry trips is collected only when you explicitly share it
• All backcountry assessment data follows the same privacy controls as MTB assessments

8.9 Flow (Community Feed)

The Flow feature provides a community feed for sharing content:

• Posts can include text, images, videos, and location tags
• Intent responses allow quick engagement with categorized reactions
• Comments and mentions notify other users
• Content visibility follows your privacy settings
• Users can report inappropriate comments or posts for admin review

8.10 Video Analysis Community

The Video Analysis feature allows users to share and interact with riding technique analyses:

• Public video analyses are visible and commentable by all logged-in users
• Comments, replies, and likes on analyses generate notifications to the content owner
• Voiceover recordings attached to analyses are stored and publicly accessible when shared
• Users can report inappropriate comments for admin review

8.11 Performance Tracker Community

The Performance Tracker enables sharing of training data with the community:

• Public workout sessions are visible and commentable by all logged-in users
• Comments, replies, and likes on workouts generate notifications to the content owner
• Training calendars, goals, and race debriefs can be shared publicly
• Users can report inappropriate comments for admin review

8.12 Community Garage (Bike Setups)

The Community Garage allows users to interact with shared bike and equipment setups:

• Public bike setups and setup profiles are visible and commentable by all logged-in users
• Comments, replies, and likes on setups generate notifications to the setup owner
• Users can report inappropriate comments for admin review

8.13 SEND5 Game Community

The SEND5 daily word game has social features:

• Game scores can be shared to the SEND5 community hub
• Comments, replies, likes, and challenges on scores generate notifications
• Player challenges create interactions between users
• Users can report inappropriate comments for admin review

8.14 Content Reporting & Moderation

To maintain a safe community, users can report inappropriate content across all community features:

• Reports can be submitted for comments, posts, messages, scores, and other user-generated content across Flow, Video Analysis, Performance, Garage, SEND5, and Clubs & Groups
• When you submit a report, we collect: the type and ID of the reported content, the reported user's email, your email as the reporter, the reason for reporting, and any additional description you provide
• Reports are reviewed by our moderation team within 24 hours
• Admin moderators can review, resolve, dismiss reports, or delete the reported content
• Report data is only visible to you (the reporter) and admin users
• False or abusive reports may result in action against the reporter's account
• Automated keyword filtering may flag or block content that violates community guidelines

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specific retention practices:

• Account data: Retained until you request deletion
• Assessments, crash logs, bike setups: Retained for historical tracking and pattern analysis (you can delete individual entries)
• Community posts and comments: Retained unless you delete them
• Riding group data: Retained as long as the group exists; your personal participation data is removed when you leave a group
• Messages: Retained in conversation threads until participants delete them
• Game scores: Retained for leaderboard integrity (you can request removal)

10. Children's Privacy

Into The Gnar is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at info@barelliconcepts.com and we will delete such information promptly.

For users between 13-17, we encourage parental guidance when using features involving risk assessment, crash reporting, and location sharing.

11. International Users

Into The Gnar is operated from Canada. If you are accessing the App from outside Canada, please be aware that your information may be transferred to, stored, and processed in countries where our servers and service providers are located. By using the App, you consent to such transfer and processing.

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected, used, shared, or sold
• The right to delete personal information held by us
• The right to opt-out of the sale of personal information (Note: We do NOT sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise these rights, please email us at info@barelliconcepts.com

13. Changes to This Privacy Policy

We may update this Privacy Policy as we add features, integrate new services, or improve existing capabilities. We will notify you of any material changes by posting the new Privacy Policy in the app and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.

14. Disclaimer & Assumption of Risk

Into The Gnar is a tool to support your decision-making, not a substitute for proper training, judgment, or professional instruction. The App:

• Does NOT guarantee safety or prevent accidents
• Does NOT replace professional coaching, medical advice, or emergency services
• Cannot assess real-time trail conditions, weather changes, or unforeseen hazards
• Provides educational content and self-assessment tools, but ultimate responsibility for your safety rests with YOU

By using Into The Gnar, you acknowledge and accept:

• You are solely responsible for your decisions on the trail and bike
• You assume all risks associated with mountain biking and related activities
• Into The Gnar and its creators are not liable for any injuries, damages, or losses resulting from your use of the App or participation in activities facilitated through the App (including riding groups, trail days, or events organized via the platform)
• Riding group organizers, trail association coordinators, and club administrators using the App are responsible for their own events and activities
• The App is provided "as is" without warranties of any kind

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We will respond to your requests within 30 days.

16. Your Acknowledgment

By using Into The Gnar, you acknowledge that:

• You have read and understood this Privacy Policy
• You are aware of the inherent risks of mountain biking and action sports
• You accept responsibility for your own safety and decisions
• You consent to the collection, use, and sharing of your information as described in this policy