Privacy Policy

RideClan is the data fiduciary responsible for your personal data processed through the App. If you have questions or requests about your data, contact us using the details in the Contact and grievance officer section at the end of this policy.

We only collect what the App needs to work.

Account and profile

When you sign in with Google we receive your name, email address, and Google profile photo URL. Your profile also holds a display name, profile photo URL, home city (for the leaderboard), rider type, and up to two motorcycle names you select. We record your app version and the time you were last active.

Location

While a ride is active, the App collects your precise location in the foreground (latitude, longitude, altitude where available, speed, heading, and accuracy) at an adaptive interval, about every 5 seconds while moving and less often when slow or stopped. Location is collected only during an active ride, using a foreground service with a persistent notification. During a group ride, your live position, speed, heading, name, and photo are shared in real time with the other members of that ride. We do not sell your location and do not share it with advertisers.

Rides

We store ride records such as start and destination, route line, distance, duration, average and maximum speed, and elevation change. Riding dynamics such as lean angle and crash detection are computed on your device.

Groups, safety, and social

Group membership and roles, ride check list items, RSVPs, SOS events (which include your location and any optional message, shared with your ride group), and community stops you drop with their location and any note.

Device and technical

We store a push notification token for your device to send ride invites and alerts. We collect diagnostics and crash data through Firebase Crashlytics, with identifiers hashed before being attached to reports, and basic analytics through Firebase Analytics.

Payments

The App does not collect, see, or store your card, UPI, or bank credentials. Payments are handled inside the payment provider secure checkout. We store only transaction references, your plan, its status, and the current period end.

Camera

The camera is used only to scan a QR code to join a ride. Frames are processed on your device and no image is uploaded.

To create and manage your account, provide live location sharing, group awareness, and navigation, record rides and show history, stats, and leaderboards, deliver safety features such as SOS and crash prompts, send notifications you opt into, process subscription payments, and diagnose and fix problems. We rely on your consent and on the necessity of processing to provide the service you request.

We share personal data with other riders in your ride (live location, presence, SOS, and pins during that ride), and with service providers who process data on our behalf: Supabase (database, authentication, realtime, storage, and server functions), Google (Google Sign In; Maps, Navigation, and Places; Firebase Crashlytics, Analytics, and Cloud Messaging), and our payment provider. We also disclose data where required by law. We do not sell your personal data.

Our backend is hosted on Supabase in the Asia Pacific (Sydney, Australia) region, so your personal data is processed and stored on servers located outside India. We rely on this transfer as permitted under the India Digital Personal Data Protection Act 2023, which allows transfer to countries other than those the Government of India may restrict. Google and the payment provider process data on their own global infrastructure under their respective privacy policies.

GPS breadcrumb samples for a completed ride are deleted about 30 days after the ride ends. Account and profile data, ride history summaries, groups, and subscription records are kept while your account is active and deleted when you delete your account. Diagnostic and crash data held by Firebase is retained according to Google retention, typically around 90 days for crash data.

You can view and edit your profile in the App, and delete your account from within the App. Deleting your account removes your profile, rides, ride history, location samples, SOS events, group memberships, community stops, device tokens, and subscription records from our systems, and deletes your login. Data held by third party processors such as Firebase and the payment provider is removed under their own retention schedules. You can grant or revoke location, camera, and notification permissions at any time in your device settings. Under the India Digital Personal Data Protection Act 2023 you also have the right to access, correct, and erase your data, to nominate another person to exercise your rights, and to grievance redressal.

The App is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We use reasonable technical and organisational measures to protect your data, including database level access controls so riders can only read data they are entitled to, and hashing of identifiers in diagnostic reports. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Location (including foreground service location) for live tracking and navigation during a ride, camera for scanning a QR code to join a ride, notifications for ride invites and alerts, and network permissions to communicate with our servers and keep tracking reliable.

We aim to comply with the India Digital Personal Data Protection Act 2023, the Information Technology Act 2000 and its Reasonable Security Practices rules, and Google Play User Data policy. Where users are in other regions, additional local laws may apply.

We may update this policy from time to time. We will post changes here with a new Last updated date, and for material changes we will notify you in the App.

For questions, requests, or complaints about your data, email support@ride-clan.com. Our Grievance Officer can be reached at the same address.