Ridebay privacy notice
Version: 2026-11-05
1. Who is responsible
Matera Capital Limited (company 17008036, Clarence Gate Gardens, London, NW1 6AL, United Kingdom) is the controller of the personal data Ridebay processes. Contact for privacy: contact@materacapital.com, or the form at ridebay-web.pages.dev/privacy-request.
2. The short version
You can use Ridebay without an account and without telling us who you are. Your phone's location stays on your phone: this version of Ridebay takes no reports, so nothing you do in the app is sent to us. We use no analytics, no advertising and no tracking, and we never sell data.
3. What we process, why, on what basis and for how long
| Data | Why | Lawful basis | How long |
|---|---|---|---|
| Your phone's location, on the phone | Nearest bays, and pausing the app while you ride | Not collected by us: it never leaves your phone for this | n/a |
| Which version of the terms you accepted, and when | To show you accepted them | Not collected by us: kept on your phone only | Until you delete the app's data |
| Only when Ridebay takes reports (it does not in this version): the location and accuracy sent with a report or a new bay | To check you were at the bay, and to fight false reports | Legitimate interests | The coordinates are deleted after 90 days; the contribution stays without them |
| Only when Ridebay takes reports: an anonymous contributor ID (Ridebay ID) and the version of the contribution terms you accepted | To link your contributions, apply limits, and let you delete them | Legitimate interests | Until you delete it; an ID that never sent anything is deleted after 30 days, and one unused for 24 months is deleted |
| Only when Ridebay takes reports: what you send, the reason, the details and any note | To correct the bay data | Legitimate interests; published in the open bay database without your ID | Factual bay changes are kept, without any link to you once your ID is deleted |
| Only when Ridebay takes reports: a hash of your network and of your IP address | To tell independent riders apart and to stop abuse | Legitimate interests | Network hash 60 days, IP hash 48 hours; their salts change monthly and daily |
| What you type in search | To find your destination | Not collected by us: sent from your phone to postcodes.io (full postcodes) or to Apple's or Google's geocoder (other text) | Not stored by us |
| Map tile requests (your IP address and the area of the map you view) | To show the base map | Not collected by us: sent from your phone to OpenFreeMap | Not stored by us |
| Your email address in a privacy request | To answer the request | Legal obligation | 30 days after the request is closed |
| Your email address and message when you write to support | To answer you | Legitimate interests | 12 months after the conversation ends |
Apple and Google are independent controllers for the crash and usage reports their consoles show us. We process no special-category data and no advertising identifiers.
4. Our legitimate interests, and your right to object
We rely on legitimate interests to keep the bay data accurate and to stop false reports, which needs to know that a report came from someone near the bay and that two reports came from different people. We keep this to what is necessary: the location is deleted after 90 days, the hashes after 48 hours and 60 days, and nothing identifies you by name. You can object at any time through the privacy request form; you can also delete your Ridebay ID in the app, which ends this processing.
5. Who else receives data
| Recipient | What | Role and safeguard |
|---|---|---|
| Supabase (London region) | Contributions, Ridebay IDs, privacy requests | Our processor, under its data processing addendum |
| Cloudflare (United States) | Hosts the bay data and this website; stores no personal data of yours | Our processor; transfers under the UK Extension to the EU–US Data Privacy Framework, with standard contractual clauses as a fallback |
| postcodes.io | A full postcode you search for, from your phone | A third party that receives it directly; not stored by us |
| Apple or Google geocoder | Other text you search for, from your phone | Third parties that receive it directly |
| OpenFreeMap | Map tile requests from your phone | A third party that serves the base map, with no cookies or identifiers |
| The navigation app you choose | The bay's location, when you tap Navigate | That app's own provider |
| The App Store or Google Play | Nothing from Ridebay: the app opens the store's own page when an update is needed | The store's own terms |
Expo builds the app and receives no personal data of riders.
6. Your rights
You can ask for access to your data, its correction, its erasure, restriction of its use, its portability, and you can object to its use. Delete your data at any time in Settings → Delete my data. For anything else, use the privacy request form at ridebay-web.pages.dev/privacy-request: because we do not know who you are, an access request needs a one-time code from Settings → Get a code for a data request. You can also write to contact@materacapital.com. We answer within one month.
You can complain to us through the same form (choose "complaint"); we acknowledge it within 30 days. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
7. No analytics, no advertising
Ridebay has no analytics, crash-reporting or advertising software. What it keeps on your phone is what the service needs: the bay data, the place search index, your settings, saved places and recent searches, and, if you have contributed, your Ridebay session in the phone's secure storage.
8. Location
Ridebay asks for location only to show the nearest bays and to pause while you ride. Your location stays on your phone. This version of Ridebay takes no reports; when it does, a report about a bay, a new bay or a correction will send the location with that contribution so we can check you were there, and answers to "Did you use the bay?" will not. You can use the app with location off by searching for a destination.
9. If you are under 18
You can use Ridebay at any age a scooter or motorcycle allows, from 16. We collect as little as we can from everyone: no account, no profile, no tracking, no advertising, and nothing that nudges you to share more. Ridebay takes no reports in this version; when it does, we keep the place you were for 90 days to check a report, and never your name. You can delete everything from Settings at any time.
10. Deleting your data
In the app: Settings → Delete my data. With a Ridebay ID, we delete it and unlink your contributions at once; the facts you reported stay in the bay data without any link to you. Without one, we hold nothing about you on our servers; the app clears its data on your phone. Without the app, use ridebay-web.pages.dev/delete.
11. Changes
We will show changes to this notice in the app before they take effect, and ask you to accept changed terms; the version date above changes.