Brightwatch Ride Privacy Policy

Brightwatch Ride is provided by Brightwatch Labs LLC, a Tennessee limited liability company ("we", "us"). Contact: hello@brightwatchlabs.com, [MAILING ADDRESS].

1. Summary

• Brightwatch Ride is a family e-bike ride-alert app used by a parent/guardian and a rider aged 13 or older, with the rider's knowledge and consent.
• Ride data (locations, routes, speeds, alerts, settings) is end-to-end encrypted on the family's phones. Our relay server only passes along encrypted data that we cannot read.
• We do not sell or share your personal information (including for targeted advertising), and we never sell or share location data.
• No advertising SDKs and no analytics SDKs are included in the app.
• On-device ride and location history is kept for 30 days by default; the parent can choose 7 to 90 days, after which it is automatically deleted.
• Encrypted messages on our relay are deleted within 7 days.
• Brightwatch Ride is not an emergency or medical service and does not contact 911 or emergency responders. In an emergency, call 911.

2. Information processed on your devices

On the rider's phone, and shared only with the paired parent/guardian phone:

• Location and route points, speed, distance and duration during rides (started manually or automatically).
• Motion & Fitness activity (for example "cycling") used on-device to detect rides and possible falls. Raw motion data is not uploaded.
• Low-power location wake-ups between rides, used only on-device to notice a ride starting. They are not stored as a route or sent anywhere.
• Alerts: informational speed alerts, Home/School zone arrivals/departures, possible-fall alerts (off by default), and "tracking off" status when permissions are disabled.
• Bike profile (class, make, model, serial number, photos). Stays on the device and is not uploaded.
• Ride history, routes and alerts auto-delete on-device after the retention period the parent chooses: 30 days by default, configurable from 7 to 90 days.

3. Information our servers handle

Our relay (hosted on [HOSTING PROVIDER, e.g. Cloudflare]) stores only:

• Encrypted message blobs that we cannot decrypt, deleted when the recipient device confirms receipt and in any case within 7 days.
• Random family channel identifiers that are not linked to names, emails or phone numbers.
• Expo push tokens for each paired device, used only to send a generic notification such as "New update from your family". Notification text never contains ride data. Push delivery is handled by Expo and Apple Push Notification service.
• Temporary encrypted pairing records (expire within 10 minutes).
• Missed check-in metadata (per random channel id): the time the rider's phone last sent any message, whether a missed check-in notification was already sent for the current gap, and whether the parent has this feature turned on (a plaintext on/off flag that mirrors an encrypted setting). If the rider's phone has been silent for more than 7 hours, we send the parent a generic push ("Tracking may be off - open Brightwatch Ride"), once per gap. This metadata reveals only when the rider's phone was last active, never where or what. The parent can turn this off in Settings; the timestamp is deleted when the family unpairs.
• Our hosting provider may process IP addresses and request metadata transiently to operate the network. We configure the relay not to log request contents.

We do not have your name, email, location history or ride content on our servers.

4. Subscriptions

Purchases are processed by Apple and our subscription provider RevenueCat, which receive an anonymous app user ID and purchase records. We do not receive your payment card details.

5. Children and teens

Riders must be 13 or older. If someone enters an age under 13, setup is blocked and nothing they entered is stored or sent. A parent/guardian sets up the family and accepts these terms. The rider sees a clear consent screen explaining what is shared before any tracking begins, must accept pairing on their own phone, sees a persistent "Your location is shared with [parent name] during rides" indicator, and the iPhone shows location indicators during rides. Brightwatch Ride is not designed for covert monitoring and must not be used that way. We do not knowingly collect personal information from children under 13; if you believe we have, contact us at hello@brightwatchlabs.com.

6. Your choices

• The rider can stop a ride, turn off automatic detection, or revoke Location/Motion permissions at any time in iOS Settings (the parent is notified that tracking is off).
• Either family member can unpair or reset the app, which deletes local data and asks the relay to delete any pending encrypted messages.
• Deleting the app deletes local data and encryption keys.

7. Security and encryption

All ride data sent between family phones is end-to-end encrypted (X25519 key exchange and XSalsa20-Poly1305 authenticated encryption); private keys are stored in the iOS Keychain. Data in transit to the relay also uses TLS. No system is perfectly secure.

7A. No sale, no sharing, no ads, no analytics

We do not sell, rent, or share personal information with third parties for their own purposes or for advertising. The app contains no advertising SDKs and no analytics or tracking SDKs. Service providers that we use (Apple, Expo push, RevenueCat, [HOSTING PROVIDER]) process only the limited data described above to operate the service.

8. State privacy rights

Depending on where you live (for example Tennessee, California, or other states), you may have rights to access or delete personal information. Because we do not hold readable personal data, most requests are fulfilled by deleting data on your devices. Contact hello@brightwatchlabs.com.

9. Changes

We will update this policy in the app and indicate the date of changes.