Privacy

We collect what we need to give your bike an identity you can prove, and to get it booked in for service. We don’t sell your data. Your payment card never touches our servers — Stripe handles it.

Where we haven’t settled a policy yet, this page says so instead of guessing.

When you sign up we store your email address and a password (hashed by our authentication provider — we never see it).

Your profile can also hold a display name, profile photo, a phone number, a free-text location (like “Brooklyn” — you type it, we don’t detect it), your rider type, and your language. All of those are optional.

Your phone number is only used if you ask us to text you about your bookings — see below. We don’t use it for anything else.

We only text you about your bookings, and only if you asked us to. Message frequency varies and message and data rates may apply. You can stop them at any time by replying STOP, or reply HELP for help.

Texting isn’t switched on yet, so nothing is being sent right now. If you opt in today, we’ll start once it launches.

On your profile you can tick a box asking us to text you about your bookings when we do turn it on. It’s off unless you turn it on, it isn’t bundled with anything, and you can turn it off whenever you like.

When you tick or untick it, we record what you chose, when, the number it applied to, and the exact wording you were shown. We keep that history rather than just your current answer, because a record of consent is only worth anything if it shows what you actually agreed to.

That consent covers booking messages only. We won’t text you marketing, and we won’t give your number to anyone else for theirs.

For each bike you register we store its make, model, type, colour, year, an optional serial number, how you acquired it, photos you upload, and its verification status.

You can also upload ownership documents — a receipt or proof of purchase. These are held in private storage that only you can read.

A serial number is what makes a stolen bike identifiable, so it’s the most sensitive thing here. We treat it as private to your account.

When you request a service we store which bike, which services, the times involved, any photos you attach, and the prices quoted.

The shop you book with sees your booking. That’s the point of it — they need to know whose bike it is and what’s wrong with it. Service providers on Oonee are independent businesses, not Oonee staff, and they handle your information under their own practices.

Payments are processed by Stripe. Your card details go to Stripe directly and are never stored on our servers.

We keep a record of the amount, the currency, the status, and Stripe’s reference ids so a booking can be matched to its payment.

Online payment is not switched on yet. Until it is, this section describes what happens once it is enabled.

On the Places map, your browser may ask whether you want to share your location. You can say no — the map still works, you just don’t get distances.

If you allow it, we request an approximate position (we explicitly don’t ask for high accuracy). Finding services near you happens on your device.

For public bike parking, those coordinates are sent to our server and on to NYC Open Data, the city’s public data portal, to look up racks and shelters near that point. We don’t store your location.

We send emails about things that happen to your bookings — a shop proposing a time, a confirmation, a cancellation. These are part of the service, not marketing.

If you email us for help, we keep that correspondence so we can answer it and refer back to it.

Our hosting provider (Vercel) and database provider (Supabase) process ordinary technical information — things like IP address and browser type — as part of serving the site and keeping it secure.

We don’t sell your personal information, and we don’t share it for advertising. It reaches other parties only in these cases:

• The provider you book with — your booking, so they can do the work.
• Stripe — to take payment, once enabled.
• Supabase and Vercel — who host the database and the app.
• Resend — who deliver our transactional email.
• NYC Open Data — coordinates only, and only to find nearby public bike parking.
• When the law requires it, or to protect people or investigate abuse.

Not yet finalised — Whether Oonee makes a formal “we do not sell your data” commitment, and under which laws that promise is made, is a decision for the company and its counsel. The list above describes today’s behaviour; it is not yet a legal undertaking.

You can edit your profile and your bikes at any time from your account.

When you remove a bike, it stops appearing in the app but the record is retained rather than erased, so that bookings and ownership history stay intact.

Not yet finalised — Oonee has not yet set retention periods, or built a self-serve way to delete an entire account. Until it does, we’re not going to state a timeline we don’t keep. To ask about your data, email info@oonee.us. Requests are handled manually.

Access to your data is restricted at the database level, so one rider can’t read another’s bikes, bookings or documents. Ownership documents sit in a private bucket readable only by you.

We don’t claim any security certification, because we don’t hold one.

Oonee is not intended for children.

Not yet finalised — A minimum age has not been set. This needs a decision before launch.

If this notice changes in a way that matters, we’ll update the effective date at the top and, where it’s significant, tell you directly.

Questions about privacy: info@oonee.us.

Not yet finalised — The publishing entity (Modular Streetscape Systems, Inc., d/b/a Oonee) and whether a postal address must be listed are pending confirmation. No address is shown here because none has been verified.