RidePing privacy policy

RidePing is made by COGITO CODE S.R.L., registered office Aleea Tândală nr. 18-20, Sector 3, Bucharest 031882, Romania, Trade Register J40/12985/2023, CUI 48481995.

For anything about your data in RidePing, write to contact@cogitocode.ro.

The app has no account, login, email or name. Everything below is tied to a random device ID, not to you by name.

Precise location

Purpose: to rank hotspots and trigger alerts while you are online. Legal basis: the service you asked for (Art. 6(1)(b) GDPR); background use needs your consent through the iOS permission (Art. 6(1)(a)). Recipient: our database and server functions (Supabase, EU).

Anonymous device ID

Purpose: trial and subscription state, daily alert counting, feedback and check-ins. Legal basis: the service you asked for (Art. 6(1)(b) GDPR). Recipient: our database (Supabase, EU).

Push token

Purpose: to deliver alerts to your phone. Legal basis: the service you asked for (Art. 6(1)(b) GDPR). Recipient: Google Firebase Cloud Messaging.

Purchase status

Purpose: to unlock Pro features. Legal basis: the service you asked for (Art. 6(1)(b) GDPR). Recipient: none. Apple tells us only that your device is Pro.

Feedback and spot suggestions

Purpose: to improve hotspots and spots. Legal basis: the service you asked for (Art. 6(1)(b) GDPR). You choose what to send. Recipient: our database (Supabase, EU).

Route coordinates

Purpose: to estimate travel time. Legal basis: the service you asked for (Art. 6(1)(b) GDPR). Recipient: the public OSRM routing server.

RidePing uses your precise location only while you are online in the app. Going offline stops tracking at once.

While you are online, the app can keep running in the background so that alerts still reach you. This needs the iOS location permission ("Always" or "While Using" with background updates), which you can change or take away at any time in the iPhone Settings.

About once a minute while you are online, the app sends your position to our server, together with your selected city and radius, to compute hotspots and alerts. It sends an update when you move by about 500 metres, and otherwise checks every 2 minutes.

Your location is used only to rank hotspots and trigger alerts. It is not sold, not used for advertising, and not shared with anyone except the processors named below. No location history is shown to anyone else.

• Your name, email, phone number, contacts or photos.
• The Apple advertising identifier.

The app contains no analytics SDKs and no ads, and it does not track you across other apps or websites.

• Supabase, which runs our database and server functions in the EU (Frankfurt).
• Google Firebase, which delivers push alerts.
• Apple, which runs the App Store, StoreKit subscriptions and push delivery (APNs).
• The public OSRM routing server (router.project-osrm.org), which receives origin and destination coordinates to estimate travel time. About the OSRM project.

We do not sell personal data or share it for advertising.

RidePing starts with a 7-day free trial inside the app, with no card needed. After the trial, weekly and monthly Pro subscriptions are available as auto-renewing purchases through Apple, and a free tier remains, with 1 city and limited alerts. The price is shown in the App Store at purchase. You manage or cancel a subscription in your Apple ID settings.

Payments are processed by Apple (StoreKit). We receive only a Pro flag for your anonymous device, never your card or Apple ID details.

We keep location and alert data only as long as needed to compute alerts and for aggregate demand statistics. We have not fixed a retention period in days. This page will state it once we set one.

Aggregate demand statistics rest on our legitimate interest in understanding demand (Art. 6(1)(f) GDPR).

Emails you send to our support address are kept as described in our website privacy notice.

You have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format and to object to its processing (Art. 15 to 21 GDPR).

To use any of these rights, including deletion, write to contact@cogitocode.ro. The app has no accounts, so tell us which device is yours and we will help identify it. We answer within one month.

You can complain to the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, dataprotection.ro, or to the authority in the EU country where you live or work.

Our servers are in the EU (Frankfurt). Google (Firebase) and Apple may process data outside the European Economic Area, under Standard Contractual Clauses or adequacy decisions.

Data travels between the app and our servers over encrypted connections (TLS). Access to the data is limited to what running the service needs.

RidePing is a tool for drivers and is not directed to children under 18.

We update this policy when the way the app processes data changes. The date at the top shows the current version.

Questions about this policy or your data: contact@cogitocode.ro. For help using the app, see RidePing support.