Privacy Policy

Contact and privacy requests

Marcel Gheorghe, trading as Mottoapp.
Lemonaghan, Ballycumber, Tullamore, Co. Offaly, R35 RT91, Ireland.
Phone: +353 85 876 6677. Email: Demeyeapps@gmail.com.

For privacy enquiries, access, correction, deletion or a copy of your information, email Marcel Gheorghe at Demeyeapps@gmail.com. Use “Mottoapp privacy request” as the subject. You can use the Privacy & account help page to submit and track requests for access, correction, erasure, restriction, objection or portability. These controls do not require acceptance of updated membership terms. You can also use private feedback under “Help shape Mottoapp”. Email remains available if you cannot access your account.

Adults only early access

Mottoapp early access is for people aged 18 and over. We record a self-declaration that you meet that age threshold, not a date of birth or an identity document. A declaration is not verified age assurance. If you believe a child has an account, contact us so we can investigate and take appropriate action.

Information we use

We receive account identifiers, email and available name information from your sign-in provider. We store the profile details you supply, username, account type, county, bike details, photos, saved items, places you mark as visited, community place ratings, trips, listings, business pages, offers, reviews, reactions, ride attendance, friendships, messages, group membership, feedback and reports. Optional public contact details are separate from your sign-in email.

Passwords for email registration are handled by the authentication provider; Mottoapp does not store plaintext passwords. We record an adult self-declaration, the document versions and time when you agree to our Terms and acknowledge this notice. We also process notification choices, browser push subscription endpoints, membership records and technical records needed for authentication, security, error investigation and abuse prevention. Hosting, email delivery and sign-in providers may process network and device information when you connect. Avoid uploading sensitive information or information about others without permission.

Location and uploaded images

“Use my location” in Local requests a browser position to determine your county on your device. The current county lookup does not send your raw GPS coordinates to the Mottoapp server. Choosing a county manually remains available.

A rider-help GPS pin is different: if you request a pin and confirm sharing before posting, its latitude, longitude, accuracy and capture time are stored with the post and made available to eligible members while it is active. The map location is hidden from all members, including the author, when the request is resolved or expires after 24 hours. The separate location fields are cleared from the live database on closure or, for expiry, on the next authenticated app request. Posts with a submitted report are excluded from that automatic clearing while the owner reviews the evidence and any necessary retention. This is request-driven cleanup, not a scheduled guarantee of deletion at exactly 24 hours. It does not erase provider backups, screenshots or locations written in the description or replies. You can supply a typed location or Maps link instead. Shared routes and event locations can reveal personal movements; avoid publishing home addresses or sensitive locations.

New supported JPEG, PNG and WebP uploads have common private EXIF, XMP, IPTC and textual metadata removed before storage. A minimal photo-orientation instruction may be retained so portrait photos stay upright. Pixel content is retained; metadata removal does not hide a visible address, person or number plate in an image. Older uploads have not been retrospectively audited or cleaned. Do not upload images of others without appropriate permission.

Purposes and legal bases

• Account access, saving your content and delivering the features you request: performance of our agreement with you.
• Security, abuse prevention, moderation, service debugging and basic business page activity counts: legitimate interests in operating a safe and reliable community, balanced against your rights.
• Optional device alerts and promotional alerts: your separate consent choices, which you can withdraw in notification or browser settings. Withdrawing consent does not affect earlier lawful processing.
• Responding to lawful requests and applicable record-keeping duties: legal obligations.

Core account information is needed to provide an account. Photos, public contact details and device alerts are optional. We do not use automated decisions that produce legal or similarly significant effects about you.

Who can see your information

Published profiles, business pages, listings and community posts are available to members with access to Mottoapp. New business pages, offers, places and bike listings can appear in Discover. A private saved trip is not published merely by saving it; sharing a trip makes its shared details available to the selected audience.

Direct messages are available to conversation participants; group messages to eligible group members. They are not end-to-end encrypted. The operator and infrastructure providers may access stored data where needed to operate the service, investigate abuse or meet legal duties. Place-rating scores contribute to public category averages and counts; the interface does not list each rater’s name or individual scores. You can update or remove your own ratings. The larger-text preference is saved on your device. Saved and visited-place marks are personal account records and are not displayed to other members. Private feedback is available to its author and the site owner. Removing a conversation from your inbox does not necessarily remove the other participant’s copy.

Other members may copy or reshare information you publish. We do not sell personal data. Business activity reporting uses counts rather than disclosing individual visitor identities.

Business directory suggestions and claims

You can submit basic business details without creating a Mottoapp business account. We store your private contact email, submitted information and review records to assess the suggestion, deal with corrections and prevent abuse. Your submission contact email is not published or added to a marketing list. Approved basic listings show public business information and are marked unclaimed; they do not imply an endorsement. Claim requests include the signed-in account and verification information you provide, visible to the site owner for review. Do not submit identity documents or passwords. Contact us to correct or request removal of directory or submission information.

