Privacy

How Oonee handles your information. This describes what the product does today — not what it might do later.

Effective July 16, 2026

The short version

We collect what we need to give your bike an identity you can prove, and to get it booked in for service. We don't sell your data. Your payment card never touches our servers — Stripe handles it.

Where we haven't settled a policy yet, this page says so instead of guessing.

Account and profile

When you sign up we store your email address and a password (hashed by our authentication provider — we never see it).

Your profile can also hold a display name, profile photo, a phone number, a free-text location (like "Brooklyn" — you type it, we don't detect it), your rider type, and your language. All of those are optional.

Your phone number is stored but not currently used to contact you. We don't send text messages.

Your bikes

For each bike you register we store its make, model, type, colour, year, an optional serial number, how you acquired it, photos you upload, and its verification status.

You can also upload ownership documents — a receipt or proof of purchase. These are held in private storage that only you can read.

A serial number is what makes a stolen bike identifiable, so it's the most sensitive thing here. We treat it as private to your account.

Bookings and providers

When you request a service we store which bike, which services, the times involved, any photos you attach, and the prices quoted.

The shop you book with sees your booking. That's the point of it — they need to know whose bike it is and what's wrong with it. Service providers on Oonee are independent businesses, not Oonee staff, and they handle your information under their own practices.

Payments

Payments are processed by Stripe. Your card details go to Stripe directly and are never stored on our servers.

We keep a record of the amount, the currency, the status, and Stripe's reference ids so a booking can be matched to its payment.

Online payment is not switched on yet. Until it is, this section describes what happens once it is enabled.

Location

On the Places map, your browser may ask whether you want to share your location. You can say no — the map still works, you just don't get distances.

If you allow it, we request an approximate position (we explicitly don't ask for high accuracy). Finding services near you happens on your device.

For public bike parking, those coordinates are sent to our server and on to NYC Open Data, the city's public data portal, to look up racks and shelters near that point. We don't store your location.

Emails we send

We send emails about things that happen to your bookings — a shop proposing a time, a confirmation, a cancellation. These are part of the service, not marketing.

Support

If you email us for help, we keep that correspondence so we can answer it and refer back to it.

Technical data

Our hosting provider (Vercel) and database provider (Supabase) process ordinary technical information — things like IP address and browser type — as part of serving the site and keeping it secure.

Who your information goes to

We don't sell your personal information, and we don't share it for advertising. It reaches other parties only in these cases:

• The provider you book with — your booking, so they can do the work.
• Stripe — to take payment, once enabled.
• Supabase and Vercel — who host the database and the app.
• Resend — who deliver our transactional email.
• NYC Open Data — coordinates only, and only to find nearby public bike parking.
• When the law requires it, or to protect people or investigate abuse.

NOT YET FINALISED — Whether Oonee makes a formal "we do not sell your data" commitment, and under which laws that promise is made, is a decision for the company and its counsel. The list above describes today's behaviour; it is not yet a legal undertaking.

Keeping and deleting information

You can edit your profile and your bikes at any time from your account. When you remove a bike, it stops appearing in the app but the record is retained rather than erased, so that bookings and ownership history stay intact.

NOT YET FINALISED — Oonee has not yet set retention periods, or built a self-serve way to delete an entire account. Until it does, we're not going to state a timeline we don't keep. To ask about your data, email support@oonee.us. Requests are handled manually. going to state a timeline we don't keep. To ask about your data, email support@oonee.us. Requests are handled manually.

Security

Access to your data is restricted at the database level, so one rider can't read another's bikes, bookings or documents. Ownership documents sit in a private bucket readable only by you.

We don't claim any security certification, because we don't hold one.

Children

Oonee is not intended for children.

NOT YET FINALISED — A minimum age has not been set. This needs a decision before launch.

Changes

If this notice changes in a way that matters, we'll update the effective date at the top and, where it's significant, tell you directly.

Contact

Questions about privacy: info@oonee.us