Privacy Policy

1. Who provides MotoFit

Adapted Hub LLC provides the MotoFit app and website. In this policy, “MotoFit,” “we,” and “us” refer to Adapted Hub LLC.

You can record and sync rides without signing in. You need to sign in with Apple, Google, or an email address only to use Crew.

2. Accounts and sign-in

MotoFit syncs your data under an account that Firebase Authentication, a Google service, creates for the app. At first this account is anonymous. It has an identifier, but no name, email address, or password, and you do not log in.

On iPhone and iPad, you can choose to sign in with Apple, with Google, or with an email address and a password. MotoFit links that sign-in to your existing account, so your rides, tracks, and settings keep the same identifier. If that sign-in already belongs to another MotoFit account, MotoFit switches to that account instead. Data that was already synced under the anonymous account is not moved to it.

When you sign in with Apple or Google, Firebase Authentication keeps the details that the provider shares for sign-in, such as your name, your email address, and the provider's identifier for you. If you choose to hide your email when you sign in with Apple, Firebase gets a private relay address from Apple instead. When you sign in with an email address and a password, Firebase Authentication keeps that email address and a protected form of the password, from which the password cannot be read back. MotoFit does not keep your password. MotoFit does not copy your email address into the data that it syncs, and it does not show your email address to other riders.

If you forget the password of an email sign-in, tap Forgot password? in MotoFit. If a MotoFit account uses the email address that you enter, Firebase Authentication sends an email to that address with a link to reset the password. The link opens a Firebase Authentication page where you choose a new password. MotoFit shows the same message whether or not an account uses the address, so that nobody can use the form to find out who has an account.

If you have not set a display name, MotoFit uses the name that Apple or Google shares as your display name. You can change it at any time. Apple shares your name only the first time that you sign in with Apple.

Apple provides Sign in with Apple under Apple's Privacy Policy. Google provides Google Sign-In under Google's Privacy Policy.

Your Apple Watch does not sign in by itself. Your iPhone gives the watch a sign-in token, so that the watch can sync under the same account. MotoFit also saves this token in the device keychain. When keychain sync is on for your Apple Account, Apple can copy the token to your other Apple devices, so that they use the same account.

3. Data MotoFit handles

Workout and health data

With your permission, MotoFit reads and writes data through Apple HealthKit. This data can include your date of birth or derived age, resting and maximum heart rate, live and recorded heart rate, active energy, workout time, distance, speed, route, and other workout details.

Location and ride data

During a workout, MotoFit can use precise location in the foreground and background. It uses this data to map your route, calculate distance and speed, detect track visits and lap crossings, and provide lap times. Before a ride, MotoFit can use your location to suggest the nearest saved track. Ride data can include routes, laps, tracks, track names, workout identifiers, and track identifiers.

Other riders never see your routes or your saved tracks, except the route of a ride that you share as a link, which section 7 describes. Apart from ride links, MotoFit shares your location with another rider only through the safety buddy feature, which section 5 describes.

Settings and app content

MotoFit stores settings and the content that you create in the app. This can include saved tracks and their names, lap data, workout summaries, a date of birth that you enter, auto-pause settings, display preferences, and your Crew profile. Synced records also include an identifier for the device that saved them.

You can export your data to a file, share an image or video of a ride, or share a link to a ride. You choose where that file or link goes. A shared file or link can include your route and ride details.

Analytics and diagnostics

MotoFit uses Owlmetry to understand app use and diagnose faults. The app on iPhone, iPad, and Apple Watch sends events to Owlmetry at ingest.owlmetry.com. The app also keeps a persistent anonymous Owlmetry identifier on your device. This identifier stays the same if you delete and reinstall the app on that device.

MotoFit sets your Owlmetry user to your MotoFit account identifier, which section 2 describes, whether your account is anonymous or signed in. It does this on each of your devices, so that events line up with the data synced to your account. When the app first sets it on a device, Owlmetry links the earlier events from that device to it. When you delete your account, MotoFit clears the Owlmetry user on your iPhone or iPad and on your Apple Watch, and each device gets a new anonymous Owlmetry identifier.

Events can include:

• App launches, sessions, moves between the foreground and the background, and the screens that you view.
• How you use features, such as when you start or end a ride, assign a track, or use Crew.
• Workout and track identifiers.
• Error details.
• Your device model, operating system version, app version and build, locale, and preferred language.
• Performance data, such as launch time. For network requests that the app makes, this includes the request address without its query parameters, the HTTP status, the duration, and the response size. A request address can contain an account or record identifier.

The app also sends user properties to Owlmetry. They hold only coarse states and counts: whether you are signed in, whether you finished onboarding, whether you allowed Health, Location, and notifications, the state of your Apple Watch, whether you have a Crew username, whether Share my rides and a safety buddy are on, and rounded ranges for the number of your followers, the riders that you follow, and your saved tracks.

Owlmetry events do not include your health values, your location, or your email address. Error details from the app can sometimes include a username, for example when a username that you tried to claim is already taken. Network requests also expose an IP address to the service.

MotoFit's server code, which section 10 describes, also sends diagnostics to Owlmetry. It sends one event each time a server function runs. The event is linked to the account identifier of the rider that it concerns and, when the app made the call, to the app session. The server code also sends counts of the notifications that it sends. These events hold only identifiers, counts, and error codes. They never include a username, a display name, search text, an email address, a location, or a track name.

