Privacy Policy
Effective 17 July 2026 · Last updated 17 July 2026
This policy explains what personal data the TourenUp mobile app and this website (touren.tech) collect, why, who processes it on our behalf, and the rights you have. TourenUp generates off-road motorcycle routes matched to your machine, the weather and your fuel, and helps you ride them safely — features that need some data about you and your location to work.
- We collect your email (to sign you in), your location (to build and navigate rides and keep you safe), your rides and saved trips, and the bike you add.
- We do not sell your data, and we run no advertising or third-party ad trackers.
- Your ride locations are used to provide the service and are never sold or shared for marketing. Your account data is hosted in the European Union.
- You can ask us to access or delete your data at any time: privacy@touren.tech.
1. Who we are
TourenUp (“we”, “us”) is the data controller for the personal data described here. TourenUp is operated by Denis Bondar as an individual developer. You can reach us about privacy at privacy@touren.tech.
2. Data we collect
Account & sign-in
- Email address. Onboarding requires an email. We send a one-time 6-digit code to confirm it; we store your email address and the time it was verified. There is no password.
- Display name (optional) — used to greet you in the app.
- Anonymous device identity. On first launch the app creates an anonymous account so the app works before you verify your email; once you verify, that identity is upgraded to your email account.
Location data
- We collect precise GPS location to: generate loops from where you are, navigate a ride turn-by-turn or in Blind Ride, record the track of a ride, cache maps so they work offline, detect when you drift off-route, and power safety features (fuel range, remaining daylight, hazard/crash alerts, and “get me home / to fuel” escapes).
- With your permission, location may be collected in the background while a ride is in progress, so the track and safety monitoring continue when the screen is off. You can revoke this in your device settings at any time.
- Your ride locations are used only to provide the service. We do not sell them and do not share them for advertising.
Rides & activity
- Recorded rides (route track, distance, moving time, elevation gain), the trips and trails you generate or save, and places you discover. Rides are recorded on your device first and synced to your account when you are online.
- We use aggregate ride data to improve time and route estimates for everyone (for example, how long a given terrain actually takes to ride).
Your machine
- The bike you add to your garage (make/model and specs such as weight class, tyres, ground clearance and fuel range). This describes a motorcycle, not you, and is used to tailor routes to it.
Voice & microphone (optional)
- If you use the in-ride co-rider’s push-to-talk, your speech is transcribed on your device. The audio does not leave your phone; only the transcribed text of your question, plus relevant ride context (such as remaining fuel range or distance), is sent to Google’s Gemini API to generate a spoken answer. The microphone is only active while you hold to talk.
Camera & photos (optional)
- If you capture a photo during a ride or save a recap video, the app uses your camera and/or saves to your photo library with your permission. We do not access your library otherwise.
Diagnostics & technical data
- Crash reports and error logs (via Sentry) to fix problems. Location coordinates are scrubbed from diagnostic reports before they are sent.
- Basic technical information needed to run the service (app version, device/OS type, and network requests to our backend).
3. How we use your data
- To provide the core service: generate routes, navigate, record rides, cache offline maps, and run the safety features.
- To sign you in and keep your account and garage available across devices.
- To improve route quality and the accuracy of time/dirt estimates.
- To answer your co-rider questions and produce shareable recaps you request.
- To respond to support requests, keep the service secure, prevent abuse, and comply with the law.
4. Legal bases (GDPR)
- Performance of a contract — providing the app you signed up for (account, routing, rides).
- Consent — device permissions you grant (precise/background location, microphone, camera, photo library). You can withdraw consent in your device settings.
- Legitimate interests — keeping the service secure, fixing crashes, and improving route/estimate quality, balanced against your rights.
- Legal obligation — where we must retain or disclose data to comply with the law.
5. Who processes your data
We share data only with service providers that help us run TourenUp, under agreements that limit them to processing it on our instructions. We do not sell personal data.
| Provider | Purpose |
|---|---|
| Convex | Backend database, accounts and authentication. Hosted in the European Union (eu-west-1). |
| SendGrid (Twilio) | Sending your one-time sign-in code by email. |
| MapTiler | Map tiles and terrain imagery. |
| Sentry | Crash and error diagnostics (with location scrubbed). |
| Google (Gemini API) | Generating answers to your in-ride co-rider questions from the transcribed text. |
| OpenStreetMap / Overpass / Nominatim | Looking up trails, place names and points of interest near a route area. |
| Our own routing servers | Calculating routes (self-hosted; not a third party for your data). |
| Apple App Store / Google Play | App distribution and updates. |
The app may also open external links you choose to follow (for example a lodging listing on Booking.com); those sites have their own privacy policies.
6. International transfers
Your account and ride data are stored in the European Union. Some providers above (for example email delivery and the AI co-rider) may process limited data outside the EU; where they do, that transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses.
7. How long we keep it
- Account data (email, name, garage) — for as long as your account exists.
- Rides and saved trips — kept as your history and to improve estimates, until you delete them or your account.
- Diagnostic logs — retained for a limited period, then deleted.
- When you ask us to delete your account, we delete or anonymise your personal data, except where we must keep something to meet a legal obligation.
8. Security
Sign-in tokens are stored in your device’s secure storage (iOS Keychain / Android Keystore) and never in plain app storage. Data is encrypted in transit (HTTPS/TLS) and hosted with a reputable EU provider.
9. Your rights
If you are in the EU/EEA (or a similar regime), you have the right to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent for device permissions at any time. To exercise any of these, email privacy@touren.tech. You also have the right to lodge a complaint with your local data protection authority.
10. Children
TourenUp is intended for licensed motorcycle riders and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the app evolves. We will change the “Last updated” date above and, for material changes, notify you in the app or by email. Continuing to use TourenUp after an update means you accept the revised policy.
12. Contact
Questions or requests: privacy@touren.tech.