Privacy Policy

1. WHO WE ARE

Epic Ride (the app and epicride.ai) is provided by Prasanna Ganesh V, Morges, Switzerland, who is responsible for your data. Contact: founder@epicride.ai. We comply with the Swiss Federal Act on Data Protection and, where they apply to you, the EU GDPR and India's Digital Personal Data Protection Act, 2023. Grievance Officer (India): Prasanna Ganesh V, founder@epicride.ai; we respond within 30 days.

2. WHAT WE COLLECT

• Account: your email (you sign in with a one-time code) and any profile, riding preferences, motorcycles and saved places you add.
• Rides: the routes you plan or the app suggests, and, while you navigate, your GPS location (also when the phone is locked) and the route you actually rode.
• Health (optional): only if you connect Oura or Apple Health, daily readiness, sleep and heart-rate metrics. We store them alongside your rides for your ride history and for de-identified statistics. We never write to Apple Health.
• App and device: a push token for reminders and weather alerts, crash reports, usage analytics (which screens and features you use, linked to your account), and records of which Terms and Privacy Policy you accepted. The app does not record your screen.
• Website: privacy-friendly analytics of which pages are visited, without cookies or recordings.
• Launch list (optional): if you ask on the website to be told when Epic Ride is available, your email address, used only to send that message and deleted once it has been sent.
• Pass reports (optional): if you report that a mountain pass is open or closed, your report, any note you add, the time, and whether you were near the pass. Your phone works that out; we don't store your position for this.

3. WHY

To provide and improve the Services, including AI-assisted and personalised features, to keep accounts secure and to meet legal duties. Where the GDPR applies, our bases are our contract with you, your consent, our legitimate interests and legal obligations.

4. WHO RECEIVES IT

Trusted service providers, each receiving only what its task needs:

• Hosting and infrastructure providers, which run our servers and store your account data.
• Mapping, navigation and weather providers, which receive locations and route coordinates.
• Our AI service provider, Google Gemini (paid service: Google doesn't use this data to improve its products), which receives a feature's inputs, such as your route and ride details, and a summary of your readiness metrics if you connected a wearable.
• Analytics and crash-reporting providers (EU).
• Email and notification providers, for sign-in codes, notifications and app updates.
• Oura and Apple Health if you connect them, and Apple or Google for distribution through the App Store or Google Play.

Ask us for the current list of providers. We disclose data otherwise only when the law requires it or to protect people's safety, and to a successor running the Services, which we'll tell you about first.

5. WHERE

Our providers process data in Switzerland, the EU/EEA, the United States and India. For the United States and India we rely on the Standard Contractual Clauses or, for certified US providers, the Swiss-US Data Privacy Framework.

6. HOW LONG

Your account data, routes and rides are kept until you delete them or your account; completed rides can only be deleted with your account. Health data is deleted when you disconnect the wearable. Pass reports are deleted after 90 days. Crash and analytics data follow our providers' retention periods. De-identified statistics may be kept. We keep some records, such as security logs, for as long as the law requires.

7. YOUR CHOICES AND RIGHTS

Export or delete your data in Account › Your Data. To delete your account without the app, email founder@epicride.ai from your sign-in address and we'll delete it within 30 days. Usage analytics, crash reports and wearables are optional: switch them on or off in the app at any time, as easily as you turned them on, and the app still works. You may access, correct or erase your data, and nominate someone to act for you if you die or cannot act; email founder@epicride.ai and we reply within 30 days. If you're not satisfied, you may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), the Data Protection Board of India, or your local authority. The Services are for adults (18+); if we learn a user is under 18, we delete the account.

8. SECURITY AND CHANGES

Data is encrypted in transit and wearable tokens are encrypted at rest; no system is perfectly secure. If a breach puts you at risk, we'll notify the authorities and you as the law requires. If we change this policy materially, the app will ask you to accept the new version.