RUTT
PL EN

PRIVACY POLICY

Privacy Policy

Last updated: July 27, 2026

1. Who controls your data

The controller of personal data related to the RUTT app and website is G42 Sp. z o.o., Krośnieńska 5/12, 35-505 Rzeszów, Poland.

For privacy and personal data matters, you can contact us at support@rutt.app.

2. What data we may collect

Depending on how you use RUTT, we may process:

  • account data such as your email address and login credentials,
  • profile data such as your name, rider number, or preferences,
  • historical waitlist data if you submitted it before the app became available,
  • information about motorcycles, hour meter usage, service history, and activity related to parts and tires,
  • precise or approximate location recorded only during a ride you start, including the route, distance, time, and related GPS parameters,
  • motion-sensor signals used during an active ride to distinguish real movement from GPS drift; these samples are processed on the device and are not sent to our servers,
  • product activity in the app, such as clicked categories, products, cart actions, partner handoffs, map usage, and riding venues,
  • privacy preferences and marketing consents, including the history of granting or withdrawing them,
  • the content of messages sent to support,
  • technical diagnostics and logs needed for security, stability, and service maintenance.

3. Why and on what legal basis we use data

  • to create and maintain your account and provide app features, including garage, service, parts, tire recommendations, and ride recording and storage, based on contract performance or steps taken before entering into a contract,
  • to provide support, respond to requests, and contact you about the service, based on our legitimate interests or steps taken before entering into a contract,
  • to handle historical waitlist submissions and notify you that the app is available, based on your earlier request or our legitimate product communication,
  • to secure the service, prevent abuse, and diagnose bugs or technical issues, based on our legitimate interests,
  • to measure feature usage, improve app behavior, and develop the product, including through events linked to an account or app installation, based on our legitimate interests,
  • to comply with legal obligations, including accounting, tax, and claims-related duties, based on applicable law,
  • to send email or push marketing and personalize that communication based on app activity only when you grant the relevant consent for the channel or personalization.

4. Is providing data mandatory

Providing data needed to create and operate an account is voluntary, but required to use app features that depend on an account, saved garage data, service history, or support handling. Without it, we may not be able to create an account, maintain a session, associate data with a user, or respond to a request.

Location and motion access is optional. Without it, you can use other RUTT features, but ride recording or an accurate route will not be available.

5. Data sharing

Data may be entrusted to providers that help us operate the service, only to the extent necessary for it to function. At the moment, this includes infrastructure and hosting providers such as Supabase and Vercel, Microsoft as our mailbox provider, Mailgun (Sinch) as our transactional email delivery provider, and Meta App Events for install and selected conversion measurement after you grant Apple's App Tracking Transparency permission. Meta measurement can use a device advertising identifier and selected app-interaction data; it does not receive your name, email, RUTT account token, or service notes from us. If you deny permission, Apple may still provide Meta with privacy-preserving aggregate install attribution without an advertising identifier. If we launch marketing delivery tools, we will use them only as needed to handle selected consents and opt-outs. We do not sell personal data.

When a ride is saved, its filtered route and metrics are synchronized with Supabase infrastructure and linked to your account. The complete raw GPS point stream used for quality diagnostics remains only on your device.

The use of Python or an internal code repository does not by itself create a separate category of data recipient. Data would only reach an external repository or developer tool if it were actually copied or reported there.

6. Transfers outside the EEA

As a rule, user data stored in the app remains in our database. Under the current setup, we do not intend to transfer your personal data outside the European Economic Area. If such a transfer becomes necessary in the future, we will implement an appropriate legal basis and required safeguards.

7. Retention periods

  • account and app-operational data are stored for as long as the account exists and, after deletion, for the period needed to settle the service, establish or defend claims, and meet legal obligations,
  • saved rides and their filtered routes are stored while the account exists or until removed through available app functionality; the local raw GPS trace remains on the device until the account or app is deleted,
  • support requests and correspondence are generally stored for up to 24 months after the case is closed unless a longer period is needed to establish, pursue, or defend claims,
  • historical waitlist data is stored until we notify you that the app is available, you ask to be removed, or for up to 24 months after signup,
  • technical security and maintenance logs for the website or app are generally stored for up to 90 days unless longer retention is necessary to analyze an incident or meet a legal obligation.
  • marketing consent history and suppression records are kept for as long as needed to prove the contact basis or respect objections and opt-outs.

8. Your rights

You may request access to your data, rectification, deletion, restriction of processing, data portability, and objection where applicable under data protection law. If processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. You can withdraw marketing consents in the app profile or through an unsubscribe link in a marketing message if such communication is launched.

You can change location and motion permissions at any time in iOS Settings. Revoking permission does not remove rides already saved; you can remove them together with your account.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office if you believe your data is processed unlawfully.

9. Account deletion

The app includes a self-serve account deletion feature, and this is the fastest way to submit such a request. Account deletion also clears linked local data, including raw GPS traces. If you cannot use it, contact us at support@rutt.app.

11. Automated decisions and profiling

We do not make automated decisions that produce legal effects or similarly significant effects for you. If you consent to marketing personalization, we may use information such as motorcycle, MTH, cart, clicked products, service, and riding-venue activity to adapt marketing communication. You can withdraw that consent at any time.

12. Minors

The app may also be used by minors. If, under applicable law, parental or guardian consent is required to use the service or provide data, we expect that consent to be obtained before using the app.

13. Contact

For privacy matters, contact us at support@rutt.app or via the support center.

If external services, the scope of data, or the way the app is used changes, this policy should be updated accordingly.