Privacy & Cookie Policy

1. Who we are

RiderComms is operated by Evolution Media Marketing Ltd ("we", "us", "our"), a company registered in England and Wales. We are the data controller for personal data processed through the RiderComms app and website.

Contact for privacy matters: info@evolution-media.co.uk.

2. What this policy covers

This policy explains what personal data we collect when you use RiderComms, why we collect it, the lawful bases we rely on under the UK GDPR and EU GDPR, how long we keep it, who we share it with, and your rights. It also describes the cookies and similar technologies we use.

3. Personal data we collect

Account data: email address, display name, and authentication identifiers you create when you sign up or sign in.
Profile data: any additional information you choose to add to your profile.
Group & rideout data: groups you create or join, rideouts you organise or attend, invitations, and messages you post inside the app.
Location data: when you actively use in-app navigation or share your position during a rideout, your device provides GPS coordinates so routing and turn-by-turn guidance work. Location is used only while you use those features.
Voice data: audio you transmit on a rideout voice channel is streamed in real time to other channel participants. We do not record voice channels.
Technical data: IP address, device and browser information, and diagnostic logs needed to keep the service secure and reliable.
Analytics data: if you consent to analytics cookies, aggregated usage information about how you interact with the app.

4. Why we use your data and our lawful bases

To provide the service (accounts, groups, rideouts, voice, navigation) — performance of a contract with you.
To keep the service secure, prevent abuse and debug issues —legitimate interests in running a safe, working product.
To comply with legal obligations such as responding to lawful requests — legal obligation.
To measure and improve the product via analytics — consent, given through the cookie banner. You can withdraw it at any time.

5. Who we share data with

We do not sell personal data. We share it only with service providers who help us run RiderComms, under written agreements that limit their use to our instructions:

Hosting & backend: our cloud hosting and database provider processes account data, group and rideout content, and authentication tokens.
Mapping & routing: Google Maps and Valhalla routing services process the destinations and waypoints needed to render maps and calculate routes.
Voice infrastructure: real-time voice traffic is relayed by our voice/WebRTC provider so channel participants can hear each other.
Email delivery: transactional emails (sign-in, password reset, invitations) are sent through our email provider.

Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum and EU Standard Contractual Clauses.

6. How long we keep it

We keep account data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep records for legal, tax or dispute-resolution reasons. Diagnostic logs are kept for up to 90 days.

7. Your rights

Under the UK GDPR and EU GDPR you have the right to:

Access the personal data we hold about you.
Have inaccurate data corrected.
Have your data erased in certain circumstances.
Restrict or object to certain processing.
Data portability for data you provided to us.
Withdraw consent at any time where we rely on consent.
Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or your local EU supervisory authority.

To exercise any of these rights, email info@evolution-media.co.uk.

8. Security

We use industry-standard measures including encrypted transport (HTTPS), access controls, and row-level security on our database. No system is 100% secure, but we work to protect your data and will notify affected users of any breach as required by law.

9. Children

RiderComms is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

10. Cookie Policy

A cookie is a small text file stored on your device by your browser. We also use similar technologies such as localStorage. The categories we use:

Essential cookies (always on)

Needed to run RiderComms. These keep you signed in, protect against cross-site request forgery, and remember your cookie choices. Without them the service cannot function, so they do not require consent.

Supabase auth session — stored in localStorage under keys beginning with sb-. Purpose: keep you signed in. Lifetime: until you sign out or the session expires.
Cookie consent record — stored in localStorage under ridercomms.cookie-consent.v1. Purpose: remember which cookie categories you accepted. Lifetime: until you clear it.

Analytics cookies (consent required)

If you accept analytics in the banner, we set cookies or similar identifiers to measure how RiderComms is used in aggregate — for example which features are opened and where errors happen. We do not use these for advertising and we do not sell the data. If you do not consent, or you withdraw consent, no analytics cookies are set.

Marketing cookies

We do not use marketing or advertising cookies.

Managing your choices

You can change your choices at any time using the button below. You can also block or delete cookies in your browser settings; note that blocking essential cookies will stop the app from working.

11. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app or by email.

12. Contact

Evolution Media Marketing Ltd — info@evolution-media.co.uk.