This policy covers the WildRides Android application and the wildrides.app website (together, "WildRides"), published by SC Wild Trails SRL.
WildRides is a motorcycle route planner, navigator and ride recorder. It prefers gravel and forest tracks to tarmac, guides you along them turn by turn, and records the ride afterwards. To do that job it handles location data and, if you create an account, basic account data. This policy explains exactly what is collected, why, where it goes, and how to remove it.
WildRides is not a local-only app. Doing its job needs servers: routes are calculated remotely, rides are stored in your account, and a ride can be shared live with people who are not on your phone.
Account. Creating an account requires an email address, a display name and a password. Passwords are stored only as salted hashes. Signing in with Google shares your Google account email, name and profile picture with us instead of a password. The profile picture becomes your avatar and is shown to other riders next to anything you make public.
Profile. You may optionally add a bio, motorcycle model, city and country. All optional, all editable, all removable.
Content. Rides you save, routes you plan, reviews and photos you post on public rides, and ride names and descriptions are stored on our servers so they can appear in your library and, where you make them public, to other riders.
Reports and blocks. If you report a ride, review or comment, we store what you reported, the reason you chose, any note you added, and that it was you who reported it, so a person can read it and act on it. If you block another rider, we store the pair so we can keep their content out of your lists. The rider you block is not told.
Purchases. If you subscribe to WildRides Pro we keep your plan, where you bought it (the website, Google Play or the App Store), its start, renewal and expiry dates, and a record of each billing event. We never see or store card numbers.
Planning. When you plan a route, the coordinates of your start, stops and destination are sent to our routing server to calculate the route. Your current position is used to center the map and seed the route start.
Navigation and recording. While you navigate or record a ride, WildRides reads your precise GPS position continuously, including with the screen off during an active session (a visible notification is always shown). The recorded track is stored on your device and uploaded to your account only when you choose Save.
Group rides. If you join a group ride, your live position is shared with the other members of that group for the duration of the session.
Live tracking. If you start live tracking, your position is visible at a private web link until you stop sharing. Anyone with the link can view it; share it deliberately.
WildRides does not collect your location in the background outside of a navigation, recording, group-ride or live-tracking session you started, and the app does not request the Android background-location permission.
On iPhone, WildRides asks for location only while the app is in use. It keeps receiving location in the background only during a navigation, recording, live-sharing or group-ride session you started, and iOS shows its location indicator while it does.
Diagnostics. The app keeps a local navigation log (route coordinates, timing and error traces) and uploads it, with your phone's manufacturer, model and Android version, to our server logs to diagnose navigation defects. It is not shared with anyone else.
Ride details. A ride you save also uploads, stored with that ride: each GPS fix's time, position, accuracy, speed and heading, the navigation events of that ride, the app version and the phone model. This is used to diagnose recording and navigation problems, is never shown to other users, and is deleted with the ride.
Push token. If notifications are enabled, a Firebase Cloud Messaging device token is stored so the app can receive invitations and group-ride messages. It is removed when you sign out.
Website usage log. On the wildrides.app website we keep our own record of what is done on the site: the page, the action (for example calculating a route, saving a ride, exporting a GPX file, or creating an account), the time, whether it succeeded and how long it took, and the identifier of the ride or account it related to. We keep it to see whether the site actually works for the people who use it, on the basis of our legitimate interest in operating and improving it (GDPR Article 6(1)(f)). It sets no cookie and stores nothing on your device.
If you are signed in, entries are linked to your account and are deleted when your account is deleted. If you are not signed in, each entry carries a pseudonymous key derived from your network address and browser type together with a secret that we replace every day and do not keep, so entries from a day that has ended cannot be linked to you, or to any other day's, even by us. The one exception is deliberate and worth being plain about: if you create an account or sign in, the entries from that same day are linked to your account from then on, which is how we can see what you were trying to do before you signed up. Those entries are deleted with your account like the rest.
We do not put your network address, your full browser identification, anything you type into a search box, or the coordinates of your routes into this log. Entries are deleted after 180 days. Separately, our web server keeps ordinary access logs containing network address, page requested and browser identification, used only for security and abuse prevention and overwritten on a rolling basis within roughly three months.
Approximate location. Our content delivery network (Cloudflare) derives a country and an approximate city from your IP address on each request to wildrides.app. We use it only to show routes near you and to open the map near you. The two-letter country code is kept in the website usage log described above; the city and the coordinates are not stored. You can type a place instead, or share your exact position from the browser; those coordinates are then sent to our server only to find nearby routes and are not stored either.
The WildRides Android app contains no advertising SDKs and no third-party analytics SDKs. To sell the optional WildRides Pro subscription, the Android app includes the RevenueCat SDK, which receives your account id and your Google Play purchase tokens and reports the subscription status back to us. RevenueCat acts as our processor (https://www.revenuecat.com/privacy). The wildrides.app website uses Google Analytics, loaded with all storage denied, setting no cookies unless you accept them in the banner on your first visit. We do not sell or rent any personal data. We do not share personal data with third parties for their own purposes.
