Privacy Policy for Rydful

Introduction

Rydful ("we", "us", or "our") operates the Rydful mobile application (the "App"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our App.

By using Rydful, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the App.

Age Restriction

Rydful is intended for users aged 16 years and older. We do not knowingly collect personal information from children under 16. If you are under 16, please do not use this App or provide any personal information.

Information We Collect

1. Account Information

When you create an account or sign in to Rydful, we collect:

• Email address
• Display name
• Profile photo (if provided via Google Sign-In)
• Firebase Authentication UID (unique user identifier)
• Login timestamps
• Authentication provider information (e.g., Google, email/password)

2. Vehicle Information

To provide our core vehicle tracking services, we collect and store:

• Vehicle details: Type (motorcycle, car, bicycle, other), brand, model, year, name
• Odometer readings (mileage)
• Fuel consumption statistics: Average consumption, min/max values, sample counts
• Vehicle photos (optional, stored as base64-encoded images)
• Vehicle status: Active, archived, or pending deletion
• Vehicle sharing information: Shared user lists, invite codes, access roles, pending requests

3. Location Data

We collect precise location data for ride tracking and route analysis:

• GPS coordinates (latitude, longitude)
• Location timestamps
• Route data for completed rides
• Start and end addresses (derived through geocoding services)
• Background location tracking when rides are in progress

Purpose: Location data enables automatic ride tracking, distance calculation, route visualization, and mileage estimation.

Background Access: We collect location data in the background only when you have an active ride in progress. Background tracking stops automatically when the ride ends.

4. Event Data

We store detailed records of vehicle-related events:

• Ride events: Duration, distance, route locations, start/end addresses
• Fuel fill-up events: Fuel amount, price, price per unit, full tank indicator
• Maintenance events: Service type, costs, notes, timestamps
• Other events: Accidents, modifications, insurance, registration, odometer readings
• Event metadata: Timestamps, mileage at event time, confirmation status, notes, weather conditions (optional)
• Event associations: Links to vehicle and user IDs

5. Bluetooth Device Information

For automatic ride detection via Bluetooth we collect:

• Bluetooth device MAC addresses
• Device names
• Device association IDs
• Connection/disconnection timestamps
• Pairing status and grace periods
• Association with specific vehicles

6. Photos and Images

• Fuel receipt photos: When you use the AI-powered receipt scanning feature, we temporarily process photos of fuel receipts or pump displays to extract price and volume information
• Vehicle photos: Optional photos you attach to your vehicles

7. Analytics and Usage Data

We automatically collect:

• Screen views and navigation paths
• Feature usage patterns (e.g., ride started, ride ended, login events)
• App version and device information
• Session duration and frequency
• User interactions with app features

Note: There is no opt-out option for analytics collection. Analytics are essential for maintaining and improving the App.

8. Technical and Diagnostic Data

• Error logs and crash reports (via Sentry)
• Performance metrics
• Device information: OS version, device model, app version
• Network connectivity status

9. Recurrence and Reminder Data

• Scheduled maintenance reminders: Recurrence rules, notification preferences, due dates
• Reminder templates: Service intervals based on time or mileage

How We Use Your Information

Core Functionality

• Vehicle tracking: Monitor rides, calculate distances, track routes
• Mileage management: Track odometer readings, predict mileage based on fuel consumption and ride data
• Event logging: Record and manage fuel fill-ups, maintenance, repairs, and other vehicle events
• AI receipt scanning: Process fuel receipt images to automatically extract price and volume data using Firebase AI (Google Gemini)
• Multi-vehicle management: Support tracking multiple vehicles per user
• Vehicle sharing: Enable users to share vehicle access with others (editors, viewers)

Enhanced Features

• Automatic ride detection: Use Bluetooth connectivity to automatically start/stop ride tracking
• Fuel consumption analysis: Calculate and display consumption statistics
• Maintenance reminders: Send notifications for scheduled service based on mileage or time intervals
• Data import/export: Allow users to import/export their data in JSON and GPX formats
• Route visualization: Display ride routes on maps
• Analytics and insights: Provide statistics on rides, fuel consumption, and costs

