Privacy Policy

Last updated: October 2026

1. Data Controller

The data controller is Roam Records, reachable at: [email protected]

2. Data Collected

FlatRide collects the following personal data:

Account data — name, email address and profile picture, provided via Google login or email/password registration.

Usage data — computed routes (distance, duration, start and end points), reported bumps and votes.

Payment data — transactions are handled by Stripe. FlatRide does not store credit card details.

Location data — geographic coordinates entered for route calculation. During in-app navigation your live position is read and processed only on your device: it is never stored or sent to our servers, except when you tap "New route from here", in which case your current position is sent as the starting point of that route and stored like any other computed route.

Temporary tokens — for email/password registration and password reset requests, we store a one-time token in our database for up to 24 hours solely for verification purposes.

3. Purpose of Processing

Data is used to:

Provide the route calculation service and token wallet management

Process payments and send purchase confirmation emails

Improve the community bump map

Measure aggregate site usage (Google Analytics), only with your consent

Respond to support requests

4. Legal Basis

Processing is based on the performance of a contract (Art. 6(1)(b) GDPR) for service provision, and on user consent (Art. 6(1)(a) GDPR) for Google login and for analytics cookies (Google Analytics), which can be withdrawn at any time.

5. Third Parties

Google — authentication via OAuth 2.0

Stripe — payment processing

Resend — transactional email delivery

OpenStreetMap / Valhalla — route calculation and map data

Google Analytics (Google Ireland Ltd.) — aggregate usage statistics, active only with your consent

6. Data Retention

Data is retained for the lifetime of the account. Upon account deletion, personal data is removed within 30 days, except transaction records required for tax obligations.

7. Your Rights

Under GDPR, you have the right to access, rectify or erase your data, object to processing, request portability, and lodge a complaint with your national data protection authority.

To exercise these rights, contact: [email protected]

8. Cookies

FlatRide uses:

Technical cookies — required for the service to work (authentication session). No consent needed.

Analytics cookies (Google Analytics: _ga, _ga_*) — set only if you accept in the banner, for aggregate site usage statistics. Maximum lifetime 2 years. Advertising signals and ad personalisation are disabled.

No advertising profiling cookies are used. Your choice is stored in browser localStorage and is never sent to our servers. You can change it or withdraw consent at any time with the button below.

9. Changes

We reserve the right to update this Privacy Policy. Material changes will be communicated by email to registered users.

Roam Records · [email protected]