At a Glance

Your name Used to identify you in a ride group
Your location Used to find nearby rides. Not tracked continuously.
Your voice Transmitted live to your group. Never recorded or stored.
No ads. No tracking. Your data is never sold or shared for advertising.
01

Who We Are

RidePack is a real-time group audio communication app for cyclists, available on iPhone and Apple Watch. This Privacy Policy explains how we collect, use, and protect your information when you use the RidePack app ("App").

By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

02

What We Collect and Why

We collect the minimum amount of information necessary to provide the App's core functionality. Here is exactly what we collect, why, and how long we keep it.

Data Why We Collect It Stored? Retention
Display name Shown to other riders in your group so they know who is speaking Yes Until you delete your account
User ID Identifies your account across sessions and devices (Firebase UID, linked to your Apple ID) Yes Until you delete your account
Precise location Used at the moment you create a ride to make the group discoverable by nearby riders. Not tracked continuously. Yes Deleted when the ride ends
Voice audio Transmitted in real time to other members of your active ride group via LiveKit infrastructure and local Bluetooth/Wi-Fi No Not stored — live transmission only
Ride membership Records which ride group you joined, your role (owner or member), and your mute status during the ride Yes Deleted when the ride ends
Your voice is never recorded. Audio is transmitted live between riders and immediately discarded. We do not have access to recordings of your conversations.
03

Sign In with Apple

RidePack uses Sign In with Apple as its only authentication method. We do not offer username/password sign-in or other social logins.

When you sign in for the first time, Apple provides us with your display name (if you choose to share it). On subsequent sign-ins, Apple does not re-send your name — we retrieve it from our own secure storage.

We never receive your Apple ID email address unless you explicitly choose to share it during sign-in. If you use Apple's private email relay, we only ever see the relay address.

You can revoke RidePack's access to your Apple ID at any time in Settings → [Your Name] → Sign in & Security → Apps Using Apple ID.

04

Location Data

RidePack requests access to your precise location for two purposes:

  • Discovering nearby rides: Your device's location is used on-device to query our database for active ride groups near you. Your raw coordinates are not sent to our servers for this query.
  • Creating a ride: When you start a new ride, your current location is stored as an approximate geohash (a short string representing a geographic region) on the ride group record. This allows other riders nearby to discover your group. Your exact coordinates are not stored — only the geohash.

We do not track your location continuously. Location is only read when you open the discovery screen or create a ride. We do not build a history of your locations.

You can revoke location permission at any time in Settings → Privacy & Security → Location Services → RidePack. Without location permission, ride discovery will not function.

05

Microphone & Audio

RidePack's core feature is real-time voice communication between cyclists in the same ride group. To enable this, the App requires microphone access.

How audio works

When you are in an active ride and begin speaking, your audio is transmitted to other members of your group through one of two channels:

  • Local (Bluetooth / Wi-Fi Direct): If other riders are physically nearby, audio is sent directly between devices using Apple's Multipeer Connectivity framework. This data never leaves your local network.
  • Cloud (LiveKit): If riders are beyond Bluetooth range, audio is routed through LiveKit's real-time media infrastructure. LiveKit processes the stream in transit and does not store it.

Microphone Activity

On iPhone, the microphone remains active for the entire duration of a ride. Audio is broadcast continuously to your group — your music ducks automatically when anyone speaks. You can tap Mute at any time to stop transmitting; no audio is sent while muted. On Apple Watch in standalone mode, audio is only transmitted while you hold the push-to-talk button.

No recordings

Audio is never saved to our servers, to your device, or to any third-party storage. There are no recordings of your conversations.

You can revoke microphone permission in Settings → Privacy & Security → Microphone → RidePack. Without microphone access, the App cannot transmit audio.

06

Third-Party Services

RidePack uses the following third-party services to operate. Each is used solely to provide the App's functionality — not for advertising or analytics.

Firebase (Google)

We use Firebase Authentication to manage your sign-in session and Firebase Firestore to store ride group data, your display name, and your user ID. Firebase is operated by Google LLC and is subject to Google's Privacy Policy. Data is stored in Google Cloud infrastructure. We do not enable Firebase Analytics or Crashlytics.

LiveKit

LiveKit provides the real-time audio infrastructure for transmitting voice between riders who are out of Bluetooth range. LiveKit processes audio streams in transit and does not store them. LiveKit is subject to LiveKit's own Privacy Policy.

Apple

Sign In with Apple is handled by Apple Inc. Apple's privacy practices govern the authentication process. Multipeer Connectivity (used for local audio) is an Apple framework that operates entirely on your local network.

We do not use any advertising networks, analytics SDKs, or data brokers.

07

How We Share Your Data

We do not sell your personal information. We do not share your data with third parties for advertising or marketing purposes.

Your display name and speaking/mute status are visible to other members of your active ride group for the duration of that ride. This is the core purpose of the App.

We may disclose information if required by law, such as in response to a valid legal process. We will notify you of such requests to the extent permitted by law.

08

Data Retention & Deletion

We retain your data only as long as necessary:

  • Ride group data (name, location, members) — deleted automatically when a ride ends or all members have left
  • Your display name and user ID — retained in your account profile until you request deletion
  • Audio — never retained; transmitted and discarded in real time

You can delete your account directly from within the App at any time: go to Settings → Delete Account. Deletion is immediate and permanent — your account, display name, and any rides you own are removed immediately. Any remaining group memberships expire automatically within 90 seconds via the heartbeat timeout.

If you need help or want to request deletion of any residual data, contact us at the address below. We will complete any additional deletion within 30 days and confirm by email.

09

Children's Privacy

RidePack is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10

Your Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

11

Security

We take reasonable measures to protect your information. Data stored in Firebase is encrypted at rest and in transit. Audio transmitted via LiveKit uses end-to-end encryption. Local audio transmitted via Multipeer Connectivity is encrypted by the framework.

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us privately before disclosing it publicly.

12

Changes to This Policy

We may update this policy as the App evolves. When we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the App.

Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

13

California Residents — CCPA Disclosure

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information.

Rights under the CCPA

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collecting it, and any third parties with whom we share it.
  • Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
  • Right to Correct: You may request correction of inaccurate personal information we hold about you.
  • Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm this at any time.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will receive the same quality of service regardless of whether you make a privacy request.

Categories of personal information collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

  • Identifiers — display name, Apple ID–linked user ID
  • Geolocation data — approximate location (geohash) used at ride creation; deleted when the ride ends
  • Audio data — real-time voice transmissions; never recorded or stored

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

How to submit a request

To delete your account, use the in-app option in Settings → Delete Account. For all other CCPA requests, contact us at privacy@ridepack.app. We will respond within 45 days. We may need to verify your identity before processing your request.

14

Contact Us

Questions or requests?

For privacy questions, data deletion requests, or to exercise your rights, reach out directly. We read every message.

privacy@ridepack.app