Privacy policy
Applies to the Leanback mobile app for iOS and Android. Last updated 20 August 2026.
Leanback is built to work without an account. There is no sign-up, no email address, no password, and no advertising. Everything below describes the optional Community feature, which is switched off until you turn it on.
Who we are
Leanback is published by Stark Trace. For anything in this policy, contact support.
What stays on your phone
Recorded sessions — angle samples, wheelie counts, streaks, speed, duration, your zone profile and your rider name — are stored locally on your device. With Community switched off, none of it is transmitted anywhere, and Leanback works fully in that state.
What we collect, and only if you opt in
Turning on Community and registering creates an anonymous rider record on our server. From that point we hold:
| Data | What it is |
|---|---|
| Display name | The rider name you chose in the app. Free text, not verified, not required to be real. |
| Ride summaries | Maximum and average pitch angle, duration, wheelie count, top speed and distance — the numbers behind the leaderboard. |
| Full ride telemetry | Per-sample timestamp, pitch, speed, wheelie flag and drive mode. Uploaded only for individual sessions you explicitly choose to share. |
| Device identifier | A random identifier generated by the app for your installation. It is not an advertising ID and is not derived from your hardware. |
What we never collect
- No location coordinates. Leanback asks for location permission because it needs GPS to work out ground speed and distance while you ride. That calculation happens on your phone. No latitude or longitude is ever transmitted or stored — the upload carries a speed in km/h and nothing positional.
- No email address, phone number, contacts, photos, messages, health or financial data.
- No advertising identifiers, and no advertising.
- No third-party analytics, tracking or profiling SDKs. The app talks to our own server and nowhere else.
How it is handled
- In transit. All traffic is HTTPS. Release builds of the app refuse plain HTTP to anything but a server on your own network.
- At rest. Your access token is stored only as a SHA-256 hash on the server, and in the platform secure store (Android Keystore, iOS Keychain) on your phone. A copy of our database does not yield a usable credential for anyone's account.
- Sharing. We do not sell, rent or share your data with third parties. There are no ad networks or data brokers involved.
- Visibility. Your display name and ride summaries appear on the in-app leaderboard to other registered riders. Full telemetry is visible only for rides you chose to share.
- Retention. Data is kept until you delete your account, at which point it is erased — see below.
Children
Leanback is not directed at children and is not appropriate for them. We do not knowingly collect data from anyone under 16. If you believe a child has registered, contact us and we will delete the account.
Deleting your account and data
Deletion is permanent and immediate. It removes your rider record, your leaderboard entry and every ride you shared, including the full telemetry attached to them. Sessions saved on your own phone are not touched — they were never on our servers.
- In the app. Settings ▸ Community ▸ DELETE ACCOUNT. One confirmation, then it is gone.
- On this website, after uninstalling. Use the account deletion page with the deletion code shown in the app's Settings screen. Because Leanback holds no email address for you, that code is the only thing that can prove an account is yours once the app is off your phone — copy it before you uninstall.
- Lost the code? Contact support. We will help, but be aware that with no email on file and display names that are neither unique nor verified, we cannot delete an account on the strength of a name alone — doing so would let anyone delete anyone.
Simply deleting the app does not delete a Community account, because the app cannot tell our server anything once it is gone. Use one of the routes above.
Your rights
Depending on where you live you may have rights to access, correct, export or erase your data, and to object to its processing. Deletion is self-service above; for anything else, contact us and we will respond within 30 days. Our lawful basis for the Community feature is your consent, given by switching it on, and withdrawn by deleting the account.
Changes
If this policy changes materially we will update the date at the top of this page and note the change in the app's release notes. Continuing to use Community after a change means you accept it.