Social Ride
EspañolEnglish

Privacy Policy — Social Ride

Last updated: July 20, 2026

This policy describes how Social Ride ("the app", "we") collects, uses and protects the personal data of its users ("you", "the user").

1. Data controller

Social Ride. For any inquiry about your data you can write to us at support@socialride.net.

2. Data we collect

2.1 Data you provide

  • Email, username, name, profile picture and bio.
  • Garage vehicles (make, model, year, power, etc.).
  • Photos and videos you upload (stories, meetup photos, view-once "single-look" messages). Videos include audio recorded with the microphone.
  • Messages you send in private or group chats.

2.2 Data generated when using the app

  • GPS location during route recording (latitude, longitude, speed, altitude, timestamp). Collected only while you have an active recording, an ongoing navigation, or have consented to share your live location. In those situations location is also collected in the background, so we can keep recording your route or guiding you with the screen off; this is what justifies the "always" location permission. Outside those situations we do not access your location.
  • Derived metrics: distance, duration, top and average speed, consumption, completed segments, KOR (King of the Road).
  • Reactions, comments, likes and story views.

2.3 Technical data

  • Device identifier (for session and push notifications).
  • Operating-system version, device model.
  • Anonymized crash reports (via Firebase Crashlytics, with no personal content).

3. Legal basis for processing

  • Contract performance: we need your account and your data to provide the service (Art. 6.1.b GDPR).
  • Consent: location, push notifications, camera, microphone, gallery (revocable at any time from the system settings).
  • Legitimate interest: abuse detection and content moderation.

4. Who we share your data with

  • Supabase (database and authentication provider, hosted in the EU). Privacy: https://supabase.com/privacy
  • MapTiler / OpenFreeMap (map tiles and geocoding). Privacy: https://www.maptiler.com/privacy-policy/
  • Stadia Maps (Valhalla route calculation). Privacy: https://stadiamaps.com/privacy/
  • OpenStreetMap contributors (road data, speed limits and fixed cameras — ODbL license).
  • Firebase (Google): Crashlytics (crash reports) and Cloud Messaging (push notifications, including the device token). Privacy: https://policies.google.com/privacy
  • Meta / Facebook: we use the Facebook SDK solely to let you share your stories to Instagram and Facebook. Privacy: https://www.facebook.com/privacy/policy/
  • Apple / Google (premium in-app purchases).

We do not sell your data to third parties for commercial purposes.

5. Your rights

Under GDPR you have the right to:

  • Access: request a copy of all your data.
  • Rectification: correct inaccurate data.
  • Erasure ("right to be forgotten"): you can delete your account from Profile → Privacy and security → Delete account. Deletion is permanent and irreversible.
  • Portability: ask us for your data in a machine-readable format.
  • Objection and restriction of processing.

To exercise any of these rights, write to us at support@socialride.net.

6. Retention

  • Account data: while the account is active.
  • Driving sessions (routes): until you delete them yourself or delete the account.
  • View-once messages: deleted as soon as the recipient views them.
  • Meetup chats: 12 hours after the event.
  • Error logs: 90 days.

7. Minors

Social Ride is not directed at children under 18. If we detect an account belonging to a minor, we will suspend it.

8. Security

  • TLS 1.2+ on all client–server traffic.
  • RLS (Row Level Security) enabled on every Supabase table.
  • Passwords hashed with bcrypt + checked against HaveIBeenPwned (when the Pro plan is enabled).
  • No local plain-text password storage.

9. International transfers

Data is stored in the EU region. If in the future we engage sub-processors outside the EEA, we will notify you and rely on Standard Contractual Clauses (SCCs) from the European Commission.

10. Changes to this policy

We will notify you in-app when we make material changes. The date at the top of this document always reflects the latest version.