Privacy Policy

Last Updated: April 2, 2026

        Quick Summary: ForgedRider collects GPS location data and photos to verify your motorcycle
        endurance rides and issue certifications. We use Stripe to process payments (we never see your card details).
        Your data is stored securely and never sold to third parties.
    

1. Introduction

ForgedRider ("we," "our," or "us") operates a mobile application that provides GPS-verified motorcycle endurance ride certification. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

By using ForgedRider, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Location Data (GPS Tracking)

What We Collect:

Precise GPS coordinates (latitude/longitude) during your rides
Timestamps for each GPS point
Speed and altitude data
Total distance traveled
Route paths and waypoints

Why We Collect It:

To verify and certify your motorcycle endurance rides
To calculate accurate distance traveled
To detect anomalies or invalid route data
To generate ride statistics and achievements

When We Collect It:

Only when you actively start a tracked ride within the App
Background location tracking continues while a ride is in progress
Location tracking stops when you end the ride
We do NOT track your location when the App is not actively tracking a ride

2.2 Photos and Media

What We Collect:

Photos you take as ride evidence
Photo metadata (timestamp, location if embedded)

Why We Collect It:

To provide additional verification of your rides
To create a visual record for your certifications
To detect fraudulent or invalid submissions

Your Control: Photos are required for ride verification. You are required to take a start and finish photo for basic certification.

2.3 Personal Information

What We Collect:

Name (for certification documents)
Email address (for account management, communication, and verification purposes)
Phone number (for account management, communication, and verification purposes)

Why We Collect It:

To create and manage your account
To personalize your certifications
To communicate important updates about your rides or account
To provide timely customer support

2.4 Motorcycle and Ride Information

What We Collect:

Motorcycle make, model, year (optional)
Ride dates and times
Ride names and descriptions
Challenge participation and completion data

2.5 Device Information

What We Collect:

Device type, operating system version
App version and settings
Crash reports and performance data
Unique device identifiers (for security and fraud prevention)

2.6 Payment Information

Important: We use Stripe as our payment processor. We do NOT store your credit card information.

What Stripe Collects:

Credit/debit card information
Billing address
Transaction history

What We Store:

Transaction confirmation IDs
Purchase history (what you bought, when, amount)
Payment status (successful/failed)

Stripe's privacy policy: https://stripe.com/privacy

3. How We Use Your Information

We use the collected information for the following purposes:

Ride Verification: To verify the authenticity and accuracy of your motorcycle rides
Certification Issuance: To generate and issue digital certifications
Service Delivery: To provide the core functionality of the App
Communication: To send you ride confirmations, certification updates, and important notices
Improvement: To analyze usage patterns, diagnose crashes, and improve the App
Fraud Prevention: To detect and prevent fraudulent ride submissions
Customer Support: To respond to your inquiries and provide assistance
Legal Compliance: To comply with applicable laws and regulations

4. Data Sharing and Disclosure

4.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Third-Party Services We Use

Firebase (Google): Cloud storage and database hosting

Stores: User profiles, ride data, GPS tracks, photos
Privacy policy: https://firebase.google.com/support/privacy

Stripe: Payment processing

Processes: All payment transactions
Privacy policy: https://stripe.com/privacy

4.3 Public Information

What May Be Public:

Your display name and name (as it appears on certifications, if you share them publicly)
Leaderboard rankings (if you opt-in to leaderboard participation)
Ride statistics of your certified rides

What Remains Private:

Your GPS tracks and detailed route information
Your email address and contact information
Your photos and ride evidence
Your payment information

4.4 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:

Comply with legal obligations
Protect our rights, property, or safety
Prevent fraud or security threats
Protect the rights and safety of our users

5. Data Security

We implement industry-standard security measures to protect your information:

Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
Firebase Security: Access controlled through Firebase security rules
Authentication: Secure Firebase Authentication for user accounts
Limited Access: Only authorized personnel can access user data
Regular Updates: We maintain up-to-date security patches and protocols

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

Active Accounts:

We retain your data as long as your account is active
Your ride history and certifications remain available indefinitely

Inactive Accounts:

Accounts inactive for 3+ years may be archived
You will receive notice before archival
Archived accounts can be reactivated upon request

Deleted Accounts:

If you delete your account, most data is removed within 30 days
Some data may be retained for legal/fraud prevention purposes (anonymized where possible)
Issued certifications remain in our system (with your name) for verification purposes

7. Your Rights and Choices

7.1 Access and Correction

View your personal information in the App's edit profile section
Update your name, email, or other details anytime
Request a copy of all your data by contacting us

7.2 Location Permissions

You can revoke location permissions in your device settings
Note: This will prevent ride tracking functionality
Previously collected GPS data remains for issued certifications

7.3 Marketing Communications

Opt-out of promotional emails via the unsubscribe link
You will still receive essential account and ride-related emails

7.4 Account Deletion

Request account deletion through Settings → Account → Delete Account
Or email us at info@forgedrider.com
Deletion takes effect within 30 days

7.5 Data Portability

Request an export of your data in a machine-readable format
Includes: ride history, GPS tracks, photos, certifications

8. Children's Privacy

ForgedRider is not intended for children under 16. We do not knowingly collect information from anyone under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@forgedrider.com, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country. By using ForgedRider, you consent to the transfer of information to countries that may have different data protection laws than your country of residence.

We use Firebase (Google Cloud), which maintains data centers globally. Data is primarily stored in: United States, Australia, and Europe (depending on your region).

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to Know: Request details about the personal information we collect
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
Right to Non-Discrimination: You will not be discriminated against for exercising your rights

To exercise these rights, email us at info@forgedrider.com

11. European Users (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation:

Legal Basis: We process your data based on:
- Contract performance (to provide the service)
- Legitimate interests (fraud prevention, service improvement)
- Your consent (for optional features)
Data Protection Officer: Contact info@forgedrider.com
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For material changes, we will notify you via:

In-app notification
Email to your registered address
Prominent notice in the App

Continued use of ForgedRider after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: info@forgedrider.com
Website: https://forgedrider.com

We will respond to all requests within 30 days.

14. Google Play Data Safety Disclosure

This section summarizes how ForgedRider's data collection is disclosed in the Google Play Store Data Safety section:

Data Collected:

✓ Location (Precise GPS - required for ride verification)
✓ Personal info (Name, email, phone - for account and certifications)
✓ Photos (Optional - for ride evidence)
✓ App activity (Ride history, achievements)

Data NOT Collected:

✗ Contacts, Calendar, Microphone, Music files
✗ Health or Fitness data
✗ Credit card details (handled by Stripe)

Data Usage:

✓ App functionality (ride tracking and certification)
✗ NOT used for advertising
✓ App diagnostics (crash reporting to improve app stability)
✗ NOT sold to third parties

Security Practices:

✓ Data encrypted in transit (HTTPS)
✓ Data encrypted at rest (Firebase)
✓ You can request data deletion