Privacy policy

Data we collect

• Account and profile details such as email, handle, display name, locale and motorcycle details you choose to add.
• Ride fixes, timestamps, accuracy, motion signals and derived route/territory results when you start recording.
• Privacy-zone centres and radii, which are never returned in list responses.
• Device, app-version, permission and push-token data needed to operate the app.
• Bounded product analytics and crash reports. These are configured to reject route coordinates, credentials and free-form ride errors.
• Content you submit, including an avatar, club activity, reports and support messages.

How we use data

We use data to authenticate you, record and process rides, assign territory, show your saved history, enforce integrity and safety rules, deliver settings and notifications, prevent abuse, provide exports and deletion, and diagnose reliability problems.

What other riders can see

Your handle, display name, avatar, territory and leaderboard results may be public. A route is shared only under your ride-visibility setting. Shared routes remove the first and last 300 metres and every configured privacy zone; non-owners receive hour-rounded ride times. Your live position, raw ride fixes and privacy-zone centres are not public.

Service providers

We use providers for hosting, authentication, email, push delivery, app distribution and privacy-filtered crash reporting. They receive only the data needed to provide that service. We may disclose data when legally required or to protect riders and the service. We do not sell personal data.

Support messages

When you use our support form, your email address and message are sent through our email provider to the support inbox so we can reply. The form does not save a message record in the application database. Email correspondence remains in the support mailbox; contact support to request access or deletion.

To limit spam, we keep hashed counters based on the submitted email address, connecting IP address and message. These expire within an hour and are removed in daily cleanup. Support form content is excluded from request-parameter logs and privacy-filtered error reports.

Website accounts and planned map advertising

Website sign-in uses your account email and a short-lived code. An encrypted, HttpOnly cookie keeps you signed in; it is not an advertising tracker. We store hashed sign-in challenges and hourly attempt counters to limit abuse, and remove expired records in daily cleanup. We record the version and time of terms acceptance after signup verification.

Company names, representative names and contact emails saved in Promotions are private account data. They are included in account exports. Account deletion removes dashboard access immediately; company records are removed with the account after the 30-day deletion period. You can request an export or deletion from the app, or contact support from your account email if you use only the website.

Business and event map points are planned, with no advertiser checkout available today. Private ride data will not be used to target these promotions or shared with advertisers. Before payments open, this policy will explain advertiser and billing data, the payment provider and the applicable retention and deletion rules.

Retention and deletion

• Raw ride fixes and raw tracks are removed after 90 days; the processed route remains until you delete the ride or account.
• Product analytics and notifications are retained for up to 90 days.
• Territory event history is retained for up to 24 months and is anonymised when an account is deleted.
• Deleting your account signs you out and releases territory immediately. Generated files and remaining account data are permanently purged after 30 days.

Your controls

Settings lets you change route visibility, add or remove privacy zones, request a private data export and delete your account. You can also revoke location access in system settings; background recording will then stop or fall back to foreground-only operation.

Age requirement

Kickstand is for adults aged 18 and older. We do not knowingly create accounts for children.