PRIVACY POLICY

1. What We Collect

A. Information You Provide

Account information

• Email address
• Login credentials or authentication tokens (depending on login method)

Motocross data you choose to enter

• Bike/garage details
• Maintenance logs and service intervals
• Ride/lap data and riding metrics
• Track information you select
• Suspension settings
• Inventory items
• Notes and planner entries

Support

• Content of messages you send to support and details you choose to include (plus basic metadata such as time and app/device version)

No photos or file uploads: the App does not collect photos or file uploads.

B. Information Collected Automatically

Device and app information

• Device model, operating system version, app version
• Language and time zone
• Technical identifiers needed for basic functionality and troubleshooting

Diagnostics

• Crash/error reports and performance diagnostics via Sentry (to identify and fix issues)

Analytics / Usage Data

• We may collect anonymous usage data and app interaction data to understand how the App is used and improve features and performance. This data does not directly identify you.

C. Push Notifications (Optional)

If you enable push notifications, we process:

• Expo push tokens (and related routing identifiers) required to deliver notifications to your device/app installation

You can disable notifications at any time in your device settings.

D. Track Weather (Open-Meteo)

The App does not request GPS permissions. Weather is based only on the track/location you select. To show a forecast, we process and transmit to the weather provider:

• The selected track/location (and/or its coordinates) and forecast parameters needed to retrieve weather data.

E. Subscriptions (If You Subscribe)

• Payments are handled by Apple/Google. We do not store full payment card details.
• We process subscription status/entitlements to unlock premium features (and may use RevenueCat to manage entitlements).

We process subscription and entitlement data under the lawful basis of contract (to provide paid features) and legitimate interests (to manage subscriptions, prevent fraud, and maintain service access).

2. How We Use Your Data

We use your data to:

• Create and manage your account
• Provide core App features and store/sync your motocross data
• Provide offline-first functionality (store data on your device and sync when online)
• Deliver push notifications you enable
• Display track-based weather forecasts for the track/location you select
• Generate AI-powered insights (if you use AI features)
• Provide customer support and respond to enquiries
• Monitor, diagnose, and fix issues (crash/performance monitoring)
• Protect the App and users from abuse, fraud, and security incidents
• Comply with legal obligations where applicable

3. Lawful Bases (UK GDPR)

We process personal data under one or more of these lawful bases:

• Contract: to provide the App, your account, syncing, subscriptions, and the features you use
• Legitimate interests: to secure and improve the App, prevent abuse, and operate the service reliably (including diagnostics)
• Consent: where required (e.g., push notification permission managed via your device settings; marketing if you opt in)
• Legal obligation: where we must retain or disclose information required by law

4. Where Data Is Stored and Processed

RIDEHQ is an offline-first app:

• Your motocross data is stored locally on your device for offline use
• When online, data can be synced to our backend services linked to your account

We use these providers to operate the App:

• Supabase (eu-west-1 / Ireland): authentication and cloud database for account and synced App data
• Render: hosting for RideHQ backend services/APIs
• Sentry: crash/error monitoring and diagnostics
• Expo (Push Notifications): push notification delivery infrastructure (token-based)
• Open-Meteo: track-based weather forecast API
• OpenAI: AI inference services for generating App insights (only when AI features are used)
• RevenueCat: subscription/entitlement management (if enabled)

Apple and Google also provide platform reporting tools (App Store Connect / Play Console) used to review high-level distribution/performance metrics.

5. AI Features (OpenAI)

If you use AI-powered insights/suggestions, we send only what's needed to generate the output, which can include:

• Your prompt/request
• Relevant motocross context from your account (e.g., maintenance status, inventory status, ride metrics, selected track)

We aim to minimise personal identifiers sent for AI processing. Do not include sensitive personal information in free-text fields intended for AI outputs.

AI outputs (insights) may be stored in your account as part of the App experience.

6. Weather Features (Open-Meteo)

Weather requests are based only on the track/location you select (not device GPS). Depending on implementation, requests may be made:

• from your device directly to the weather provider, or
• via our backend service.

(If requests are made directly from your device, the weather provider may receive your device IP address as part of standard internet communications.)

7. Subscriptions (RevenueCat + App Stores)

If subscriptions are enabled:

• Apple/Google process the payment.
• We (and RevenueCat) process purchase validation and entitlement status.

Data involved can include:

• Internal app user identifier
• Product identifiers and entitlement status
• Purchase/renewal events and timestamps
• Device/app identifiers used for purchase validation and anti-fraud

We process subscription and entitlement data under the lawful basis of contract (to provide paid features) and legitimate interests (to manage subscriptions, prevent fraud, and maintain service access).

8. Account Deletion and Data Removal

You can delete your account from within the App or by contacting support@ridehqmx.net.

When your account is deleted, personal data associated with your account will be deleted or anonymised within a reasonable period unless we are required to retain certain information for legal, accounting, or security purposes. Deleting your account will remove access to the App and associated services.

9. Who We Share Data With

We share personal data only as necessary to provide the App:

• Supabase, Render, Sentry, Expo, Open-Meteo, OpenAI, RevenueCat (to provide hosting, syncing, diagnostics, notifications, weather forecasts, AI insights, and subscription entitlements)
• Apple and Google (for app distribution, subscription processing, and platform reporting)
• Legal/safety disclosures where required by law or to protect users and RIDEHQ

We do not sell your personal data.

10. International Transfers

Some providers may process data outside the UK. Where data is transferred internationally, we use appropriate safeguards required by applicable law.

11. Data Retention

We keep personal data only as long as necessary for the purposes described:

• Account + synced App data: retained while your account is active.
• Account deletion: on request, we delete or anonymise your account data within a reasonable period (typically within 30 days), unless retention is required for legal, security, or fraud-prevention purposes.
• Backups: may persist for a limited period (commonly up to 90 days) before being overwritten.
• Support communications: typically retained up to 24 months for continuity and service improvement.
• Subscription/entitlement records: retained as needed to manage access and prevent fraud, and to comply with applicable obligations.

12. Security

We use appropriate technical and organisational measures to protect personal data (e.g., access controls, secure transmission where available, monitoring). Data is transmitted using encrypted connections where supported (e.g., HTTPS). Because the App stores data locally for offline use, you should also protect your device (PIN/biometrics, OS updates). No system can be guaranteed 100% secure.

13. Your Rights (UK GDPR)

You may have rights to access, correct, delete, restrict, object, and (where applicable) port your personal data. To exercise your rights, email support@ridehqmx.net. We may need to verify your identity.

You also have the right to complain to the Information Commissioner's Office (ICO).

14. Children

The App is not intended for children under 16. If you believe a child has provided personal data, contact support@ridehqmx.net.

15. Changes to This Policy

We may update this policy from time to time. We will post the updated version with a new effective date. Material changes may be notified in-app or by email.

16. Cookies (Website)

If you visit the RIDEHQ website, cookies or similar technologies may be used for basic website functionality and analytics where applicable. Website cookie preferences can be managed through the cookie banner on the website.

17. Contact

RideHQ Systems LTD

167-169 Great Portland Street, 5th Floor, London, W1W 5PF

support@ridehqmx.net