Privacy Policy

Who we are

Apex Rider (“Apex Rider”, “we”, “us”) is an offline-first motorcycle touring app for iOS and Android. This Privacy Policy explains what we collect, how we use it, and the choices you have. It applies to the Apex Rider apps, this website (apexrider.app) and related services.

Operator & data controller: Apex Rider is an app published by Qalab Hassnain Agha, an individual developer based in Pakistan. For any privacy question or request, contactsupport@apexrider.app.

Privacy at a glance

• You can ride without an account. Planning, navigation, recording, safety tools and your garage all work signed out.
• Your phone is the source of truth. Apex Rider is offline-first; core ride data lives on your device and only syncs to the cloud when you allow it.
• Live location is opt-in, time-boxed and revocable. You choose who sees you and for how long, and a privacy zone hides your home.
• We don't sell your data and don't use it for cross-app advertising or tracking.
• Sensitive data is encrypted in transit and at rest, and you can request deletion at any time.

Information we collect

We collect only what a feature needs. The table below maps each data type to why it is used and whether it leaves your device. It mirrors the categories in the Google Play Data safety form and the Apple App Privacy label.

On-device and ephemeral processing (for example, drawing your route on the map) is not transmitted to us.

How we use your data

We use the data above to: provide navigation, route planning and offline maps; record and replay rides; deliver weather and route-ahead alerts; power crash detection, SOS and live crew tracking; track maintenance and fuel economy; run the optional community layer; keep the app secure and stable; and, where you allow it, understand product usage to improve Apex Rider. We use each data type only for the purposes described here. We do not use an advertising identifier, show ads, or track you across other companies' apps and websites.

Legal basis (GDPR)

If you are in the EEA or the UK, we rely on the following legal bases under the GDPR:

• Consent — for location access, emergency contacts, and analytics/diagnostics. You can withdraw consent at any time in-app or in your OS settings.
• Performance of a contract — to provide your account, sync, and the features you ask for.
• Legitimate interests — to keep the service safe and secure, prevent abuse, and diagnose and fix problems, balanced against your rights.
• Legal obligation — where we must process data to comply with the law.

Location & live sharing

Location powers the core of the app — navigation, ride recording, route-ahead weather, and live crew tracking. We request location access only when a feature needs it and explain why in-app before asking.

Background location disclosure. Apex Rider collects location in the background — even when the app is closed or your screen is off — while you are actively recording a ride, navigating, or sharing live location with your crew, so your track keeps writing and your crew can see you. You can disable background location at any time in your device settings (some features will then stop working), and live sharing always ends when its timer expires or when you stop it.

• Foreground & background: background location is used only while you are actively recording a ride, navigating, or sharing live location with your crew — so the track keeps writing with the screen off. Background location can reduce battery life.
• Live sharing is opt-in, time-boxed and revocable. You choose who can see you and for how long, and you can stop at any time.
• Privacy zone: a privacy zone hides your home and start location from your tracks and from anyone you share with.
• Precise vs approximate: navigation and recording use precise location; you can limit accuracy in your OS settings, though some features then degrade.

Emergency contacts, crash detection & SOS

If you set up crash detection and SOS, you provide emergency contacts (name and phone). When you are signed in, these sync to our backend so they are available across your devices and at the moment an SOS is sent; they are stored securely and used only to send an SOS with your live location and to dial the correct local emergency number when an SOS is triggered, or when a crash is detected and you do not cancel the countdown. Crash detection itself reads motion and sensor data on your device; raw motion data is not uploaded.

Safety features are best-effort aids, not a guarantee. Crash detection and SOS depend on sensors, battery, and connectivity and may not work in every situation, including remote regions with no signal. They are not a replacement for emergency services or a satellite messenger. Always carry appropriate backup for remote travel.

Sharing & service providers

We do not sell your personal information. We share data only with the service providers (processors) below, and only as needed to run Apex Rider. None of them receive your data for advertising.

These providers are bound to protect your data to a standard at least equal to this policy. Community content you choose to post is visible to other riders. We may disclose information if required by law or to protect safety.

Tracking & advertising

Apex Rider is privacy-first. We do not use your data for cross-app advertising and do not share it with data brokers. We do not track you across other companies' apps and websites, and (on iOS) we do not request App Tracking Transparency permission for advertising. If this ever changes, we will update this policy and request your consent where required.

Data security

Sensitive data — including location history and emergency contacts — is encrypted in transit and at rest, with access controls limiting who can reach it. No method of transmission or storage is perfectly secure, but we work to protect your data and to notify you of incidents where required by law.

Retention & deletion

Data on your device stays until you delete it or uninstall the app. For data synced to your account, we keep each category only as long as needed:

• Account, profile and your content (rides, routes, posts, comments, chats, fuel/maintenance logs, emergency contacts) — kept until you delete your account, then removed via cascade.
• Live location — ephemeral; retained only for a short window during an active share, then purged.
• Firebase Analytics — per the configured user-data retention window (e.g. 14 months).
• Crashlytics / Sentry diagnostics — approximately 90 days.
• Supabase point-in-time backups — expire per our plan (e.g. ~7 days).

We may keep certain records longer where the law requires it. You can delete rides and content in-app, and you can request deletion of your account and associated data at any time — see Delete your account & data.

Your rights & choices

Depending on where you live (including under the GDPR and CCPA/CPRA), you may have the right to access, correct, export, or delete your data, to object to or restrict certain processing, and to withdraw consent. You can also revoke location sharing, limit location accuracy, and opt out of analytics in-app or your OS settings. To exercise any right, email support@apexrider.app; we will respond within the timeframes required by law and will not discriminate against you for exercising your rights. Under the CCPA/CPRA you have the right to know, delete, and opt out — and we do not sell or share your personal information. You may also lodge a complaint with your local supervisory authority.

Children's privacy

Apex Rider is intended for motorcyclists and is not directed to children, and is not in the Kids / Designed-for-Families category. You must be at least 16 years old in the EEA and the UK, and at least 13 years old elsewhere, to use Apex Rider. We do not knowingly collect personal information from anyone under the applicable minimum age. If you believe someone under that age has provided us data, contact us and we will delete it.

International transfers

Apex Rider is used by riders around the world, so your data may be processed in countries other than your own. Our primary backend (Supabase) is hosted in the ap-southeast-1 region, and some processors (such as Firebase and Sentry) operate in the United States and other regions. Where required for transfers out of the EEA/UK, we rely on appropriate safeguards such as the Standard Contractual Clauses (SCCs).

Changes to this policy

We may update this policy as the app evolves. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice in the app or by email. Continued use after an update means you accept the revised policy.

Contact us

Questions, requests or concerns? Email support@apexrider.app or visit our Support page. See also our Terms of Service.