Privacy Policy

Who we are

Motarva ("we", "us", "our") operates the motorcycle route-sharing platform at https://motarva.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. This policy covers both the motarva.com website and the Motarva iOS app.

Motarva is operated by Beuzze, VAT BE 0754.641.390, Belgium.

Data we collect

Account information

When you register, we collect:

• Username and display name
• Email address
• Password (stored securely hashed, never in plain text)

Profile information

You may optionally provide:

• Rider bio (max 300 characters)
• Country of residence
• Motorcycle make and model
• Profile avatar (via WordPress / Gravatar)

Route data

When you upload or create a route, we collect:

• GPX, TCX, ITN, or FIT file contents (waypoints, coordinates, elevation data)
• Route title, description, and tags
• Curviness, route shape and vehicle type selections
• Start and end coordinates (used for country/region detection and route type classification)
• Calculated statistics: distance, elevation gain, duration, point count
• Route visibility setting (public or private)

When using the Route Maker tool, we additionally store:

• Drawn route geometry (all coordinates)
• Points of interest you add (coordinates, labels, categories)
• Draft routes (including for guests via anonymous session tokens)

Reviews

When you review a route, we store your star rating and review text, linked to your account.

Activity data

• Favorites: Routes you save to your favorites list
• Completions: Routes you mark as ridden, including optional rating

Ride data

When you ride with the Motarva app, the app records the ride and sends it to your ride log:

• Distance ridden, when the ride started and ended, and how much of that time you were moving
• Average speed and top speed
• The route you followed, when the ride followed one
• Where the ride started, at country and region level
• A simplified speed trace of at most 600 points, when your ride includes one

We do not store the GPS trace of your ride. A ride record holds the numbers above, not the path you took, unless you saved that ride as a route yourself.

Your rides are private. Only you can see your ride log. You can choose to show other riders your total distance and your number of rides, and nothing else: your top speed is never shown to anyone but you. We never rank riders by speed or by ride time.

Rides are recorded by the Motarva app. If you only use the website, we hold no ride data about you.

Gamification data

• XP and levels: We track experience points earned through platform activities (uploads, reviews, referrals) and your current level
• Badges: Achievement badges awarded for milestones
• Referrals: We track referral relationships between users (who referred whom) and associated XP rewards

Partner inquiries

If you submit a partner inquiry, we collect: business name, contact name, email, phone (optional), business category, website, address, country, and your message. This data is sent to our admin team via email.

Automatically collected data

• IP address: Used temporarily for rate limiting (login attempts, API requests, form submissions). IP addresses are hashed and stored in short-lived caches (15 minutes to 1 hour), not in permanent database records.
• Reporter IP: When a route is reported for abuse, the reporter's IP address is stored for moderation purposes.
• Route view counts: We count page views per route using temporary IP-based deduplication. The IP hash expires after a short period.
• Download counts: We count how many times routes are downloaded (aggregate count only, not per-user).
• Sign-in activity: We store when you first signed in, when you last signed in, and when you were last active, together with whether that was on the website or in the app. This helps us recognize inactive accounts and support you when something goes wrong.

Mobile app (iOS)

When you use the Motarva iOS app, we additionally process:

• Location: Your device location is used to show your position on the map and to provide turn-by-turn navigation. During navigation, coordinates are sent to our routing provider (Mapbox) to calculate directions and rerouting. We do not store your navigation location on our servers.
• Recorded rides: When you record a ride, the app collects a GPS track on your device. The track is uploaded to your account only when you choose to save it, and is then handled as route data.
• Group rides: While you take part in a live group ride, your position, heading, and speed are shared with our server so members of the same session can see you on the map. Live positions are kept in short-lived server memory for at most 10 minutes and are never stored permanently.
• Profile photo: A profile photo you upload in the app is stored with your account.

How we use your data

• Provide the service: Display your routes, profile, reviews, and activity to other users (respecting your visibility settings)
• Geographic classification: We use your route's start coordinates to automatically determine the country and region via reverse geocoding
• Route type detection: We compare start and end coordinates to classify routes as loops or point-to-point
• Security: Rate limiting to prevent abuse, spam detection via honeypot fields
• Communication: Password reset emails and partner inquiry confirmations
• Gamification: Calculate XP, levels, and badge awards based on your activity
• Referral program: Track successful referrals and award XP to referrers

Third-party services

We use the following external services to operate the platform:

We do not use any advertising networks, tracking pixels, or third-party analytics services. The Motarva iOS app includes the Mapbox SDK, which collects a limited amount of anonymized usage and diagnostic telemetry to operate and improve its map services. This telemetry is not linked to your Motarva account.

We measure visits to the website with software we run ourselves (Umami) on our own server in Belgium. It sets no cookies and stores no IP address: visits are counted with a hash that changes every day and cannot be traced back to you. It respects your browser's "Do Not Track" setting.

Cookies and local storage

For full details on cookies and browser storage, see our Cookie Policy.

Data retention

• Account data: Retained for the lifetime of your account. Permanently deleted when you delete your account from your account settings.
• Route data: Draft and private routes are deleted when you delete your account. Published routes are retained as anonymized community content, attributed to "Deleted User".
• Reviews: Deleted when you delete your account.
• Rides: Kept until you delete the ride or your account. Deleted permanently with your account, together with your reviews and gamification data.
• Rate-limiting data: Temporary, automatically expires after 15 minutes to 1 hour.
• Uploaded files: Temporary upload files are automatically cleaned up after 2 hours via scheduled task. Published route files are retained until the route is deleted.
• Recorded rides: Stored only when you save them; handled as route data from that point on.
• Live group ride positions: Automatically deleted after at most 10 minutes; never stored permanently.
• Referral data: Retained for the lifetime of both referrer and referred accounts.

Your rights

You have the right to:

• Access: View all personal data we hold about you via your profile page
• Rectification: Update your profile information at any time
• Deletion: Delete your account and all personal data from your account settings at any time
• Data portability: Download your routes in GPX format at any time
• Withdraw consent: Delete your account to withdraw consent for data processing

You can exercise most of these rights directly from your account settings. For additional requests, contact us via the information below.

Data security

• Passwords are hashed using bcrypt (WordPress standard)
• All forms are protected with CSRF tokens (nonces)
• Login attempts are rate-limited (5 attempts per 15 minutes per IP)
• API requests are rate-limited (120 requests per minute per IP)
• File uploads are restricted by type and size (max 5 MB)
• Partner inquiry forms include honeypot spam protection

Children's privacy

Motarva is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this policy

This policy is dynamically generated based on the features currently active on the platform. When features are added or removed, this policy automatically reflects those changes. We recommend reviewing this page periodically.

Contact

For any privacy-related questions or requests, contact the data controller:

Beuzze
VAT BE 0754.641.390
Email: [email protected]