The rest of this document is the detail.
AllRiderz ("we", "us") provides a free app connecting motorcyclists who need roadside help with nearby riders who have volunteered to help. This policy explains what we collect, why, and what you can do about it.
Contact: [privacy@allriderz.com] · AllRiderz, [ADDRESS]
You give us:
| Data | Why |
|---|---|
| Name, email, password | To create and secure your account |
| Profile photo (optional) | So a rider meeting you can recognise you |
| Phone number (optional) | Only if you choose to share it with a rider helping you |
| Your motorcycles — make, model, year, mileage, service history, photos | Your garage, and so a helper knows what they are coming to |
| Help requests — description, photos, what went wrong | So riders nearby can decide whether they can help |
| Messages to other riders | To deliver them |
| Helper preferences — what you are willing to help with, availability | To match you with relevant requests |
| Thank-you notes and help stories you publish | To show recognition in the app |
Collected automatically:
| Data | Why |
|---|---|
| Precise location (with your permission) | The core function — connecting riders who are physically near each other |
| Device push token | To notify you about nearby requests and replies |
| Device and app version, crash and error logs | To keep the app working |
| Basic usage events | To understand what is used and what is broken |
We do not collect: payment card details or financial account information (there are no payments in AllRiderz), government identifiers, health information, biometrics, contacts, photos beyond those you choose to upload, or continuous background location tracking of your rides.
Location is sensitive, so here is exactly how it works.
When you ask for help. Your precise location is attached to the request so nearby riders can find you. It is visible to riders who receive the request. When you mark the request resolved, withdraw it, or it expires, your precise location stops being shared and is no longer visible to other users.
When you are available to help. We store your approximate location so we can tell you about requests near you. Other users do not see it unless and until you respond to a request.
What we never do. We do not track your rides. We do not build a location history of your movements. We do not run background location collection when you are neither asking for nor offering help. We do not sell location data, and we do not share it with advertisers or data brokers.
Your control. Location permission is requested in-app and can be revoked at any time in your device settings. Without it, you can still use your garage and browse, but you cannot post a help request or be matched as a helper — the feature does not work without knowing where people are.
Under the CPRA, precise geolocation is sensitive personal information. We use it only for the purposes described here — connecting riders — which is a permitted use that does not require a "Limit the Use of My Sensitive Personal Information" link. We do not use it to infer characteristics about you.
Where the GDPR applies, our bases are performance of a contract (operating the service), legitimate interests (security, improvement), consent (location, notifications, marketing email), and legal obligation.
Other riders see: your name, profile photo, the bike involved, and what you wrote — when you post a help request or respond to one. They see your precise location only while a request is active. They see your phone number only if you choose to share it.
Publicly, in the app: only help stories you actively choose to publish, and your helper recognition count. You choose whether to publish; nothing is public by default.
Service providers who process data on our behalf, under contract, only for us:
| Provider | Role | Where |
|---|---|---|
| Supabase | Database, authentication, file storage | United States |
| Expo | Push notification delivery | United States |
| [Resend] | Transactional email | United States |
| Netlify | Website hosting and form handling | United States |
| [Analytics — TBD] | Usage and crash reporting | — |
We may disclose where required by law, valid legal process, or where we believe in good faith it is necessary to prevent serious harm.
In a business transfer, your information may transfer as an asset. If ownership changes materially, we will tell you before your data becomes subject to a different policy.
We do not sell or share your personal information as those terms are defined in the CCPA as amended by the CPRA, and we have not in the preceding twelve months. We do not sell the personal information of anyone, including anyone under 16.
Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to production data is limited to those who need it. Passwords are hashed, never stored in readable form.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you as required by law.
Wherever you are, you can: access your data, correct it, delete your account and data, export a copy, and withdraw permissions (location, notifications, marketing email).
Do it in the app under Account → Settings, or email [privacy@allriderz.com]. We respond within 45 days (extendable by another 45 where permitted).
California residents (CCPA/CPRA) additionally have the right to know what we collect, use, disclose and sell; to delete; to correct; to limit use of sensitive personal information; to opt out of sale or sharing (not applicable — we do neither); and not to be discriminated against for exercising these rights. You may use an authorised agent. We verify requests by matching them to the email on your account.
EEA/UK residents additionally have rights to restriction, objection, portability, and to complain to your supervisory authority.
AllRiderz is for adults, 18 and over. We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it. Contact us if you believe a minor has registered.
We are based in the United States and process data there. If you use AllRiderz from outside the US, you understand your data is transferred to and processed in the US, which may have different data protection laws. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
Our website honours Global Privacy Control signals where required. We do not track users across third-party sites, so Do Not Track signals do not change our behaviour.
This policy is versioned. For material changes — new categories of data, new purposes, new disclosure to third parties, or the introduction of payments — we will notify you in the app and by email and, where required, ask you to accept the change before continuing. Non-material changes take effect when posted with an updated date.
[privacy@allriderz.com] · AllRiderz, [ADDRESS] California residents may also submit requests by [METHOD — a second channel is required].