Privacy Policy
Last updated: 5 October 2026
This policy explains what personal data the ApexStream app and website collect, why, and what rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible
The controller of your data is [operator name], Business ID (IČO) [IČO] ("we"), [contact email]. Our full business details are in the
legal notice. We have not appointed a data protection officer; write to the email above about anything in this policy.
What we collect and why
Email, name, password hash or Google/Apple sign-in identifier
Why: Your account
Legal basis: Contract
Kept: Until you delete the account
Public profile: name, @handle, photo, bio and vehicle, and who you follow and who follows you
Why: Letting other riders find and follow you. The profile page is public and can be opened without an account
Legal basis: Contract
Kept: Until you change it or delete the account
Location, speed, heading and lean angle during a ride
Why: Sharing the ride live and storing it in your history
Legal basis: Contract
Kept: Until you delete the ride or the account
Live video from your phone or action camera, when you turn the camera on
Why: Showing the video to people watching the ride
Legal basis: Contract
Kept: Not recorded; passes through our media server only while live. Tester accounts that opt in: recordings kept 7 days
IP address, browser or device type and requested addresses in server logs, including views of share links
Why: Running the service securely and investigating abuse
Legal basis: Legitimate interest
Kept: 30 days
Crash reports (error message, stack trace, platform)
Why: Fixing bugs
Legal basis: Legitimate interest
Kept: 12 months
Feedback you send from Settings: the message, its category, an optional screenshot, app version and device model
Why: Fixing bugs and deciding what to build
Legal basis: Legitimate interest
Kept: Until you delete the account
Usage analytics: screen views and in-app events (starting and finishing rides, turning sharing or the camera on, opening a share link, signing up, paywall steps), tied to an anonymous identifier stored on your device and, once you sign in, to your account identifier
Why: Understanding which features matter
Legal basis: Consent, off until you allow it. Change it at any time in Settings or via Cookie settings on the website
Kept: 12 months
App performance and diagnostics: screens opened, taps on buttons, timing of network requests (without query parameters or share tokens), errors and crashes, and for a fifth of sessions a screen recording with all text, inputs and images masked; tied to your account identifier once you sign in
Why: Finding what is slow or broken
Legal basis: Consent, the same switch as usage analytics
Kept: 30 days
Purchase state from Apple / Google via RevenueCat (subscription expiry, no card data)
Why: Unlocking Pro
Legal basis: Contract; accounting records also legal obligation
Kept: Until the account is deleted; accounting records as long as tax law requires
Raw sensor logs, only for accounts we mark as testers and only for rides they opt into
Why: Tuning the lean angle filter
Legal basis: Consent
Kept: Until the tester asks for deletion
Our legitimate interests are keeping the service secure, preventing abuse and fixing errors. Location is collected only while a ride is running. It keeps being collected with the screen off so sharing doesn't stop mid-ride; on Android a notification shows while it does. The app asks for location only while in use, never for "Always".
You need to give an email address to create an account, and location to record a ride; without them the service cannot work. Everything else is optional. We do not make decisions about you based solely on automated processing, and we do not profile you.
Who sees what
•
People you send a share link to see your name, position, speed and lean angle for that ride, and video if you turn the camera on.
•
Your followers see when you are riding. Your friends (by default) or all your followers (you choose which) can also see the live map, but only for rides where you turn sharing on. You can remove a follower at any time.
•
Anyone can see your public profile.
•
Processors acting on our behalf: our hosting provider (servers in the EU), Resend (email delivery), RevenueCat (subscription status), Google Maps and OpenStreetMap (map tiles and speed limits; your coordinates are sent to look up tiles and limits), OpenObserve and Rybbit (crash reports, performance diagnostics and usage analytics, self-hosted on our servers).
•
Apple and Google process payments under their own privacy policies. We never see card details.
We do not sell data and do not use it for advertising.
Transfers outside the EU
Resend, RevenueCat and Google are based in the United States. Transfers to them rely on the EU–US Data Privacy Framework where the company is certified, and otherwise on the European Commission's standard contractual clauses. Write to us for a copy of the safeguards.
Cookies and local storage
•
Sign-in cookie: keeps you signed in on the website. Strictly necessary, so no consent is needed.
•
Analytics identifier (Rybbit): an anonymous ID in your browser's local storage or on your device. Stored only after you allow analytics; withdrawing consent deletes it.
•
Your settings, including your analytics choice, stored on your device.
We use no advertising or third-party tracking cookies.
Your rights
You have the right to:
•
get a copy of your data (access) and receive it in a portable format;
•
have inaccurate data corrected;
•
have your data deleted. Deleting the account in Settings removes everything except accounting records we must keep by law;
•
object to processing based on legitimate interest;
•
withdraw consent at any time, without affecting processing done before you withdrew it.
Write to [contact email] and we will answer within one month. You can also complain to a data protection authority, in particular in the EU country where you live or work. Ours is the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
Age
The service is for people aged 16 and over.
Changes
When we change this policy, we update the date at the top and announce material changes in the app.