Service Improvement

• App analytics: Understand how users interact with the App to improve features and user experience
• Error tracking: Identify and fix bugs, crashes, and performance issues
• Feature development: Prioritize new features based on usage patterns
• Performance optimization: Ensure the App runs efficiently on various devices

Account Management

• Authentication: Verify user identity and maintain secure access
• Account recovery: Enable password resets and account recovery
• Communication: Send important updates about the service (though we currently do not send marketing emails)

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on:

• Contract performance: Processing necessary to provide our services (ride tracking, mileage management, etc.)
• Legitimate interests: Analytics, error tracking, and service improvement, balanced against your privacy rights
• Consent: Where specifically requested, such as for background location access during rides

Third-Party Services and Data Sharing

Rydful integrates with the following third-party services that may collect, process, or store your data:

1. Firebase (Google)

• Services used: Authentication, Firestore (database), Analytics, Remote Config, App Check, AI (Gemini)
• Data shared: Account information, vehicle data, event data, location data, analytics data, fuel receipt images (for AI processing)
• Purpose: Backend infrastructure, user authentication, data storage, AI-powered receipt scanning, analytics
• Privacy Policy: https://firebase.google.com/support/privacy

2. Google Sign-In

• Data shared: Email, display name, profile photo, authentication tokens
• Purpose: Simplified user authentication
• Privacy Policy: https://policies.google.com/privacy

3. Sentry

• Data shared: Error logs, crash reports, device information, app version, stack traces
• Purpose: Error tracking and debugging
• Privacy Policy: https://sentry.io/privacy/

4. Google Maps / Geocoding Services

• Data shared: GPS coordinates
• Purpose: Reverse geocoding (converting coordinates to human-readable addresses)
• Privacy Policy: https://policies.google.com/privacy

5. OpenStreetMap Nominatim

• Data shared: GPS coordinates
• Purpose: Alternative geocoding service for address lookup
• Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

User-Initiated Sharing

When you share a vehicle with another user:

• Other users you explicitly add to your vehicle can view events, rides, and vehicle data according to their assigned role (owner, editor, or viewer)
• Shared access can be revoked at any time by the vehicle owner
• This is not third-party sharing but peer-to-peer sharing within the App

We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

AI-Powered Receipt Scanning

When you use the fuel receipt scanning feature:

1. Image capture: You take a photo of a fuel receipt or pump display.
2. Image processing: The image is resized and compressed locally on your device.
3. AI analysis: The processed image is sent to Firebase AI (Google Gemini) for analysis.
4. Data extraction: The AI extracts price and volume information from the image.
5. Image retention: We do not permanently store receipt images; they are processed temporarily and discarded after analysis.

Important: By using the receipt scanning feature, you acknowledge that receipt images are processed by Google's AI services. These images may contain personal information (e.g., location, timestamp, merchant information) that will be temporarily visible to the AI service.

Data Storage and Security

Storage Location

Your data is stored in:

• Cloud Firestore (Firebase) - Primary database for user accounts, vehicles, events, and shared data
• Local device storage - Cached data for offline functionality and temporary storage during active rides

Data Security

We implement security measures including:

• Firebase Security Rules: Restrict data access based on user authentication and ownership
• App Check: Verify that API requests come from legitimate app instances
• HTTPS/TLS encryption: All data transmitted between your device and our servers is encrypted
• Authentication: Secure user authentication via Firebase Auth
• Access controls: Users can only access their own data and data explicitly shared with them

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention policies:

• Active account data: Retained indefinitely while your account exists
• Event and ride data: Retained until you delete specific events or your entire account
• Location data: Stored as part of ride events; deleted when rides are deleted
• Cached local data: Cleared when you sign out or delete your account
• Analytics data: Retained according to Firebase Analytics policies (typically 2-14 months)
• Error logs: Retained in Sentry for debugging purposes (typically 90 days, configurable)

Your Rights and Choices

Data Access

You can view all your data within the App:

