Effective date: 11 November 2026
MotoMoto ("MotoMoto," "we," "us") operates the MotoMoto website at motomotoapp.com (the "Service"), which helps riders discover, share, save and plan motorcycle routes. This policy explains what personal data we collect, why, where it is stored, who can see it, and what rights you have over it.
It applies to everyone who uses the Service, including visitors who browse public routes without an account.
MotoMoto is operated by Roy Sidi, Israel. For any question about this policy or your data, contact us at hello@motomotoapp.com.
We have not appointed a Data Protection Officer. We will appoint one if the law requires it.
Account information. Your email address and password. Passwords are handled by our authentication provider; we never see or store your password in readable form.
Profile information. Your display name, photo, bio, hometown, country and the bikes you list. These are public: anyone using the Service can see them, including people without an account.
Preferences. Your unit system (metric or imperial) and notification settings. These are private to you.
Content you create. Routes (name, location, description, ratings, photos, and the route's coordinates, including its starting point), reviews, saved places, saved routes, trip plans and lists. Public routes, their photos and reviews are visible to everyone, including visitors without an account. Anything you keep private is visible only to you.
If you upload a GPS track to a public route, the track is public too, and other users can view and download it. A track often starts and ends near where you live, so consider trimming it before you upload.
Location data. Only what you choose to enter or upload: route coordinates, GPS tracks and saved places. We do not track your device's location. Photos can contain location data added by your camera or phone; we remove it when you upload a photo.
Bike records. If you use the bike garage feature, you can store records such as service history, notes, costs and currency. These are private, are never public, and are never shown to other users or on your profile. We do not accept document uploads (such as vehicle registration or insurance).
Social activity. Who you follow, who follows you, and which routes you like. Follows and like counts are visible to other users. We also generate notifications (for example, when someone likes your route), which only you can see.
Technical data. Our hosting provider receives standard technical data from every visit (IP address, browser and device type) in its server logs. We record basic events, such as sign-ins, to keep the Service reliable and secure, and we see aggregate visitor statistics (page views, countries, devices). We do not use advertising or cross-site tracking.
We do not process payments or store any card or bank details. If we add paid features, payments will be handled by a dedicated payment processor, and we will update this policy first.
You are not legally required to give us any personal data. Your email address is needed to create an account, and without it you can only browse public content. Everything else is optional.
| Purpose | Legal basis |
|---|---|
| Creating and running your account | Performing our agreement with you |
| Showing public routes, profiles and reviews | Performing our agreement with you |
| Storing your saved places, trips and bike records | Performing our agreement with you |
| Sending account emails (sign-up confirmation, password reset) | Performing our agreement with you |
| Sending notifications you opted into | Consent |
| Keeping the Service secure and preventing abuse | Legitimate interest |
| Fixing problems and improving the Service | Legitimate interest |
| Promoting the Service, for example by featuring public routes | Legitimate interest |
| Keeping backups so data can be recovered after a failure | Legitimate interest |
| Complying with the law | Legal obligation |
You can withdraw consent (for example, for notifications) at any time in your settings.
We do not sell your personal data, and we do not share it with advertisers.
We use these service providers, who process data only on our behalf:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | EU (Frankfurt, Germany) |
| Resend | Sends account emails, so it receives your email address | EU (Ireland) |
| Lovable (with Cloudflare) | Hosts the website on a global network and is the platform we build it on; has access to the database to build and maintain the Service | Global (served from the location nearest you) |
| GitHub | Stores our source code and weekly database backups | United States |
| OpenStreetMap | Provides the map tiles and place search; your browser requests these directly, so OpenStreetMap receives your IP address | United Kingdom / EU |
| Anthropic (Claude) | AI assistant that helps us build, test and maintain the Service; it may read the database's structure and run security checks, but does not access users' personal data | United States |
Other users see only what you make public (profile, public routes, photos, reviews, follows). We disclose data to authorities only where the law requires it.
Your data is stored in the European Union (Frankfurt, Germany). The website itself is served from a global network, so the technical data from your visit (such as your IP address) is handled at the location nearest you. Weekly backups are stored with GitHub in the United States; transfers there rely on the EU-US Data Privacy Framework. Israel, where MotoMoto is operated, holds an EU adequacy decision, recognizing its data protection as equivalent to the EU's. For users in Israel, transfers outside Israel are made in line with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations.
We keep your data while your account is active. If you ask us to delete your account, we delete your personal data and private content (bike records, saved places, private routes, trips, preferences) within 30 days.
Two exceptions:
We may keep limited records longer where the law requires it.
Access to private data (bike records, saved places, trips, preferences) is restricted at the database level, so only your own account can read or change it, whatever the app's interface shows. We test these protections against attempts to access data across accounts.
No system is perfectly secure, and we cannot guarantee absolute security.
Depending on where you live, you have some or all of these rights:
To use any of these rights, including deleting your account, email hello@motomotoapp.com. We respond within 30 days.
The Service is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
We use your browser's local storage to keep you signed in and to make the Service load faster. Our hosting provider sets one functional cookie that makes sure you receive a consistent version of the site. None of these are used for advertising or tracking you across other sites.
We may update this policy as the Service changes. For material changes, we will notify you in the app or by email before they take effect. The effective date at the top always shows the latest version.
Questions, requests or concerns: hello@motomotoapp.com