Last updated: 5 November 2026
{{firma}}. Contact for personal data: {{email}}.
| Phone number | Only to sign you in (code by SMS) and so that one number has only one account. It does not appear anywhere in the app. The SMS code is sent by our SMS provider, Twilio. |
|---|---|
| Profile | Nickname, county, motorcycle, licence category and the year you started riding. You can see and change them in Profile. |
| Location | Only during a ride you have joined, so the group can see you. The server keeps only your last position, deleted automatically after 24 hours. |
| Ride track | Only on your phone. It does not reach the server. |
| Emergency contact | Only on your phone. It does not reach the server. |
| Messages | What you write in the chats of rides, trips, clubs and in Discussions. The general Discussions are public: anyone can read them, on the website too, with your nickname and motorcycle. The chats of rides, trips and clubs stay only in the app. |
| Reports and warnings | The reason for the report and the person concerned, visible only to moderators. Warnings count for 12 months. |
| Notifications | Your phone's notification token, so you receive the group's announcements. |
So the app works: you can join rides, the group can see you on the road and moderators can enforce the rules. We do not sell data, we show no ads and we use no third-party tracking or analytics services.
Legal basis (GDPR, Art. 6): for the account, profile, rides, location during the ride, messages and notifications, performance of the contract with you (the app's terms); for reports, warnings and keeping them for 12 months, our legitimate interest in keeping the community safe.
Your account, profile, rides and messages are stored on servers in the European Union (Supabase, Frankfurt, Germany). These providers also help us, each only with its own part:
| Twilio | Sends the code by SMS. Receives only the phone number and the text with the code. |
|---|---|
| Expo, Apple and Google | Deliver notifications to your phone. They receive the notification token and the notification text. |
| Vercel | Hosts the bikbik.app website. |
Some of these providers may also process data outside the European Union (for example, in the USA). In that case the transfer is made with the safeguards required by the GDPR (the European Commission's standard contractual clauses).
Your position on the road: 24 hours. Everything else: as long as you have an account. When you delete your account, everything is deleted from the server. Exception: if you had active warnings, we keep for up to 12 months only a fingerprint of the number (pseudonymised, not the number in clear) and the warnings, so they cannot be dodged with a new account.
Access, rectification, erasure, restriction, portability and objection. Write to us at {{email}}. You can also complain to a data protection authority: in Ireland, the Data Protection Commission (dataprotection.ie); in Romania, ANSPDCP (dataprotection.ro); or to the authority in the country where you live.
In the app: Profile → Safety → Delete account. Everything on the server is deleted immediately, except as described in point 5. If you no longer have the app, write to us at {{email}} with the subject “Delete {{nume}} account” and the account's phone number. We send you a code by SMS to that number, to know it is your account, then we delete the account within 30 days at most and confirm it to you.