• Vehicle information in the Garage section
• Events and rides in the Events section
• Account information in the Profile/Settings section

Data Export

You can export your data at any time:

• JSON format: Complete event data export including all metadata
• GPX format: Ride events with GPS route data for use in other mapping applications
• Access export functionality via Settings → Import/Export

Data Correction

You can edit your data within the App:

• Update vehicle information, events, and rides at any time
• Modify mileage, prices, notes, and other event details
• Changes sync automatically to the cloud

Data Deletion

Partial Deletion

You can delete individual items:

• Delete specific events: Tap and hold an event to delete it
• Delete vehicles: Archive or delete vehicles from the Garage
• Remove shared access: Revoke access to shared vehicles at any time

Complete Account Deletion

You can delete your entire account and all associated data:

1. Go to Settings → Account
2. Tap "Delete Account"
3. Confirm your choice (you will be asked twice)
4. All your data will be permanently deleted, including:
   • Your account and profile information
   • All vehicles you own
   • All events and rides associated with your account
   • All recurrence rules and reminders
   • All local cached data
   • Your access to shared vehicles (you'll be removed from other users' shared vehicle lists)

Note: Account deletion is permanent and irreversible. Deleted data cannot be recovered.

Important: If you have shared a vehicle with other users, they will retain their own copy of events they created. Vehicle owners can remove shared users before account deletion if needed.

Right to Object (GDPR)

You have the right to object to certain data processing activities. However:

• Analytics data collection is mandatory and cannot be opted out
• Core functionality (ride tracking, mileage) requires associated data collection
• You can stop using the App at any time to cease data collection

Data Portability (GDPR)

You can export your data in structured, machine-readable formats (JSON, GPX) at any time.

Right to Rectification (GDPR)

You can correct inaccurate data through the App's editing features.

Right to Erasure (GDPR)

You can delete your data partially or completely as described in the Data Deletion section.

Complaints (GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority.

Children's Privacy

Rydful is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to delete such information from our systems.

Location Data and Permissions

Permissions Required

Rydful requires the following location permissions:

• Foreground location access: To track rides when the App is open
• Background location access: To continue tracking rides when the App is in the background or screen is locked

How Location is Used

• Location data is collected only during active rides
• Tracking automatically starts when connected to a paired Bluetooth device (if auto-tracking is enabled)
• Tracking can also be started manually
• Tracking stops automatically when the ride ends (Bluetooth disconnection or manual stop)
• Location data is used to calculate distance, visualize routes, and geocode start/end addresses

Disabling Location Tracking

You can control location access:

• Disable automatic ride tracking in Settings
• Revoke location permissions in your device settings (this will prevent ride tracking)
• Delete individual rides to remove associated location data

Bluetooth Permissions

Rydful uses Bluetooth to detect when you start and stop rides:

• Bluetooth pairing: You can associate a Bluetooth device (e.g., motorcycle audio system, car infotainment) with a vehicle
• Automatic ride detection: When your device connects/disconnects from the paired Bluetooth device, ride tracking starts/stops automatically
• Device information: We store the device MAC address, name, and connection status

Camera and Storage Permissions

• Camera access: Used for the AI receipt scanning feature (optional)
• Photo library access: To attach vehicle photos (optional)
• Storage access: To import/export data files

Notifications

Rydful may send notifications for:

• Maintenance reminders: Based on mileage or time intervals you configure
• Ride tracking status: When rides start or stop
• Sync notifications: When data syncs to the cloud

You can disable notifications in your device settings.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date at the top of this policy.

For significant changes, we may provide additional notice (e.g., in-app notification or email). Your continued use of the App after changes constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically.

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

We use Firebase services, which may store data in Google's data centers worldwide. Google implements appropriate safeguards to protect your data in accordance with applicable laws.

For EEA/UK users: Google participates in frameworks that ensure adequate data protection for international transfers.

Offline Functionality

Rydful is designed to work offline:

• Data is cached locally on your device
• Changes are queued and synced when you reconnect to the internet
• Offline data is subject to the same security measures and deletion policies

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• App: Settings → Help & Support → Contact Us