PRIVACY

Privacy policy

LAST UPDATED 21 OCTOBER 2026

What Framed AI collects when you use framedbikes.eu and the app at app.framedbikes.eu, why, who else handles it, how long we keep it and what you can do about it. If anything here is unclear, write to hello@framedbikes.eu.

01Who is responsible

Framed AI BV is responsible for your personal data (the “controller” under the GDPR). Rodeborgstraat 67, 2900 Schoten, Belgium · Enterprise no. 1040.786.838 · VAT BE1040.786.838 · RPR Antwerpen, afdeling Antwerpen. For anything about your data, write to hello@framedbikes.eu.

02What we collect and why

Your account: Your name and email address, and your password, which we store only as a one-way hash. If you sign in with Google, we receive the name and email address of your Google account. Why: to run your account. Legal basis: our contract with you (GDPR art. 6(1)(b)).
Your measurements and riding profile: Height, inseam and the other body dimensions you measure, your birth year, the riding you do, your goals and weekly hours, the brands you prefer, and how you measured (camera scan or tape, with the scan’s quality figures). Why: to work out your fit and match frames to it. Legal basis: our contract with you.
The camera scan: The scan runs on your phone. The camera images are analysed on the device and are never uploaded: only the measurements it produces are saved.
Trying the fit without an account: Your answers stay in your browser until you save them, for at most 14 days. To show you a preview, we receive your measurements and riding answers without your name or any account, work out your fit and one matching frame, and keep nothing. No health questions are asked before you have an account.
Your garage and shortlist: The bikes you add and their settings, the frames we showed you, the bikes you loved, and the links you followed to brand sites. Why: to keep your garage and shortlist, to learn which advice is useful, and to count the referrals that may earn Framed a commission. Legal basis: our contract with you, and our legitimate interest in improving the advice.
How you use the app: Which steps of the fit you completed, how you measured (scan or tape, how many tries and how long it took), whether the scan ran into a problem, which results you opened, and your device type (for example “Android 14, Chrome”). Why: to see where the app fails riders and fix it. Legal basis: our legitimate interest in a working product. Kept for 12 months.
Your answers about a result: If you answer the questions under a result (would you buy this size, was it right), we keep your answers and what the result showed. Why: to measure whether the advice is right. Legal basis: our legitimate interest in improving the advice.
Supervised tests: If you take part in a test with a partner studio, the studio records its own fit of you under your tester code, so the app’s result can be compared with it. Legal basis: the consent you gave the studio for the test.
Visits to framedbikes.eu: We count page views and button clicks on the public site, without cookies and without any identifier, so the counts cannot be tied to you. Browsers that send Do Not Track or Global Privacy Control are not counted.
Requests from investors, shops and brands: If you ask for the deck on /investors, we keep your name, email, organisation and message to answer you. Legal basis: our legitimate interest in answering. Kept for 12 months.
Technical data: Your IP address, browser and device type, the pages you request and any errors, including error reports from your browser if something fails on your phone. Why: to keep the service secure and working. Legal basis: our legitimate interest in a secure, working service.
Email: We email you only about your account, for example the link when you ask to reset your password.
Payments: Paid plans are not open yet. When they are, Stripe will take the payment: we will receive your plan, its status and a Stripe customer reference, never your card number.

We do not sell your data, we do not show advertising, and we do not use your data for marketing without asking you first.

03Health information

The discomfort you report, your injury history, flexibility and mobility, pelvic tilt, foot type and leg-length difference are health data, a special category under the GDPR. So is anything you tell the fitting assistant about pain or injuries.

We use them only to take them into account in your setup advice and in the fitting assistant below, and only with your explicit consent (GDPR art. 9(2)(a)), which the app asks for before it saves them. You can withdraw that consent at any time by clearing your health card or deleting your account; what we did with it before stays lawful.

Your health card answers and your messages to the assistant are encrypted by the app before they reach our database. Framed staff do not see them in our admin tools. If you are linked to a bike fitter on Framed, that fitter can see your record, health answers included, to advise you, and every such view is logged.

04The AI assistant

The fitting assistant uses Google’s Gemini models to write its answers. When you use it, the model receives your messages and what the assistant looks up to answer them: your measurements, your fit numbers and, when they are relevant, your health card answers. No photo is ever sent.

The models run on Google Cloud’s Vertex AI in Belgium (europe-west1), like the rest of Framed, so these requests stay in the EU, and Google does not use them to train its models. Your conversations are saved in your account, encrypted. The fit itself, your envelope, sizes and setups, comes from Framed’s own engine, not from the AI.

06Transfers outside the EU

Our servers, database and AI models are in the EU. Google (for sign-in), Stripe and Resend may process data in the United States. Their contracts with us include the European Commission’s Standard Contractual Clauses, and Google and Stripe are also certified under the EU–U.S. Data Privacy Framework.

07Cookies and storage on your device

We set only the cookies that signing in needs: a session cookie that keeps you signed in, and two short-lived cookies that protect the sign-in form and remember where to send you afterwards. Your browser’s local storage keeps a few interface choices, such as a notice you closed, and the answers of a fit you tried before creating an account.

There are no analytics, advertising or social media cookies, so there is no cookie banner. Fonts are served from our own servers.

08How long we keep it

Your account, profile, garage and history: until you delete your account.
Health data: until you withdraw consent or delete your account.
How you use the app: 12 months.
Deck requests: 12 months.
Technical logs and error reports: 30 days.
Password reset links: one hour.

Deleting your account removes your data from the live database at once. Copies in our encrypted database backups expire as the backups roll over.

09Your rights

You can, at any time:

see and download your data (Settings → Export my data);
correct it in the app, or ask us to;
delete your account and everything in it (Settings → Delete account);
withdraw your consent for health data;
object to, or ask us to restrict, how we use your data;
take your data to another service.

Write to hello@framedbikes.eu for anything the app does not do by itself. We answer within one month. If you think we handle your data wrongly, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, dataprotectionauthority.be) or the authority where you live.

10How we protect it

Every connection is encrypted, all stored data is encrypted by Google Cloud, and health answers and assistant messages are encrypted again by the app. Only the founders can reach the admin tools, and each look at a person’s record is logged with its reason.

11Children

Framed is not for anyone under 16. If you believe a child has given us data, write to hello@framedbikes.eu and we will delete it.

12Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects how we use data you have already given us, we will tell you in the app before it takes effect. The terms of use cover the rest of how Framed works.