Privacy Policy

Data controller

[Full name / operator name] · Tax code [to be filled] · [address].

Data RIDER processes

• Account: name, @username, phone number, email, profile photo. Date of birth and gender, if you enter them, stay on your device.
• Location: GPS points while recording a trip; live location when you share with your group or friends; battery-saving location when you turn on Always-on discovery.
• Content: posts, photos (including GPS in photos), stories, messages, comments.
• Verification: a selfie and a reference photo (when you request the blue badge); tax or business number and sample links (when you request the orange badge).
• Safety: your emergency contact and any medical information you enter.
• Device: device model, app version, battery level when sharing with a group; push notification token (when you allow notifications); IP address and device at sign-in.
• Usage and errors: in-app usage events and crash reports, used to fix bugs and improve the service. After you delete your account this data is no longer linked to it.

Sensitive personal data

Location, face photos used for verification and medical information are sensitive personal data. RIDER processes them only with your separate consent for each item (granting a permission, turning on a feature or entering it yourself), and you can withdraw consent at any time in Settings.

Purposes

To run groups, maps, walkie-talkie, trip recording and the discovery map; to show content within the scope you choose; to verify accounts; to send SOS; to keep people safe, prevent fraud and comply with the law. RIDER does not sell personal data and does not use face photos for anything other than verification.

Advertising

RIDER does not currently show third-party ads and does not share personal data for advertising. In the future RIDER may show sponsored posts, groups and stories. If it does:

• RIDER will notify you in the app at least 7 days ahead and update this policy, naming the partners and the data involved.
• Personalised ads will run only with your separate consent. On iPhone this also means Apple’s “Allow tracking” prompt.
• RIDER will not use your face photos, medical information, emergency contact, message content or precise location for advertising, and does not sell personal data.
• People under 16 will not receive personalised ads.
• Sponsored content will be clearly labelled “Sponsored” or “Ad”.

Storage and retention

Data is stored on your device and on servers operated by RIDER at: [server location — in Vietnam / abroad, provider].

Data is kept until you delete your account, except what the law requires to be kept longer. Detailed GPS trails are deleted automatically on your device and on the server after 30 or 60 days as you choose in the app, except trips you have downloaded. Usage events are deleted after 90 days and sign-in sessions after 180 days. Verification photos are deleted once the review is complete. Server backups are replaced gradually over about 30 days.

Who we share data with

• Other users, according to your settings; your group and emergency contact when you press SOS or report an incident.
• Apple: location, search terms and destination when you search places or ask for directions (Apple Maps); the push token to deliver notifications (Apple Push Notification service).
• Photon (komoot, OpenStreetMap data): search terms and approximate location when you search for places, with your IP address. No name or account is attached.
• Open-Meteo: approximate coordinates ahead on your route to fetch the forecast.
• OpenStreetMap data servers (Overpass): an area of about 2 km around your position, with your IP address, when Ride Mode downloads speed limits beyond the data bundled in the app. No name or account is attached.
• Apple, Google: when you choose to sign in with their accounts.
• Infrastructure providers that process data on RIDER’s behalf under data-protection contracts.
• Competent state authorities when the law requires.

Servers of Apple, Google, Photon, Open-Meteo and Overpass may be located abroad; cross-border transfers follow the procedure set by law.

Your rights

You have the right to be informed, to consent, to access, correct, export and delete your data, to withdraw consent, to restrict processing, to object and to complain.

In the app: Settings › Privacy, Location sharing, Permissions & battery, Export trip data (GPX), Delete account. Send other requests to the contact below. RIDER replies within 2 working days and acts within: 10 days for access, correction or provision of data; 15 days for withdrawing consent, restriction or objection; 20 days for deletion. Where a third party processes the data, the limits are 15, 20 and 30 days respectively. If an extension is needed, RIDER tells you why. How to delete your account: Help center.

Children

RIDER is not for people under 16 registering on their own. A child’s data is processed only with the consent of a parent or guardian and is never used for personalised advertising.

This website

The website shows no ads and uses no cookies. Your browser stores only a small flag so the loading screen is not replayed within a session, plus your language and theme choice. The server itself counts views by page, referrer and language; your IP address is used only briefly to count daily visitors and is not stored. If your browser has “Do Not Track” on, no statistics are sent. What you send through the contact form is stored so we can reply and is visible only to the administrator.

Security

RIDER applies appropriate technical and organisational measures: encrypted connections, hashed passwords, expiring sessions and role-based access. If an incident affects personal data, RIDER notifies the competent authority and the people affected as the law requires, within 72 hours of discovery.

Data protection contact

Email: [data protection email] · [address]. You may also complain to the authority in charge of personal data protection (Ministry of Public Security).