This Privacy Policy describes how mcmastersai, llc ("we," "us," or "our") collects, uses, and protects your information when you use RideForgeApp, our motorcycle route generation and navigation application for iOS (the "App"). By downloading, accessing, or using the App, you agree to the practices described in this Privacy Policy.

We built RideForgeApp for riders, and we treat your data the way we'd want ours treated: collected only when it serves you, never sold, and protected with industry-standard safeguards. This policy explains exactly what we collect, why, and the choices you have.

1. Information We Collect

1.1 Information You Provide

When you create an account and use the App, you may provide the following information directly:

• Account information: When you register, we collect your email address and a password. If you sign in using Google or Apple, we receive your name and email address from that provider.
• Profile information: Your display name, riding style, experience level, and an optional avatar image.
• Motorcycle information: The make, model, year, and an optional nickname for each motorcycle you add to your garage.
• Riding preferences: Your preferred road types, roads to avoid, stop frequency, preferred fuel and rest stop brands, and your riding pain points (which we affectionately call "buzz kills"). These preferences are used solely to personalize the AI-generated routes we create for you.
• Home location: Your city, address, or GPS coordinates, which we use as a default starting point for route generation.
• Route prompts: The natural-language descriptions you write to tell the AI what kind of ride you want.
• Demo email: If you try a demo of the App, we collect an email address to limit each person to one demo.
• Feedback and communications: Any feedback, support requests, or other communications you send to us.

1.2 Information Collected Automatically

When you use the App, we automatically collect certain information:

• Device GPS location: With your permission, we access your device's GPS location. We initially request "When In Use" access. During active navigation, we request "Always" access so that turn-by-turn directions continue to work in the background while your screen is off. You can revoke location access at any time in your iOS Settings.
• Route usage data: We track the number of routes you generate each month in order to enforce the free-tier limit.
• Subscription status: We track whether you hold an active Pro subscription, which is managed through RevenueCat.

1.3 Information We Do NOT Collect

We want to be just as clear about what we don't collect:

• We do not collect ride telemetry, speed data, or continuous GPS logs beyond what is needed for active navigation.
• We do not access your contacts, photos, microphone, or camera.
• We do not engage in cross-app or cross-website tracking.
• We do not sell your data to advertisers or data brokers. We never have, and we never will.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Route generation: We combine your riding preferences, location, and route prompts and send them to our AI to generate custom motorcycle routes.
• Navigation: We use your real-time GPS location to provide turn-by-turn navigation.
• Weather: We send route coordinates to OpenWeatherMap to retrieve weather information for your ride.
• Account management: We use your information to authenticate you and to store your saved routes, motorcycles, and preferences.
• Subscription management: We send an anonymized identifier to RevenueCat to manage your subscription status.
• Usage enforcement: We track route generation to enforce the limit of three free routes per month.
• Crew and social features: We display your display name to members of your crew and use email addresses to send crew invitations.
• Service improvement: We analyze aggregated, anonymized data only in order to improve the App.

3. Third-Party Services

RideForgeApp relies on the following third-party services to operate. Each service has its own privacy policy governing how it handles data.

Supabase

Supabase provides our backend, authentication, and database infrastructure, hosted in the US East region. Read their policy at https://supabase.com/privacy.

Google Gemini AI

Google Gemini AI powers our route generation. Your prompts and preferences are processed server-side through our edge functions and are not sent directly from your device. Read their terms at https://ai.google.dev/gemini-api/terms.

Mapbox

Mapbox provides turn-by-turn navigation, voice guidance, and maps. Mapbox receives your GPS location during active navigation. Read their policy at https://www.mapbox.com/legal/privacy.

Google Directions API

The Google Directions API is used to validate routes and generate road-following polylines, processed server-side. Read their policy at https://policies.google.com/privacy.

RevenueCat

RevenueCat manages our subscriptions. It receives an anonymized user identifier along with purchase data from Apple. Read their policy at https://www.revenuecat.com/privacy.

OpenWeatherMap

OpenWeatherMap provides weather data. Route coordinates are sent server-side to retrieve forecasts. Read their policy at https://openweather.co.uk/privacy-policy.

Apple

Apple provides Apple Sign-In (which gives us your name and email, or a private relay email) and processes App Store payments. Read their policy at https://www.apple.com/legal/privacy/.

4. Data Storage and Security

Your data is stored on Supabase infrastructure located in the United States. We protect your data using the following measures:

• All data transmitted between the App and our servers is encrypted in transit using HTTPS.
• We use Row Level Security so that each user can access only their own data.
• All third-party API keys are stored server-side as encrypted environment variables and are never embedded in the client App.
• Passwords are hashed by Supabase Auth and are never stored in plaintext.

No method of transmission or storage is completely secure, but we work to protect your information using industry-standard safeguards.

5. Data Retention

We retain your information for as long as it is needed to provide the App:

• Active account information is retained while your account remains active.
• Saved routes are retained until you delete them.
• Demo emails are retained to prevent repeat use of the demo.
• When you delete your account, your profile, motorcycles, routes, preferences, usage data, and crew information are permanently deleted. Some anonymized aggregate data may remain.

6. Your Rights

6.1 Access and Portability

You can view your information within the App at any time. You may also request an export of your data by emailing us.

6.2 Correction

You can update your profile, preferences, motorcycles, and home location at any time within the App.

6.3 Deletion

You can delete your account in-app by going to Profile/Settings → Delete Account. You can also delete individual saved routes by swiping on them.

6.4 Location

You can revoke location access at any time in your iOS Settings. The App will still work for route generation and viewing saved routes, but navigation and auto-locate features will not function.

6.5 California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information. We do not sell your personal information.

6.6 European Users (GDPR)

If you are in the European Economic Area, you have the right to access, rectify, erase, and restrict the processing of your personal data, as well as the rights to data portability and to object to processing. Our legal bases for processing are your consent and our legitimate interests in operating and improving the App.

7. Children's Privacy

RideForgeApp is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected such information, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy here with a revised effective date. For material changes, we will notify you through the App or by email. Your continued use of the App after changes take effect constitutes your acceptance of the updated policy.

Mobile Information Sharing

We do not sell, rent, or share mobile phone numbers or SMS/text-messaging opt-in consent with any third parties or affiliates for their marketing or promotional purposes. Information collected to deliver Ride Guardian text messages is used solely to send the messages you or a RideForge user requested.

SMS / Text Messaging

If you opt in to receive SMS messages from RideForgeApp (for example, Ride Guardian safety alerts), your phone number and SMS opt-in consent are used solely to deliver those messages. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in consent and phone numbers collected for SMS purposes will not be shared with any third parties.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: