Privacy Policy

Effective Date: September 17, 2026

  1. Introduction

Cornr (“we”, “our”, or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “App”) and our website at ridecornr.com (the “Website”).

By using the App, you agree to the collection and use of information in accordance with this policy.

⸻

  1. Information We Collect

A. Account Information

When you create or use an account, we collect: • Email address • Name information you provide (for example, first and last name or display name) • User ID and rider/profile identifiers • Authentication data needed to sign you in (processed via our authentication provider)

If you use social login:

Google Sign-In We receive account identity data such as email and profile details made available by Google and our authentication provider.

Sign in with Apple We receive Apple account identity data such as the Apple user identifier and, where available, email and name.

⸻

B. Ride and Location Data

When you record a ride, we collect: • Precise GPS location data • Ride route/track points (latitude/longitude with timestamps) • Ride metrics (such as speed, lean angle, pitch, acceleration/braking, and duration) • Ride metadata (for example weather conditions at ride start)

Background location. While a ride is being recorded, the App continues to collect location in the background — including when the screen is locked or another app is in front — so that the ride is captured in full. Background location is only collected during a ride you have started, and stops when you finish or discard the ride.

We use this data to: • Record and display ride history • Generate ride analytics and riding insights • Enable community features such as clubs and ride feeds • Match your rides to published routes, so that we can show how often a route has been ridden and ask you to rate roads you have ridden • Build aggregated road statistics (for example how many riders have used a stretch of road) that help us score and recommend routes. These statistics are combined across riders and do not identify you

Ride and location data remain stored until you delete the ride or delete your account.

⸻

C. Subscription and Purchase Information

If you subscribe to paid features, we process subscription-related data, including: • Subscription and entitlement status • Product/package information • Transaction and renewal status provided by the platform billing system • Subscription identifiers used to associate subscription status with your user account

Payments are processed by Apple App Store billing (iOS) or Google Play billing (Android).

We use RevenueCat to manage subscription entitlements.

Cornr does not receive or store full payment card details.

⸻

D. Device and Technical Information

We collect technical information required to operate and maintain the App, such as: • Device identifiers (non-advertising identifiers) • App version • Operating system and device model • Crash logs and performance diagnostics • Push notification tokens

This information is used strictly to: • Maintain app performance • Diagnose crashes and bugs • Improve reliability and functionality

Cornr does not use advertising identifiers such as Apple’s IDFA.

Cornr does not track users across apps or websites owned by other companies.

⸻

E. Analytics and Diagnostics

We collect limited analytics and diagnostic data to understand how the App is used and to improve stability and features.

Examples include: • Feature usage • Crash reports • Performance metrics

These analytics are used only for internal product improvement.

They are not used for advertising, profiling across other apps, or data brokerage purposes.

⸻

F. Push Notifications

If you enable notifications, we store your push notification token and platform to send service notifications such as: • Ride updates • Account notifications • Community activity alerts

•	Maintenance, tyre, and insurance renewal reminders

You can disable notifications at any time through your device settings, and choose which reminder types you receive in the App's notification settings.

⸻

G. Garage, Maintenance, and Insurance Information

If you add motorcycles or gear to your garage, we store what you enter, such as: • Motorcycle make, model, year, and odometer readings • Service, oil change, and tyre records (dates, distances, tyre brand and model) • Gear details (for example helmets, clothing, and intercoms, including purchase or expiry dates) • Insurance provider name and renewal date, if you choose to add them

We use this to track service intervals and send the reminders you have enabled. We do not share insurance details with insurers or brokers.

Service interval research. When a motorcycle model is not yet in our service interval catalogue, we use an AI service (Anthropic) to look up the manufacturer's published service schedule. Only the make, model, and model year are sent — no account, ride, or location data. If you set your own intervals, they may be counted, without your identity, toward a community consensus for that model.

⸻

H. Community Content

If you use community features, we store the content you choose to post, such as club posts, comments, likes, photos, event RSVPs, and routes you attach to events. Content posted in a club is visible to that club's members; content in a private club is visible only to its members. Routes uploaded to a club event remain private to that club.

If your profile is public, other riders can find you by name and see your profile, rides, and statistics. You can set your profile to private at any time.

⸻

I. Invite Links and Referrals

Riders can share personal invite links (ridecornr.com/r/…). When someone opens one of these links on the Website, we record: • The invite code and the time of the click • The referring page and any campaign parameters in the link • Browser family, operating system, and device type • Approximate location (country and region) derived from the request • A salted hash of the IP address, used to filter duplicate and automated clicks. We do not store the IP address itself

We also set two first-party cookies (cornr_ref and cornr_click) for up to 90 days, so that an account created later can be linked to the invite. On Android, the invite code may be passed to the App through the Google Play install referrer. If you create an account after using an invite link or entering an invite code, we record which rider or campaign invited you. The rider who invited you may see that their invite was accepted.

This information is used to measure invites and campaigns. It is not used for advertising and is not shared with advertising networks.

⸻

J. Website Analytics

The Website uses Google Analytics to measure visits and page usage in aggregate.

⸻

  1. How We Use Your Information

We use your information to: • Provide and operate the App • Authenticate users and manage accounts • Store and analyze ride data • Provide subscription and premium features • Improve reliability, performance, and usability • Send service notifications and account updates • Detect and prevent fraud, abuse, or security issues

Cornr does not sell personal information.

Cornr does not share personal information for advertising or cross-app tracking.

⸻

  1. Legal Basis (EEA / UK)

If you are located in the EEA or UK, we process personal data under applicable legal bases including: • Performance of a contract (providing the App services) • Legitimate interests (security, improvement, fraud prevention) • Consent (where required for location or notifications) • Compliance with legal obligations

⸻

  1. Data Sharing

We share information with service providers only as required to operate the App.

These providers include:

Supabase Authentication, database infrastructure, and storage.

RevenueCat Subscription and entitlement management.

Expo Notifications / Platform Push Services Delivery of push notifications.

Map Providers (Google Maps or Mapbox) Map rendering and navigation services.

Sentry Crash reporting and performance monitoring.

Google Firebase Analytics and Google Analytics App usage analytics and Website traffic measurement.

Anthropic AI lookup of manufacturer service schedules (motorcycle make, model, and year only).

Vercel Website hosting.

OpenStreetMap Source of road and speed-enforcement map data. No personal data is sent to OpenStreetMap.

Identity Providers (Google / Apple) Used only when you choose those login methods.

These providers process data only to provide services to Cornr and are contractually required to protect user information.

Cornr does not share data with advertising networks or data brokers.

⸻

  1. Data Retention

We retain personal data only as long as necessary to operate the App.

General retention practices include: • Account data retained while the account remains active • Ride data retained until deleted by the user • Account deletion removes associated user data from active systems. You can delete your account in the App (Profile → Account settings → Delete Account) or on the Website under Account settings • Invite link click records are retained for campaign measurement and contain no direct identifiers

Some limited data may temporarily remain in backup systems for: • Security • Fraud prevention • Legal compliance • Disaster recovery

⸻

  1. Data Security

We implement reasonable technical and organizational safeguards to protect personal information from unauthorized access, loss, misuse, or alteration.

However, no internet transmission or electronic storage method is completely secure.

⸻

  1. Your Rights

Depending on your jurisdiction, you may have the right to: • Access personal data we hold about you • Correct inaccurate information • Request deletion of your data • Restrict certain types of processing • Withdraw consent where applicable • Request data portability

To exercise these rights, contact us at:

contact@ridecornr.com

⸻

  1. Children’s Privacy

Cornr is not intended for children under 16 years of age (or the minimum age required in your jurisdiction).

We do not knowingly collect personal information from children below this age.

⸻

  1. International Transfers

Your information may be processed in countries outside your country of residence where our service providers operate.

Where required by law, we implement safeguards such as contractual protections for international data transfers.

⸻

  1. Changes to This Policy

We may update this Privacy Policy periodically.

Material changes may be communicated through the App or by other appropriate means.

⸻

  1. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: contact@ridecornr.com Location: Amsterdam, The Netherlands