Privacy Policy
NavRider — motorcycle navigation companion · Last updated: July 27, 2026
Information we collect
- Account: email address and display name (Google Sign-In or email/password), and account status.
- Location: GPS is used only while the app provides navigation, speed, or map features. Routing requests send start/end coordinates to our routing providers; continuous GPS positions are processed on your device in real time. Ride tracks are never stored on our servers — ride history lives locally on your phone and is deleted when you uninstall the app or clear its data. Screen-off navigation runs through an Android foreground service (the persistent notification during a ride) using the "While using the app" permission; location use stops when navigation ends.
- Device: your NavRider handlebar device's Bluetooth MAC address (to bind one device per account), its firmware version (for OTA updates), and a last-seen timestamp.
- Analytics & crash data (optional): anonymous usage events, crash reports, and performance traces via Firebase. No precise location is included in analytics events. Turn it off any time: Settings → Share anonymous analytics & crash reports.
How we use it
- Authentication and account management.
- Calculating routes and turn-by-turn directions, and driving your NavRider device over Bluetooth.
- Delivering app and device firmware updates.
- Understanding usage and fixing bugs — only while the analytics toggle is on.
Third-party processors
- Google / Firebase — authentication, database, push notifications, analytics, crash reporting, remote configuration. Privacy
- Google Maps Platform — place search, geocoding, directions. Privacy
- Mapbox — map display and routing. Privacy
- Cloudflare — serves our map-tile service (requests carry your IP address, as any web request does). Privacy
- Open-Meteo — weather along your route (route sample coordinates only, requested through our servers). Terms
- Self-hosted routing (Valhalla) — operated by us on Oracle Cloud, Mumbai; processes route coordinates, stores no personal data.
Where your data lives
Our backend (Firebase) and routing server run in Mumbai, India. Crash reports and analytics are processed by Google and may be stored outside India, including in the United States. You can withdraw analytics consent at any time with the in-app toggle.
Storage and security
- Server-side data is stored in Google Cloud Firestore, encrypted at rest and in transit, protected by security rules.
- API keys on your phone use Android Keystore / iOS Keychain-backed encrypted storage.
- All network communication uses HTTPS/TLS.
Data retention
- Account data — kept while your account is active; removed by account deletion.
- Ride history — on your device only; you control it.
- Analytics — Firebase default retention (14 months).
- Rate-limit counters — short-lived operational counters, expired automatically.
Account deletion
Delete your account and all server-side data:
Deletion removes your profile (email, device binding, firmware history), notification records, and operational counters, and permanently deletes your sign-in account.
Your rights
Under India's DPDP Act (and, where applicable, GDPR) you may access, correct, and erase your personal data, and withdraw analytics consent at any time. Contact support@navrider.in; we respond within 30 days.
Children's privacy
The app is not intended for children under 13. We do not knowingly collect personal information from children.
Changes
We may update this policy from time to time. Changes are posted in the app and on this page. Continued use after changes constitutes acceptance.