Rideband
EN

Privacy Policy

Last updated: 23 October 2026

This is a translation. The Italian version (Informativa sulla privacy) prevails in case of differences.

Rideband is designed to collect nothing. It has no servers, no accounts, no analytics and no advertising: what you do with the app stays on your phone or goes only to the friends you ride with. This policy explains in detail what is handled, where and why.

Who we are

Rideband is developed by Gabriele Ruiz, an individual developer in Italy, who is the data controller for the little that reaches him (only e-mails you choose to send).

Contact: gabrieleruiz.dev@gmail.com

What we collect

Nothing. The developer receives no data from the app: no identifiers, no usage statistics, no crash reports, no location. Rideband contains no third-party SDKs for analytics, advertising or crash reporting.

What stays on your phone

  • Your display name, shown to the friends you ride with.
  • Paired friends: their names and public keys, to recognise them and protect you from impostors.
  • Your identity key, kept in the phone’s secure storage (Android Keystore / iOS Keychain) and never exported.
  • Group codes and names, encrypted on the phone.
  • Ride routes: GPS track, times, speed, altitude and the names of the friends you rode with, excluded from backups.
  • The ride log (signal quality, distance, battery), to help you check range and quality.
  • Purchase status and the number of free rides used.

All of this stays on your phone until you delete it, delete the app, or choose to share it.

What leaves your phone, and to whom

  • Voice, name and position travel only to the friend or the group you ride with, directly between phones and end-to-end encrypted. In a group, the voice passes through the other members’ phones, still encrypted. Voice is never recorded or stored.
  • Map tiles: when you open a ride, the map background is downloaded from Apple Maps (iPhone) or OpenFreeMap (openfreemap.org, OpenStreetMap data; Android). Like any website, they receive your IP address and the map area shown, not your route, which is drawn on the phone.
  • Purchases are handled by Apple (App Store) or Google (Google Play) under their own privacy policies. Rideband only checks the signed receipt on your phone.
  • Android only: the number of free rides used (a single number) is kept by Google Play services Block Store on your phone, so the free rides don’t restart after reinstalling. Rideband does not upload it to the cloud.
  • Files you export yourself (GPX routes, ride logs) go wherever you send them.

Camera, microphone, location and other permissions

  • Microphone: to talk. Audio is processed live and never stored.
  • Camera (optional): only to scan a group’s QR code. Images are processed on the phone and never saved. You can type the code instead.
  • Location: distance to your friends and your ride routes, only during a ride.
  • Nearby devices / Wi-Fi Aware and Bluetooth: to reach your friends’ phones and your helmet intercom.
  • Notifications: to show that a ride is active.

You can revoke any permission in the system settings.

Legal bases

Data handled on your phone is used only to provide the features you ask for (Art. 6(1)(b) GDPR). If you write to us, we use your e-mail address and message only to reply (Art. 6(1)(b) and (f) GDPR).

How long data is kept

Data on your phone is kept until you delete it or delete the app. Removing the app deletes everything Rideband stores, except the number of free rides already used, which the phone keeps so the trial does not restart. E-mails you send us are kept for as long as needed to answer, and at most 12 months.

Security

Conversations are protected with modern end-to-end encryption (X25519, ChaCha20-Poly1305) on top of the encryption of the Wi-Fi Aware link. Keys are created on your phone and never leave it. Each friend has a safety code you can compare in person.

Children

Rideband is not directed to children under 14.

Your rights

Under the GDPR you have the right to access, rectify, erase and port your data, to restrict or object to processing, and to lodge a complaint with a supervisory authority (in Italy: Garante per la protezione dei dati personali, garanteprivacy.it). Since we hold no data about you, the data on your phone is fully under your control: you can delete it at any time from the app or by removing it. For anything else, write to gabrieleruiz.dev@gmail.com.

Changes

If this policy changes, the new version is published on this page with a new date. Significant changes are also announced in the app’s release notes.