What and why PedalMash collects, and how to remove it. PedalMash analyzes your mountain bike rides and compares your times on the same stretches of trail. Description below provides further details of exactly what the app collects and what happens to it. We do not sell nor collect personal information, we do not run advertising, and we do not track you across other apps or websites.
Last updated: August 2026.
Signing into app.
Signing in with Apple is the only way to create a PedalMash account. When you sign in, Apple provides an email address which becomes your account identifier. If you choose Hide My Email, Apple sends a private relay address instead and we will never see your real email address.
Your email is used to identify your account and, during the beta, to potentially contact you about an issue you submitted, or to respond to your feedback. Your email is never shown to anyone else and never used for marketing.
Your ride data.
Rides reach PedalMash one of two ways: A read from Apple Health with your permission, or by a FIT file you shared/imported into the app. The app only reads workouts — it never writes to Apple Health.
To perform analysis, data from the ride will contain the following metrics: GPS route, timestamps, elevation, distance, and heart rate (heart rate is optional based on your device’s capabilities).
What a GPS route can reveal.
Be aware of what you are handing over. A ride’s route is precise location data. If you start recording in your driveway, that route shows where you live. The same is true for anywhere else you regularly begin or end a ride.
PedalMash does not collect your personal information. The most sensitive information PedalMash holds is described as follows:
- Your routes are visible only to you. They are shown on your ride screens and nowhere else.
- Sector start and finish points describe trail features, not addresses. A sector requires roughly a quarter mile of riding with real elevation change.
Home Location Privacy
If you start or finish a ride at your home, the app will record those GPS coordinates as part of your ride data. Your home coordinates are never displayed publicly or shared with anyone.
Your sectors are visible only to you, so nobody can browse them or find sectors near your home because you started or ended a ride there.
Most rides from home will not create a sector near the house at all. A climb or descent needs roughly a quarter mile of riding with real elevation change before it qualifies, so a driveway or a short residential street does not become one.
If you would rather avoid this entirely, start recording after you have left home and stop before you return. Please consider this when starting or ending rides at your home.
Your profile
Your display name is for your own screens. Nobody else sees it, so choose anything you like — it does not have to be your real name.
Region and weight are optional, and are shown only to you. A profile photo is optional. PedalMash does not ask for your age or gender.
What other riders can see
Nothing. PedalMash shows you only your own times, and shows nobody else anything about you — no name, no times, no routes, no rides. There is no leaderboard, no feed, and no way for one rider to look up another.
PedalMash does build a shared map of trail sectors, and it is worth being precise about what that holds. For each sector, and for each ride that has crossed it, PedalMash keeps a short outline of the ground: about twenty points of latitude and longitude along the sector, the elevation at those points, where the sector starts and finishes, and — for the crossing itself — how long it took and when it happened.
Nearly all of that describes the ground rather than a person. The timing and the date describe a crossing — but not who made it. These records are filed under the sector, never under a person: there is no name, no account, and no way to ask which rider a crossing belonged to.
Where it is stored, and for how long
Rides are analyzed and stored on secured private cloud infrastructure located in the United States. Account records are keyed to an internal identifier rather than to your name or email.
Your rides and reports are kept indefinitely, so the app can reopen a ride without re-processing it, until you delete them.
How it is secured
Ride data is treated as sensitive because it is.
Everything is encrypted where it is stored and encrypted while it moves — unencrypted connections are refused outright, not merely discouraged. Nothing is publicly readable: there is no address another person can guess to reach your rides. Every request is checked against your signed-in account, and an account can only ever reach its own records.
What this is not: PedalMash has not been independently audited or certified against any security standard. It is one person applying sensible practice, not a company with a compliance program.
Deleting your data
Open Profile → Delete account in the app. This removes your rides, reports, attempt history, profile, profile photo, and any feedback you sent.
You can also delete a single ride from that ride’s screen without deleting your account.
What remains, and why. The shared trail map described above outlives your account. Each crossing it holds carries the outline of the ground and the identifier of the ride it came from — never who rode it. Once your account is deleted, that ride identifier no longer refers to anything, and what is left is a measurement of a trail with no route back to a person.
It is kept for two reasons. It is how the app recognises the same stretch of trail on a later ride, yours or anyone’s. And it is the evidence PedalMash learns from: sector detection improves by being tested against real crossings of real trails, so today’s recordings are what make tomorrow’s detection better.
Payment
If you buy PedalMash from the App Store, Apple handles the purchase. Your payment details go to Apple and never reach PedalMash — no card number, billing address, or purchase history is received or stored here.
Children
PedalMash is for riders aged 16 or older and is not directed at children. The full eligibility rule is in the terms of use.
PedalMash does not ask for your age or date of birth, so it holds nothing that records how old you are.
Changes
If this policy changes in a way that affects what we collect, the app will say so before the change takes effect.
Contact
Send feedback from Profile → Send feedback in the app. Include the ride date and a short description. It is the only way to reach PedalMash. A reply is possible, though not promised.