Privacy Policy

1. Who we are

Digital Mercenaries Limited is the controller responsible for RideHorizon. We are a company registered in England and Wales under company number 05428486. Our registered office is 55 Douglas Road, Esher, Surrey, England, KT10 8BA.

For privacy questions or requests, email privacy@digitalmercenaries.ai.

2. Information we process

Location and ride information on your iPhone

With your iOS permission, RideHorizon uses precise location, speed, and Apple-provided place information to detect when you move between roads, towns, counties, regions, or countries. Exact coordinates and the current ride history are processed on your iPhone. RideHorizon does not send latitude, longitude, or ride history to our fact or speech proxy.

Your settings, consent choice, and generated-fact cache are stored locally on your iPhone. The recent ride log is held locally in memory for the active app session. iOS and Apple location or geocoding services operate under Apple's terms and privacy information.

Optional AI facts

If you explicitly enable AI sharing and request AI facts, RideHorizon sends the announced place hierarchy, such as town, county, region, and country, to our proxy. It may also send the home or familiar regions, fact-interest categories, and custom fact instructions you choose. Our proxy sends the minimised request to OpenAI and returns the generated fact. It does not send your coordinates.

Optional Premium Voice

If you explicitly enable AI sharing and select Premium Voice, RideHorizon sends the announcement text through our proxy to ElevenLabs and receives generated speech audio. We do not upload recordings of your voice or surroundings.

Service access, security, and diagnostics

The app creates a random per-installation identifier that is unrelated to Apple's advertising identifier. Our proxy uses it to issue short-lived access credentials, enforce service quotas, and prevent abuse. We store credential hashes rather than reusable provider API keys. Provider API keys are not included in the app.

Our service may process limited request information such as route, time, response status, duration, response size, and provider status. Hosting and network providers may process IP addresses and similar connection data needed to deliver and protect the service. Application diagnostics are designed not to include coordinates, place content, rider text, installation identifiers, or credentials.

Local release diagnostics

RideHorizon keeps a bounded diagnostic log on your iPhone to investigate ride-session and audio problems during the beta. It may contain timestamps, ride and app state, whether location tracking is active, location-sample age and accuracy without coordinates, speech playback path, audio-session state, output-volume snapshots, audio route type, and iOS interruption events. It does not contain coordinates, place names, announcement text, credentials, recordings, or content from other apps. You can view, export, or clear it in Settings > Advanced; it leaves the iPhone only if you choose to share the exported file.

This webpage

This privacy-policy page uses no cookies, analytics, advertising, forms, JavaScript, or third-party fonts. Cloudflare and related network providers process ordinary connection data, including IP address and browser request information, to deliver and secure the page.

3. Why we process information and our lawful bases

4. Service providers and sharing

We use providers only for the functions described here, minimise the information we send, and assess their applicable privacy and data-protection terms. We do not sell personal information.

• Apple: iOS location, reverse geocoding, local speech, app distribution, and platform services. See Apple's Privacy Policy.
• Fly.io: hosting for the RideHorizon proxy and its database. See Fly.io's Privacy Policy.
• OpenAI: generation of optional place facts. OpenAI states that API data is not used to train its models by default unless the customer opts in. Default abuse-monitoring logs may retain API content for up to 30 days, subject to stated exceptions. See OpenAI's Privacy Policy.
• ElevenLabs: generation of optional Premium Voice audio. Our requests ask ElevenLabs not to log the text or generated audio. Zero Retention Mode is limited to eligible accounts, so ElevenLabs' actual retention remains subject to our account configuration and its applicable terms. See ElevenLabs' Privacy Policy.
• Cloudflare: hosting, edge routing, and delivery of this privacy-policy page and the canonical RideHorizon service hostname. See Cloudflare's Privacy Policy.

We may disclose limited information if required by law, to protect legal rights or service security, or as part of a business reorganisation with appropriate safeguards. We do not share information with advertisers or data brokers.

5. Retention and deletion

• Exact location and the active ride history remain in app memory for the current session and are not stored by the RideHorizon proxy.
• Generated facts and context-derived cache keys are stored locally for up to 30 days, unless you clear local data or uninstall sooner.
• Local release diagnostics retain at most 2,000 events, seven days, or 1 MiB, whichever limit is reached first. You can clear them at any time.
• Proxy sessions expire after 15 minutes for the current automatic beta-access flow. Expired or revoked session and inactive installation records are deleted after 30 days.
• Per-installation and global service-usage buckets are deleted after 3 days.
• OpenAI's default abuse-monitoring logs may contain API inputs and outputs for up to 30 days, subject to its stated legal and security exceptions and any lower-retention controls applied to our account.
• ElevenLabs retention depends on the production account's eligibility for its Zero Retention Mode and ElevenLabs' applicable terms. You can use Apple Voice instead.
• We retain limited legal or security records longer only when reasonably necessary to meet a legal obligation or establish, exercise, or defend a claim.

Clearing local data in RideHorizon removes local settings, cached facts, ride history, release diagnostics, consent, the installation identifier, and the proxy access credential from that iPhone. It does not by itself send a remote deletion request to us or a provider. Contact us if you want to request deletion of information held by us.

6. Your choices

• Decline or remove location access in iOS Settings. RideHorizon cannot provide live place awareness without location access.
• Decline or withdraw AI sharing in RideHorizon Settings. Names-only announcements remain available.
• Select Apple Voice instead of Premium Voice.
• Use Clear Local Data in the app or uninstall RideHorizon.
• Contact us to make a server-side privacy request.

Withdrawing consent does not affect processing that was lawful before withdrawal.

7. Your data-protection rights

Depending on the circumstances and applicable law, you may have rights to be informed; obtain access; correct inaccurate information; request erasure or restriction; receive portable information; object to processing based on legitimate interests; and withdraw consent.

RideHorizon currently has no user account. We may need limited information to match a request to an installation. Never send us an API key, access token, attestation object, or other secret. We may need to verify your identity and may refuse or limit a request where the law permits.

You may complain to the UK Information Commissioner's Office at any time. See Make a complaint to the ICO. We would welcome the opportunity to address your concern first, but contacting us is not a condition of complaining to the ICO.

RideHorizon does not use personal information for solely automated decisions that produce legal or similarly significant effects.

8. International transfers

Some providers may process personal information outside the United Kingdom. Where UK transfer restrictions apply, we rely on an applicable UK adequacy regulation or provider contractual safeguards, which may include the UK Addendum to the European Commission's Standard Contractual Clauses. Contact us for more information about the provider and safeguard relevant to your information.

9. Security

We use measures intended to protect information in transit and at rest, including HTTPS, restricted short-lived app sessions, credential hashing, private provider credentials, access controls, service quotas, and minimised provider requests. No online service can guarantee absolute security.

10. Children

RideHorizon is intended for adult motorcyclists. It is not directed to children, and we do not knowingly collect children's personal information.

11. Changes to this policy

We may update this policy as RideHorizon changes. We will publish the revised policy here, change the effective date, and provide an appropriate in-app notice if a change materially affects how we use personal information or an existing consent choice.