Providers and external links

The current service uses OpenAI Sites hosting and Cloudflare infrastructure for application delivery, database and file storage, and ChatGPT sign-in for existing testers. Email or Google sign-in, where enabled, uses Supabase authentication. Resend delivers transactional account-verification and password-recovery emails; those emails are not marketing subscriptions. Browser push providers, including Google’s service on Android, process subscription details to deliver alerts. Opening directions or an external business website shares a request with that provider under its own privacy policy.

Address suggestions send the address text you type and a selected place reference through our server to Google Places. Do not enter sensitive personal information in address searches. Google processes these requests under its applicable terms and privacy arrangements. A manual address remains available. Opening an external map is a separate action.

If you separately activate paid membership, Stripe processes checkout and payment information; Mottoapp receives membership and transaction references rather than full card details. Free testing does not itself start a paid subscription.

These providers may process data outside Ireland or the EEA. Provider arrangements and the applicable transfer safeguards are still being reviewed during early access; contact the owner for current details. This notice does not promise EU-only storage.

Promotional alerts

Business promotional alerts are optional and off unless you opt in through notification settings. We record that opt-in separately. You can withdraw it in the same settings; offers remain visible when you browse Discover or Local. Enabling browser notifications alone does not opt you into promotional alerts.

Cookies and device storage

Sign-in uses session cookies and authentication storage. The app also stores preferences such as your colour theme, and registers a service worker for device alerts. Device alerts require browser permission and can be disabled. No advertising tracker is added by Mottoapp’s current application code. Linked websites and sign-in providers have their own storage practices. See our Cookie Notice for the current inventory, choices and audit limitations.

Community activity totals

We keep the most recent day on which a signed-in account opens the app, at day precision. This lets the site owner see aggregate member totals and the number active in the last 30 days. The dashboard is not public and does not show individual activity histories, browsing paths or live online status. The activity date is kept with your account while needed for this purpose and is included in account export and erasure handling.

Retention and deletion

To prevent repeated introductory trials, we retain an email fingerprint and the date membership was first used, separately from your account. This record survives account deletion and is used only to check eligibility for introductory offers. It does not contain your email in readable form, but remains personal data. We retain it while this introductory-offer restriction is in operation; contact us to exercise your privacy rights.

Account and published content are kept while needed to provide your account and the features you use. Messages may remain available to other participants after you clear your own conversation. Deletion controls may hide or mark records rather than immediately erase every stored copy. For account erasure or deletion beyond those controls, contact the owner.

Security, moderation, feedback, adult declarations, legal acknowledgements and membership records are retained only as needed for investigation, resolving disputes and applicable legal duties. A deletion request is assessed against those purposes and other people’s rights; retained data must be limited accordingly. Infrastructure backup expiry and provider retention are subject to provider arrangements. Chat photos stop being available through the app after 48 hours, and deletion of a chat message withdraws its photo access for the sender as well as recipients. New chat uploads are limited to their conversation and cannot be reused as public profile or listing images; unused new chat uploads also become inaccessible after 48 hours from upload. These access controls do not physically erase stored photo objects or provider backups. Rider-help location fields are cleared from the live database as described above, subject to reported-post evidence review; copies in free-text descriptions or replies and provider backups require separate handling. Exact record-retention and backup periods, including processor copies, are still being confirmed during testing. We do not promise an automatic deletion schedule that has not been implemented.

Requests and account downloads

You can download your account records while signed in. The download includes records and content you submitted, limited to 1,000 rows per category, with any truncation identified. It includes your vehicles, ride logs, reactions, attendance, saved items, ratings, submitted business requests, friendships and recorded activity as well as core account and submitted content records. It is not a complete GDPR access response: received conversations, provider records, actual photo files and other personal data may need a separate response. This download does not delete your account. A privacy request can be made by email even if you decline updated Terms or cannot sign in. Requests submitted through Privacy & account help have a private downloadable acknowledgement showing the original receipt date and normal response target; it is proof of receipt, not proof of deletion or a complete rights response.

For an erasure request, tell us the account email and what you want removed. We will verify identity proportionately, explain any lawful retention, and deal with stored files and service providers as appropriate. Do not send an identification document unless we explain why it is necessary. Open your profile, choose “Delete my account” under “Account & membership”, and submit a private deletion request. You can track it through “View my deletion request” or “My feedback”. Account erasure is handled manually by the owner; submitting a request does not immediately delete or deactivate your account, or cancel subscription renewal. Subscription controls remain available separately under Account & membership. Email is available if you cannot sign in.

Your rights

Depending on the circumstances, you can request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing. We may need to verify your identity and will respond without undue delay and normally within one calendar month of receiving a rights request. Where a lawful extension is needed because of complexity or number of requests, we explain the reasons within that first month; any extension is limited to the applicable legal period. Any refusal is explained with the available complaint or review routes.

You can complain to Ireland’s Data Protection Commission. You do not need to contact us first.

Privacy contact

Marcel Gheorghe is the current privacy contact. No designated statutory Data Protection Officer is listed at present; whether one is required is being documented against the nature and scale of the processing. This does not remove the operator’s data-protection responsibilities.

Changes

The date and version above identify this notice. Material changes will be brought to members’ attention in the app before new processing begins where required. Optional permission requests remain separate from these terms.