01 — Controller
Who we are
Bikely operates secure bicycle parking — pods, racks, charging and service stations, and bike hotels — across the Nordics. The Bikely app lets you find, book and unlock that parking from your phone.
The data controller for the app is Bikely AS, org.nr 919 270 942, Leirfossvegen 5, 7037 Trondheim, Norway. For any question about this policy or your data, write to support@bikely.no.
02 — Collection
What we collect, and why
We collect only what the service needs to work. We do not use advertising trackers, and the app contains no analytics or profiling SDKs.
| Data | Why we need it |
|---|---|
| Account details | First name, last name, email address and phone number. Used to create and identify your account, sign you in, and contact you about your bookings. Legal basis — Contract, GDPR Art. 6(1)(b) |
| Language preference | So the app and our messages reach you in your own language. Legal basis — Contract, Art. 6(1)(b) |
| Booking and parking history | Reservations, parking sessions, unlock events, receipts and wallet balance. Needed to deliver the service, bill you correctly and handle disputes. Legal basis — Contract, Art. 6(1)(b) |
| Payment information | Payments are handled by Stripe. Bikely never receives or stores your full card number. We hold only a payment-method reference from Stripe (such as card brand and last four digits) plus the transaction record. Legal basis — Contract, Art. 6(1)(b); Legal obligation, Art. 6(1)(c) |
| Location | If you grant location permission, your position is used to centre the map on you and to draw a cycling route to a chosen parking site. Route requests send your start and end point to Google's Routes API. Bikely does not store your location history. The app works without this permission — you can browse and book by panning the map. Legal basis — Consent, Art. 6(1)(a) — withdraw any time in system settings |
| Bluetooth | Used to talk directly to the lock on a Bikely unit so it can open. This exchange is between your phone and the lock; no personal data is collected from the Bluetooth connection itself. Legal basis — Contract, Art. 6(1)(b) |
| Push notification tokens | A device token from Firebase Cloud Messaging so we can notify you about a booking, an expiring session or a service message. Legal basis — Consent, Art. 6(1)(a) |
| Support conversations | Messages you send our support team through the in-app chat, and any photo, audio or file you choose to attach. Only what you actively send. Legal basis — Legitimate interests, Art. 6(1)(f) — supporting our users |
| Technical data | App version, platform and device model, plus server logs (including IP address) needed to run the service securely and diagnose faults. Legal basis — Legitimate interests, Art. 6(1)(f) — security and reliability |
03 — Permissions
Device permissions we ask for
Each permission is requested only when the relevant feature is used, and every one can be revoked in your device settings without deleting your account.
- Bluetooth — to communicate with bike locker locks and open them.
- Location — to show your position on the map and route you to a parking site.
- Notifications — to send booking and session reminders.
- Camera, photo library and microphone — only so you can attach a photo or use voice chat when contacting support. Nothing is captured in the background.
05 — Storage
Where your data is stored
Bikely's application servers and databases run on Microsoft Azure in the Norway East and North Europe regions. Data is encrypted in transit, and access is limited to personnel who need it to operate and support the service.
06 — Retention
How long we keep it
| Data | Kept for |
|---|---|
| Account details and preferences | As long as you have an account. Deleted when you delete the account. |
| Booking and parking history | Deleted with your account. |
| Payment and accounting records | 5 years, as required by the Norwegian Bookkeeping Act (bokføringsloven § 13), then deleted. |
| Support conversations | Until the case is closed, and no longer than 24 months after. |
| Push notification tokens | Until you sign out, uninstall the app, or delete your account. |
| Location data | Not retained. Processed only while you use the map. |
| Server logs | Up to 90 days. |
| Encrypted backups | Deleted data disappears from backups as they rotate, within 90 days. |
07 — Rights
Your rights under the GDPR
Write to support@bikely.no to exercise any of these. We respond within 30 days, free of charge.
Access
Get a copy of the personal data we hold about you.
Rectification
Have inaccurate or incomplete data corrected.
Erasure
Have your data deleted, subject to records we must keep by law.
Restriction
Ask us to pause processing while a dispute is resolved.
Portability
Receive your data in a machine-readable format.
Objection
Object to processing based on our legitimate interests.
Withdraw consent
Turn off location or notifications at any time in system settings.
Complain
Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
08 — Deletion
Deleting your account
You can delete your Bikely account and its associated data from inside the app (Profile → Delete account), or by asking us to do it for you — no app install required.
Full instructions and scope
Our account deletion page sets out both routes, what gets deleted, what we must retain, and how long each step takes.
Account deletion09 — Children
Children
The Bikely app is not directed at children. We do not knowingly collect personal data from children under 13, the age of consent for information society services under Norwegian law. If you believe a child has given us their data, contact us and we will delete it.
10 — Changes & contact
Changes to this policy
We update this policy when the app or our processing changes. The date at the top shows the current version. If a change materially affects you, we will tell you in the app or by email before it takes effect.
Questions, requests or complaints: support@bikely.no. If you are not satisfied with our response, you can complain to Datatilsynet, Postboks 458 Sentrum, 0105 Oslo — datatilsynet.no.