Privacy Policy — Dirt Bike Buddy

Effective date: July 17, 2026

This Privacy Policy describes how AMTM Tech Inc ("Dirt Bike Buddy," "we," "us," or "our") collects, uses, retains, and discloses information when you use the Dirt Bike Buddy iOS application, the dirtbikebuddy.app website, and the live-share and invite web pages we host (together, the "Service").

Dirt Bike Buddy helps off-road riders find riding partners, record rides, and ride more safely. We do not sell your personal information, we do not use it for advertising, and we do not track you across other companies' apps or websites. We collect what the features below need, and nothing else.

If you do not agree with this policy, do not use the Service. Questions: privacy@dirtbikebuddy.app.

1. The most important thing: two kinds of location data

The Service handles your location in two ways with opposite retention rules. Understanding the difference tells you most of what this policy says:

1. Safety pings (ephemeral, automatic during rides). While you are on an active group ride or a solo session, your phone sends your position roughly every 5 minutes (less often on low battery) so your riding group — or, on solo rides, the "ride watchers" you chose — can check on you. Safety pings are permanently hard-deleted within 5 minutes of the ride or session ending. They are never archived, never analyzed, never used for any other purpose, and never written to application logs.

2. Recorded rides — "Tracks" (opt-in, yours to keep). If you press Record, your route, speed, distance, and elevation are saved to your ride history, like a fitness app. New Tracks are shared publicly by default so your riding shows up in feeds and monthly mileage leaderboards — and you are always shown the visibility setting (public, friends, or private) on the save screen before anything is shared. You can change any ride's visibility later, change your personal default in Settings (including private-by-default), and Tracks are kept until you delete them (one tap, any time, or all at once by deleting your account).

Nothing about your location is collected when you are not on an active ride, an active solo session, or an active recording. The app has no background location collection outside those states.

2. Information we collect

Information you provide:

• Account information: email address, display name, optional phone number, date of birth (used once for the 18-or-older age gate — we store the date, never a copy of an ID), riding skill level, vehicle type, and an optional profile photo. If you use Sign in with Apple, we receive your name and email (or Apple's private-relay address if you choose "Hide My Email") plus Apple's anonymous account identifier; we never see your Apple ID password.
• Waiver record: when you accept the in-app Liability Waiver & Release, we record your user ID, the waiver version, a timestamp, and the IP address you accepted from. This is a legal record of consent and is kept as long as your account exists.
• Verification photo (optional): a photo of your bike or helmet showing your ORV sticker. We run on-device/server text detection and blur all detected text — including your registration number — before anything is stored. The original, unblurred image is never written to disk or object storage.
• Ride watchers (emergency contacts, optional): a name and email address (optionally phone) for the people you want notified about your solo rides. See Section 5 — this is someone else's personal information, and we treat it accordingly.
• Content you create: rides you post, chat messages and ride updates, feed posts, kudos, ratings of other riders, and reports you submit.
• Support and correspondence: anything you send us by email.

Information collected automatically:

• Safety-ping location during active rides and solo sessions only, as described in Section 1.
• Recorded Tracks only while you are actively recording, as described in Section 1.
• Device push token (Apple Push Notification service token) so we can deliver notifications you have enabled.
• Battery level alongside safety pings (so your group can see "phone at 15%" and judge a silence correctly). Deleted with the pings.
• Server request logs: timestamps, request paths, response codes, IP address, and your user ID, used for security, rate limiting, and debugging. GPS coordinates are never written to logs. Logs rotate automatically and are not kept long-term.

What we deliberately do NOT collect: advertising identifiers, contacts from your address book, browsing history, analytics profiles, biometrics, precise location outside rides/recordings, or any data from other apps. The app contains no third-party advertising or analytics SDKs.

3. How we use information

• Ride matching: to show you nearby rides that fit your location radius, schedule, and vehicle type, and to recommend rides (for example, rides your friends joined or trails you have ridden).
• Safety features: the live group map, solo-session live share, overdue check-in alerts to your ride watchers, SOS broadcasts, and low-battery context.
• Your ride history: stats and history computed from Tracks you chose to save.
• Social features: friends, the feed, kudos, chat, and rider ratings.
• Trail information: showing official Michigan DNR trail data and weather forecasts for trailheads (see Section 6 for what third parties receive).
• Notifications you have enabled (matches, reminders, chat, safety alerts).
• Trust and safety: enforcing our Terms of Service, processing blocks and reports, preventing abuse, and rate limiting.
• Legal compliance and establishing, exercising, or defending legal claims (for example, waiver records).

We do not use your information for advertising, we do not build marketing profiles, and we do not sell or rent personal information to anyone.

