Privacy Policy

Effective Date: November 3, 2026 | Last Updated: November 3, 2026

1. Introduction

Welcome to Oto ("Oto," "we," "our," or "us"). Oto is an app for recording motorcycle rides and sharing them with other riders. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Oto mobile application and website (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.

2. Information We Collect

2.1 Information You Provide

We may collect the following information that you provide to us:

Phone number (for account creation, verification, and sign-in)
Profile information (name, username, profile and cover photos)
Content you create (rides, titles, descriptions, photos, routes, comments, and information about your bikes)
Social interactions (follows, reactions, riders you tag, riders you block, and reports you submit)
Settings and preferences, including privacy settings and places you choose to hide
Feedback, support requests, and other communications you send us

2.2 Location and Ride Information

Precise location while you record a ride, including when the app is in the background, only if you grant permission
Speed, elevation, time, and motion and barometer sensor readings collected during a ride, and statistics calculated from them
The location where photos you add to a ride were taken
Weather conditions at the time and place of a ride
Approximate location, to show you content near you, if you grant permission

We do not collect your location when you are not using a feature that needs it.

2.3 Usage and Device Information

App usage analytics and performance data
Device information (device type, operating system, app version, time zone, and app-specific identifiers)
Push notification tokens, if you enable notifications
Crash reports, error logs, and diagnostics
Network information (such as IP address) received when the app or website connects to our servers

2.4 Contacts

If you choose to find friends from your contacts, the app converts the phone numbers in your contacts into one-way codes (hashes) on your device and sends only those codes, which we compare with existing accounts and do not keep. Names and other contact details do not leave your device.

2.5 Cookies and Tracking

We do not use cookies or similar technologies for advertising. The Oto app does not track you across other companies' apps or websites, as defined by Apple's App Tracking Transparency framework, and does not use your device's advertising identifier.

3. How We Use Your Information

We use the collected information for the following purposes:

To create and secure your account and verify your phone number
To provide, maintain, and improve the Services, including recording, analyzing, storing, and backing up your rides
To display your profile and content to the people you choose, according to your privacy settings
To show you content from riders you follow and riders near you
To help you find people you know, and help them find you, if you allow it
To send notifications you have enabled
To diagnose crashes and errors, and analyze usage and performance to improve the Services
To provide customer support and respond to your inquiries
To review reports, enforce our Terms of Service and Community Guidelines, and keep our users safe
To detect, investigate, and prevent fraud, abuse, and unauthorized access
To comply with legal obligations

We do not use your information for advertising, and we do not sell it.

3.1 Legal Basis for Processing (EEA and UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal information based on the following legal grounds:

Performance of a Contract: to provide the Services you request
Legitimate Interests: to secure and improve the Services and prevent abuse
Consent: for location, contacts, photos, and notifications, which you may withdraw at any time in your device settings
Legal Obligation: to comply with applicable laws and regulations

4. Who Can See Your Information

Your profile information is visible to other users of the Services.
You choose who can see each ride you record. You can hide parts of your routes, such as where they start and end, and hide maps entirely.
Certain ride statistics, such as top speed, are visible only to you.
Your phone number is never shown to other users.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

With other users, according to your settings and as described in Section 4
With service providers who help us operate the Services, as described in Section 5.1
With your consent
To comply with applicable laws, regulations, legal processes, or governmental requests
To protect the rights, property, and safety of Oto, our users, and others, including to enforce our Terms of Service
In connection with a merger, acquisition, or sale of assets, in which case your information will remain subject to this Privacy Policy
In aggregated or de-identified form that cannot reasonably be used to identify you

5.1 Service Providers

We use third-party service providers for cloud hosting and storage, account verification and text message delivery, crash reporting and analytics, maps and location services, weather data, push notifications, email, and website hosting. They receive only the information they need to perform their services, may use it only on our behalf, and are required to protect it with the same or equal protection as described in this Privacy Policy.

Some providers, such as map providers, may also collect usage data under their own privacy policies. Where they offer controls, such as the information button on maps, you can use them to opt out.

6. Text Messages

We send text messages only to deliver one-time verification codes when you sign up or sign in. We do not send marketing text messages, and we do not share your phone number with third parties for their marketing purposes. Message and data rates may apply.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including encryption of data in transit and at rest, and access controls that limit each user to their own data and the content others have chosen to share with them.

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you as required by applicable law.

8. Data Retention

We retain your personal information only for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Your account and content are retained until you delete them or delete your account.
When you delete content or your account, we delete it from our active systems promptly. Residual copies in backups are deleted within a limited period as backups are overwritten.
Diagnostic and analytics data is kept for a limited period, then deleted or de-identified.
We may retain information longer where needed to comply with legal obligations, resolve disputes, or enforce our agreements.

9. Your Rights and Choices

9.1 Controls in the App

Export: you can export your rides and photos from the app's settings.
Delete: you can delete individual content, all of your rides, or your entire account from the app's settings. Deleting your account permanently removes your account and associated content from our servers.
Privacy: you can control who sees your rides, hide parts of your routes, and choose whether people who have your phone number can find you.
Permissions: you can change location, contacts, photos, and notification permissions at any time in your device settings.

9.2 Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: request access to your personal information
Rectification: request correction of inaccurate or incomplete information
Erasure: request deletion of your personal information
Data Portability: request a copy of your personal information in a portable format
Restriction: request restriction of processing in certain circumstances
Objection: object to processing based on legitimate interests
Withdraw Consent: withdraw previously given consent at any time

To exercise these rights, please contact us using the information in the "Contact Us" section. We may need to verify your identity before processing your request. We will respond within the timeframe required by applicable law. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

9.3 California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

Right to Know: request that we disclose what personal information we collect, use, and disclose about you
Right to Delete: request deletion of your personal information, subject to certain exceptions
Right to Correct: request correction of inaccurate personal information
Right to Opt-Out: opt out of the sale or sharing of your personal information
Right to Limit Use: limit the use and disclosure of sensitive personal information
Right to Non-Discrimination: not be discriminated against for exercising these rights

Within the past 12 months, we have collected the categories of personal information described in Section 2, directly from you and your device. We do not sell or share personal information, as those terms are defined under the CCPA, and we use precise location only to provide the Services you request. To exercise your rights, contact us as described in the "Contact Us" section. We will respond within 45 days of receipt, which may be extended by an additional 45 days when reasonably necessary, with notice to you.

10. Children's Privacy

The Services are not intended for children under the age of 13 (or a higher minimum age where required by local law). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child under the applicable minimum age, we will delete it promptly.

If you believe we may have information from or about such a child, please contact us using the information below.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers are located. These countries may have data protection laws that differ from those of your country. When we transfer your information, we rely on appropriate safeguards in accordance with applicable law, such as standard contractual clauses.

12. Third-Party Links and Services

The Services may contain links to third-party websites or services that we do not own or control. This Privacy Policy applies only to our Services. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the "Last Updated" date above. For material changes, we will also notify you through the Services before the changes take effect.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Oto
Email: privacy@rideoto.com
Website: rideoto.com