BAAW is a camera and build journal for your bikes, with a small invite-only network of riders. It is made by one person, Che Wei Lee. This page says what the app stores, where it goes, who can see it, and how to delete it.
The short version: there are no ads, no trackers and no analytics services. Your data lives in Apple's iCloud, in a database that belongs to the app. Private photos and exact locations stay in your own iCloud account, where the developer cannot read them. You can delete everything from inside the app.
Your account. You sign in with Sign in with Apple. The app keeps the user ID Apple issues for it and the handle you choose. It asks Apple for neither your name nor your email address, so it never receives them. A display name, a short bio and a profile picture are optional and are only stored if you add them.
Your bikes. Bike names, frame brand and model, builds, spec sheets and build descriptions, as you enter them. Specs are never required.
Public photos. A photo you mark Public is uploaded along with its caption, the bike and build it belongs to, and the name of the city or town where it was taken. Camera metadata (EXIF) is removed before upload, so the file carries no location, device or time information.
Private photos. A photo you keep Private is uploaded only to your own iCloud account's private database. The developer and other riders cannot see it.
Exact location. If you let the app use your location, the exact spot where a photo was taken is stored only in your own private iCloud database, for you. Everyone else sees at most the city name. Exports never include location.
Likes and comments you leave on other riders' photos, and reports you send about content.
Invites and following. Invite codes you make or redeem, and which frames you follow. Follows are private: nobody sees who follows what, and there are no follower counts.
Activity. The date you last opened the app, recorded at most once a day.
Everything is stored in Apple's iCloud (CloudKit) under the app's own container. Shared data, such as public photos, bikes and comments, lives in the container's public database. Private photos, exact locations, blocks and frame follows live in your personal private database inside that container, which only your Apple account can open. Apple's own privacy policy covers how iCloud stores data.
The app runs no servers of its own, and nothing is sent anywhere other than iCloud.
The network is invite-only. Only riders who have redeemed an invite code can see public photos, bikes, profiles and comments. Without a code the app works as a private camera and journal, and nothing you make is visible to anyone.
Other riders see your handle, display name, picture and bio, your bikes and builds, your public photos with their city name, and your likes and comments. They never see your private photos, your exact locations, or your follows.
You can block a rider, which hides their content from you and yours from them, and you can report photos and comments. Reports are read only by the app's administrator.
If you allow notifications, the app can tell you about comments on your photos and new bikes on frames you follow. Both can be turned off in Profile → Notifications. Notifications are delivered by Apple's push service and contain only the text of the alert.
The camera is used only when you are on the Shoot screen. Importing from your photo library uses Apple's picker, so the app never reads your library. If you turn on Save Captures to Photos, the app asks for add-only access and saves your kept shots, with metadata removed, back to your library.
Delete your account in Profile → Delete Account. This removes your profile, handle, bikes, builds, specs, photos, comments, likes, invites and follows from iCloud, and signs you out. It cannot be undone.
Export your bikes first if you want a copy: Profile → Export My Bikes saves a zip of your bikes, builds, specs and original photos. The export contains no location data.
You can also delete any single photo, build, bike or comment from inside the app at any time.
BAAW is not directed at children under 13, and invite codes are only given to adults the administrator knows.
If this policy changes, the date at the top changes with it, and the new version is published at the same address.
Questions, or anything about your data: chewei.jacky.lee@gmail.com.