4. When information is shared with other people

• Riders on a ride you join can see your display name, profile photo, skill level, rating, your chat messages on that ride, and — only during the active ride — your live position and battery level.
• Your ride watchers receive emails when you start a solo ride, when you are overdue, when you check in or finish, and if you press SOS. Those emails include your name, ride status, and a live-share link.
• Live-share links (dirtbikebuddy.app/s/…) let anyone holding the link see only you (never your group), only your safety-ping data, on a web page that stops working when your ride or session ends and the underlying data is deleted. Treat a share link like a key: anyone you give it to can follow your position until the ride ends. You can revoke the link by ending the session.
• Friends can see Tracks you set to "friends" visibility and posts you share to the feed. Private Tracks and invite-only rides are visible only to you and your invitees.
• Invite links you create (ride invites /i/…, buddy invites /f/…) show your display name to whoever opens them.
• Everyone on the Service can find your display name and public profile via rider search. Your email, phone, date of birth, and location are never public.

You can block any rider (you disappear from each other everywhere) and report any content or rider; reports go to our moderation queue.

5. Ride watchers: information about other people

When you add a ride watcher, you are giving us another person's name and contact information. You must have their permission first. We use watcher contact information only to send the safety notifications described above — never for marketing, and we never share or sell it. Every watcher email explains why they are receiving it and that Dirt Bike Buddy is not an emergency service. A watcher who wants their information removed can contact privacy@dirtbikebuddy.app and we will delete it.

6. Service providers (who processes data on our behalf)

We use a small number of infrastructure providers to run the Service. They process data under contract for us and are not permitted to use it for their own purposes:

| Provider | What they do | What they receive | |---|---|---| | Oracle Cloud Infrastructure (US-East, Ashburn, Virginia) | Hosting: servers, database, storage, email delivery | All Service data, encrypted in transit | | Apple (Push Notification service; Sign in with Apple) | Delivers notifications; optional sign-in | Your device token and notification content; sign-in identity attestation | | OpenWeatherMap | Weather forecasts for trailheads | Trailhead coordinates (not your personal location or identity) | | OpenStreetMap / USGS "The National Map" | Map tiles on web share pages and offline topo maps | Standard web requests (IP address, tile coordinates) from the viewing device |

We do not have "data partners," ad networks, or analytics vendors.

7. Retention

| Data | Kept | |---|---| | Safety pings (group + solo) | Hard-deleted within 5 minutes of ride/session end | | Live-share pages | Dead as soon as the ride/session ends | | Recorded Tracks | Until you delete them | | Account profile | Until you delete your account | | Ride watcher contacts | Until you remove them or delete your account | | Chat/feed content | Until you delete it or delete your account | | Waiver acceptance records | Life of the account (legal record of consent) | | Verification photos (blurred only) | Until replaced or account deletion | | Moderation reports | Retained for platform-safety recordkeeping, including after account deletion, as permitted by law | | Password-reset and verification codes | Minutes (single-use, short expiry) | | Server logs (no GPS ever) | Short-term, rotated automatically | | Encrypted database backups | Rolling 7 days, then automatically destroyed |

Deleted data may persist in encrypted backups for up to 7 days before the backup cycle destroys it; backups are never used to "un-delete" data except in disaster recovery.

8. Deleting your account

Settings → Delete my account permanently removes your profile, posts, recorded Tracks, friendships, ride watchers, messages, and ratings. Safety-ping GPS data is already gone (it was deleted when each ride ended). We retain only what the law allows or requires us to keep: waiver acceptance records and moderation reports.

9. Your rights and choices

• Access, correction, deletion: you can view and edit your profile in the app and delete your account entirely (Section 8). You can also email privacy@dirtbikebuddy.app to request a copy of your data, correction, or deletion.
• Notifications: every category can be turned off in Settings or in iOS Settings.
• Location permission: controlled by iOS. Without it, safety features and recording will not work, but you can still browse rides and trails.
• US state privacy rights: depending on your state (for example, California, Colorado, Virginia, Connecticut, Utah), you may have rights to access, delete, correct, or port your personal information and to opt out of "sales," "sharing," or targeted advertising. We do not sell or share personal information for advertising, and we do not use it for targeted advertising or profiling, so there is nothing to opt out of — the remaining rights are honored through the mechanisms above, without discrimination for exercising them.
• Do Not Track / Global Privacy Control: we do not track users across sites, so these signals are moot — the answer is already "no tracking."

We will respond to verified requests within the time required by applicable law. You may authorize an agent to act for you where the law provides for it.

10. Security

All traffic is encrypted in transit (TLS). Data is stored on access- controlled infrastructure in a private network; the database and cache are not reachable from the internet. Secrets are stored in a dedicated vault service. Passwords are stored only as salted bcrypt hashes. GPS data is excluded from logs by design. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

11. Children

Dirt Bike Buddy is for adults. You must be 18 or older; we enforce a date-of-birth gate at signup and do not knowingly collect information from anyone under 18. If we learn we have, we will delete it — contact privacy@dirtbikebuddy.app.

12. Where data is processed

The Service is operated from the United States. If you use it from outside the U.S., your information is transferred to and processed in the U.S., which may have different data-protection laws than your jurisdiction.

13. Changes to this policy

We will post changes here and update the effective date. For material changes we will notify you in the app or by email before they take effect. Continued use after the effective date constitutes acceptance.

14. Contact

AMTM Tech Inc privacy@dirtbikebuddy.app https://dirtbikebuddy.app

You can also reach the developer through the support address listed on the App Store.