Privacy
RidePulse stores what the app sends when you turn on sync: your account (email, display name, a hashed password), your bikes, and your trips (figures and, with GPS logging on, the route). Live tracking sends your position while you ride.
Public by default. Trips are listed on Rides with your display name unless you hide them, all at once in My account or one by one. The first and last 200 m of each route are hidden from others (privacy zone), unless you turn that off. Live rides are only visible to people you send the live link to.
Visitor statistics. The website counts page views without cookies and without storing IP addresses: a visitor is a one-way code that changes every day, so visits can't be linked across days. Kept is the page, the site you came from, and whether it was a phone or a computer. Single visits are kept 90 days, after that only totals per day.
Your data isn't sold or shared. It is kept on the RidePulse server until you delete it. In My account you can download all your data and delete your account; everything of yours is then removed.
Questions: contact the person who runs this server.