Privacy Policy

Last updated: July 16, 2026 · Effective immediately

RiderOS ("we", "our", "us") is a motorcycle group riding application available on Android. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the RiderOS mobile application ("App") and related services.

1. Information We Collect

Data Category	Specific Data	Purpose
Location Data	Real-time GPS coordinates (latitude, longitude, altitude, speed, bearing)	Ride tracking, turn-by-turn navigation, group visibility, route recording
Motion Sensors	Accelerometer and gyroscope readings	Crash detection, automatic SOS alerts, lean angle tracking
Profile Information	Name, email address, profile avatar	Account identification, group member visibility
Ride History	Routes taken, duration, distance, timestamps, lean angle data	Personal ride history, statistics, route sharing
Payment Information	Transaction status and plan selection (processed by Razorpay; card/UPI details are never stored by RiderOS)	Subscription management
Device Information	Device model, OS version, app version	Debugging, compatibility, crash reporting

2. How We Use Your Information

• Ride Tracking & Navigation: GPS data powers real-time turn-by-turn navigation and records your ride history.
• Group Rides: Location is shared with co-riders in your active group ride session so members can see each other on the map in real time.
• Crash Detection & SOS: Accelerometer and gyroscope data is analysed on-device to detect sudden impacts. If a crash is detected, an automatic SOS alert with your last known location is sent to your designated emergency contacts.
• Lean Angle Tracking: Motion sensor data is used to calculate motorcycle lean angles during rides, stored as part of ride history for your personal review.
• Route Sharing: You may choose to share completed ride routes with other users or the community.
• Subscription Management: We record payment transaction identifiers (from Razorpay) to activate and manage your premium subscription.

3. Data Storage & Security

• All data is stored on Supabase cloud infrastructure (PostgreSQL), hosted on AWS data centres.
• Data is encrypted at rest (AES-256) and encrypted in transit (TLS 1.2+).
• Access to production databases is restricted to authorised personnel only.
• We use row-level security (RLS) policies to ensure users can only access their own data.

4. Data Sharing & Third Parties

• Co-riders during active rides: Your real-time location is visible to members of your active group ride session only. This sharing stops automatically when you end the ride.
• Emergency contacts: In the event of a detected crash, your last known location is shared with your designated emergency contacts via SMS/notification.
• Razorpay: Payment processing is handled by Razorpay. Their use of your payment data is governed by Razorpay's Privacy Policy.
• We do not sell your personal data to any third party, ever.
• We do not share data with advertisers or data brokers.

5. Data Retention

Data Type	Retention Period
Real-time location samples (raw GPS points during rides)	Automatically purged after 90 days
Ride history (routes, statistics, lean angle summaries)	Retained until you delete your account or individual rides
Profile information	Retained until you delete your account
Payment transaction records	Retained for 7 years (legal/tax compliance under Indian law)

6. Your Rights & Choices

• Access: You can view all your data within the App (profile, ride history, subscription status).
• Correction: Edit your profile information at any time via in-app settings.
• Deletion: You can delete your entire account and all associated data from the in-app settings. Account deletion is permanent and irreversible, completed within 72 hours.
• Data Export: You may request a copy of your data by contacting us at the email below.
• Withdraw Consent: You may revoke location or sensor permissions from your device settings at any time, though this will limit app functionality.

7. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, erase, restrict processing, and port your personal data.
• Right to object to processing based on legitimate interests.
• Right to lodge a complaint with your local Data Protection Authority.

Legal basis for processing: Contract performance (providing the ride-tracking service you signed up for), legitimate interest (crash detection for rider safety), and consent (location sharing with co-riders, which you initiate by starting/joining a group ride).

8. India Information Technology Act Compliance

We comply with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as well as the Digital Personal Data Protection Act, 2023 (DPDPA):

• We collect only such personal data as is necessary for the purposes stated in this policy.
• We implement reasonable security practices, including encryption and access controls.
• Sensitive personal data (location, biometric-adjacent sensor data) is collected only with your explicit consent.
• You may withdraw consent at any time by disabling permissions or deleting your account.
• A designated Grievance Officer can be reached at the contact details below.

9. Children's Privacy

RiderOS is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will promptly delete their account and associated data. If you believe a minor has provided us with personal information, please contact us immediately.

10. Permissions Required

• Location (foreground & background): Required for ride tracking, navigation, and group visibility during rides.
• Body Sensors / Motion: Required for crash detection and lean angle tracking.
• Internet: Required for real-time sync, navigation, and account features.
• Notifications: Used for crash alerts, ride invitations, and group updates.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted within the App and on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy. For material changes, we will notify you via in-app notification or email.

12. Contact Us