Report a security concern
If you believe you have found a security vulnerability in PedalPilot, email support@pedalpilot.app with “Security report” in the subject.
Include the app version, device and operating system, a description of the issue, safe reproduction steps and its possible impact. You do not need a PedalPilot account.
Protect riders and their privacy
Send only the information needed to understand the issue. Please do not send passwords, API keys, complete ride histories or other people's personal data. Redact locations and identifying details from screenshots where they are not necessary.
Please describe the issue before sending exploit files or sensitive evidence so we can agree on an appropriate way to handle them.
Coordinated disclosure
We assess reports, investigate relevant product versions and coordinate fixes and disclosure with the reporter and affected suppliers. Please give us an opportunity to investigate and protect users before publishing exploit details.
Test only with your own data and in environments where you have permission. Do not disrupt live services, access other users' data or perform load tests. This page does not authorize testing of third-party providers or create a paid bounty programme.
PedalPilot is operated by a small independent business. This email is not a continuously staffed emergency service. For immediate danger while riding, stop safely and contact local emergency services.
Stay up to date
Install available PedalPilot updates from the Apple App Store or Google Play. For normal app questions, use our support page. How information is handled is explained in our privacy policy.