Location (precise, while in use): routing, navigation, recording, group rides, live tracking. The core of the app.
Notifications: ride invitations, group-ride events, and the persistent notification Android requires during recording and navigation.
Foreground service (location): keeps GPS running with the screen off during an active ride session. Always accompanied by a visible notification.
Photos (via the system picker): only when you attach photos to a review. WildRides never scans your gallery; the system picker hands over only the images you select.
Network: routing, map tiles, sync.
Routing, place search, weather and ride and account data are served from our own servers. When our own place search has no answer, our server asks the public geocoders listed below on your behalf. To render maps, overlays and photos, the app also loads content directly from the third-party providers below. These requests transmit your device IP address and what is being loaded (the map area, as tile coordinates, or the photo you opened) to that provider, which is inherent to loading it. They do not receive your account, and we do not send them your saved rides. The exception is the optional WildRides Pro subscription: Google Play Billing, RevenueCat and, for purchases on the website, Stripe receive what is listed against them below.
Google sign-in (optional): authentication, and the profile pictures of riders who signed in with Google, which the app loads from Google's servers.
Wikimedia Commons: photos of points of interest, fetched only when you open a point of interest that has one.
Firebase Cloud Messaging (Google): push notifications. Google's privacy policy applies: https://policies.google.com/privacy
Google Play Billing (Google): takes the payment for WildRides Pro and issues the purchase token; the app never sees your payment details. Google's privacy policy applies: https://policies.google.com/privacy
RevenueCat (RevenueCat, Inc., USA): keeps track of subscriptions bought on the website, in Google Play and in the App Store. It receives your WildRides account id (a random identifier, not your name or email), the store's purchase data (the plan you bought, its price, dates and renewal state, and the store's transaction identifiers) and the usual connection details, such as your IP address and the app or browser version. For a purchase on the website it also receives the email address you enter at checkout, which it uses to send your receipts and for the page where you manage the subscription. Its privacy policy: https://www.revenuecat.com/privacy
Stripe (website purchases only): takes the card payment on the checkout page and receives the details you enter there, such as your name, email, card and billing country. Card numbers never reach WildRides. Its privacy policy: https://stripe.com/privacy
OpenFreeMap: the street basemap tiles, fonts and icons.
Esri / ArcGIS Online: satellite imagery (only when you switch to the satellite layer).
OpenTopoMap: topographic tiles (only when you switch to the terrain layer).
RainViewer (website only): rain-radar tiles (only when you turn on the rain overlay).
Open-Meteo: weather forecasts. Coordinates are relayed through our own server, so Open-Meteo receives our server's request, not your device's.
Komoot Photon and OpenStreetMap Foundation Nominatim: place search and address lookup, only when our own search has no answer. Our server sends them the search text with an approximate area (about 1 km, so nearby places rank first), or the coordinates of a point you dropped on the map. They receive our server's request, not your device's, and no account data.
Map data © OpenStreetMap contributors.
We do not sell or rent any personal data, and we do not share it with any third party for their own purposes.
Data is stored on servers operated for SC Wild Trails SRL in the European Union. All traffic between the app and the servers uses TLS (HTTPS). Sessions use signed tokens that expire after 7 days.
You can delete any ride, review or photo in the app at any time; deletion is immediate and permanent.
You can close your whole account from inside the app (Profile, then Close account), from the web page at https://wildrides.app/delete-account, or by emailing contact@wildtrails.world from the account's email address.
Closing an account signs you out everywhere and takes your public rides down immediately. Everything else is held for 30 days so the closure can be undone by simply signing in again; after that it is deleted automatically and cannot be recovered. Deletion requests made by email are completed within 30 days.
Your WildRides Pro subscription status is deleted with your account. The record of each subscription payment event, refunds included, is kept after the account is closed for as long as tax and accounting law requires, and is then deleted. Refunds for a subscription bought through Google Play follow Google Play's refund policy; for one bought on the website, write to contact@wildrides.app.
Under the GDPR you also have the right to access, correct and export your data. Write to contact@wildtrails.world.
Uninstalling the app removes all local data (offline maps, cached rides, session) from the device. If Android backup is turned on for your Google account, Android may keep a copy of the app's data (such as settings and rides not yet uploaded) in that backup until it expires or you delete it. Sign-in tokens are never included.
WildRides is not directed at children and is intended for riders 18 or older. We do not knowingly collect data from children.
If this policy changes, the "Last updated" date changes with it, and material changes are announced in the app and in its release notes on Google Play.
SC Wild Trails SRL contact@wildtrails.world