BiciClub Consumer Health Data Privacy Policy
Copyright 2026 I2CS Inc. All rights reserved.
Version 1; Last Updated November 06, 2026
1. What this policy covers.
This policy explains the health information you can choose to give BiciClub, the app and website operated by I2CS Inc., what we do with it, who can see it, and how to control it. It supplements our Privacy Policy and applies to everyone who uses BiciClub in the United States. If the two conflict about health information, this policy controls.
2. What we collect and why.
We collect only what you enter: your allergies, medications and medical conditions, and any notes you add about them. Giving us this information is optional, and you can use BiciClub fully without it. We collect it so that authorized staff of the clubs you choose can see it when needed to respond to a medical emergency or incident during or after a club activity, and for no other purpose. We do not use it for advertising, analytics, profiling or research, and we do not sell it.
3. Where it comes from.
It comes only from you, entered in the app or website after you give consent. Clubs cannot enter or import health information about you.
4. Who we share it with.
- Clubs you choose. If you turn sharing on for a club, that club's authorized administrators (levels 1 to 4) can view it at any time, so they can help if someone contacts them during or after an emergency, and they are bound by confidentiality obligations to the club. Ride leaders, including leaders in training, registered to lead a ride you are attending can also view it. They can view it only from 24 hours before the ride starts until 48 hours after it ends, or for a shorter period if your club sets one. You choose club by club and can turn sharing off at any time.
- Service providers. Companies that host and secure our systems store it on our behalf under contracts that allow them to use it only to provide those services to us.
- Medical professionals. BiciClub does not send your health information to emergency services. A club staff member who can see it may read it out or show it to medical professionals, meaning anyone contributing to your medical care, such as paramedics, doctors and nurses, when needed to help you.
- Legal and security. We may disclose it where the law requires, or to respond to security incidents, fraud or other unlawful activity.
We do not share consumer health data with any affiliate. We do not sell it.
5. Your rights and how to use them.
- Confirm and access. Ask whether we collect or share your health information, get a copy, and get a list of every club and other recipient we have shared it with, with an email address or online way to contact each.
- Withdraw consent. Turn off sharing for any club, or stop all collection, in Settings under Health information. Club access ends right away; a screen a staff member already has open can take up to a minute to clear.
- Delete. Delete your health information at any time in the same place, or by emailing [email protected]. Withdrawing consent to store deletes it from our live systems immediately.
6. Consent.
We ask for your agreement separately for storing your health information and for sharing it with each club, and you confirm you are an adult. Agreeing to our Terms of Use or Privacy Policy is not consent. If you decline or withdraw, nothing about your use of BiciClub changes except that club staff cannot see this information in an emergency. We will not treat you differently for using these rights.
7. How we protect it.
Each time club staff open your health information we check that you have agreed to storage and to sharing with that club, that they hold an eligible role and, for ride leaders, that the time window is open. We record each attempt without the health details. Staff screens clear after about a minute, and health information is kept out of logs, shared member lists and the app's saved state.
8. How long we keep it.
Until you delete it or close your account, then deleted within 7 days, and from backups within six months. A record that you gave or withdrew consent, which contains no health details, is kept for 90 days.
9. Minors.
Only adults can add health information. You confirm you are 18 or older when you consent, and BiciClub blocks it for any account whose date of birth shows a younger rider.
10. Changes.
If we add categories of health information, new purposes or new kinds of recipients, we will tell you and ask for your consent before collecting, using or sharing on that basis.