Crash reports

If the MotoFit app crashes on iPhone, iPad, or Apple Watch, it sends a crash report to Firebase Crashlytics, which Google LLC provides. We use these reports to find and fix faults. A crash report holds the stack trace, which shows where in the app the crash happened. It also holds device and app details: the device model, the operating system version, the app version and build, whether the app was a test or a release build, and which Firebase environment it used. Each report carries a Crashlytics installation identifier. A crash report never includes your MotoFit account identifier, your name, your email address, your health data, or your location. Sending a report also exposes an IP address to Google.

Website data

The MotoFit website uses Firebase Hosting. Google can process basic connection data, such as an IP address and request logs, to deliver and protect the website. See the Firebase privacy information.

4. Crew

Crew is an optional part of MotoFit for following other riders. You must sign in with Apple, Google, or an email address to use it.

Your Crew profile

Your Crew profile has a display name and a username that you choose. You can also add a number plate, which is a race number and a plate color, and a profile photo. You pick the photo with the system photo picker, which gives MotoFit only the photo that you pick, not access to your photo library. MotoFit uploads that photo as a 256-pixel square JPEG image.

Who can see what

• Other MotoFit users: anyone who uses MotoFit and looks up your exact username can see your display name, username, and number plate. Signed-in riders can also find you by searching for the start of your username, and they can see your profile photo.
• Followers that you approve: other riders can ask to follow you, and you decide whether to accept each request. Your followers can see your ride-day summaries: the names of the tracks that you rode, how many motos you did, your total riding time, your best lap, when your first moto started and your last moto ended, and your time zone. They can also see whether you are riding now, and at which track. They can get a notification when you start riding for the day or move to another track, and a summary after your last moto. Followers never see your route or your coordinates, unless you send them a ride link.
• Anyone with your link: anyone who opens your rider page link can see your display name, username, and number plate, as section 6 describes.
• Anyone with a ride link: anyone who opens a link to a ride that you shared can see that ride, and your display name, username, and number plate if you have a Crew username, as section 7 describes.
• Follow requests and follows: a follow request, and the follow that it becomes when you accept it, holds the display names and usernames of both riders. Both riders can see it.

What MotoFit sends when you ride

When you have a Crew profile and Share my rides is on, MotoFit sends a short record to our servers when each moto starts and ends. It holds your display name, the time, your time zone, the app version, and the track name when the ride has one. The end record also holds the length of the moto, the distance, the lap count, and your best lap. Our server code uses these records to make your ride-day summaries and to send notifications. Only your account can read the records themselves. Your followers see only the summaries that this section describes. Share my rides is on by default when you set up a Crew profile.

Crew notifications

Crew can send you notifications, for example when a rider that you follow starts riding, when a rider asks to follow you, and for the safety buddy feature. Your iPhone or iPad registers for push notifications only after you allow notifications. When you have allowed them and you are signed in, MotoFit saves a Firebase Cloud Messaging push token for that device under your account, with the platform, the app version, and a device identifier. Our server code uses this token to send notifications through Firebase Cloud Messaging, a Google service, and the Apple Push Notification service. A notification can include a rider's name, a track name, and times.

Reports and blocks

You can report or block another rider in the Crew tab. Use the ellipsis (…) menu at the end of the rider's row, a long press on a feed row, or the menu on the safety buddy rider screen. Each offers Report… and Block….

When you report a rider, you choose a reason (name, photo, harassment, spam, or other), and you can add a note. The report stores a copy of the reported rider's display name, username, number plate, and photo, the reason, your note, and the account identifiers of both riders, so that we can review it. Only we can read reports. Other riders cannot. We do not tell the reported rider.

When you block a rider, the block ends any follows and any safety buddy arrangement between you. While the block is in place, neither of you can find the other in search, and neither of you can send the other a follow request or a safety buddy invitation. In MotoFit, the blocked rider cannot see your profile or your photo. We do not tell the blocked rider. To see the riders that you blocked, or to undo a block, go to Settings > Crew > Blocked riders.

Your Crew choices

• Accept or decline each follow request, and remove a follower at any time.
• Unfollow a rider at any time, or mute a rider to stop their notifications without unfollowing them. Muting a rider does not stop the notifications that you get as their safety buddy.
• Turn off Share my rides in Settings. Each of your devices then stops sending new rides to your followers, and stops sending your moto positions to a safety buddy, once that device has the new setting. Your Apple Watch checks for the new setting when MotoFit starts on it, and when you open its settings or its ride history. An I'm OK or Need help alert that you tap still includes your position. Summaries that you already shared stay until they expire, as section 12 describes.
• Change your display name, username, number plate, or photo, or remove your photo.

Other riders who get your Crew information, including your safety buddy, can see it on their own devices, for example in a notification. They can keep what they saw. We cannot recall information that another rider has already received.

5. Safety buddy

The safety buddy is an optional Crew feature. Not every version of MotoFit lets you set up a safety buddy. You can invite one rider who follows you to be your safety buddy. That rider becomes your safety buddy only after they accept. You can have one safety buddy at a time.

While you have an accepted safety buddy and Share my rides is on, the device that records your ride sends your precise location for your safety buddy. This includes where each moto starts, your latest position up to once every 90 seconds during the moto, and where the moto ends. Each position includes its accuracy and time. Your safety buddy also sees the start and end time, the length, and the track name of each moto, and MotoFit notifies them when each moto starts and ends.

During a ride, you can tap I'm OK or Need help. MotoFit sends that alert to your safety buddy with your latest position, when the device has one, and notifies them. If your device has no connection, MotoFit sends the alert when the connection returns.

Only your accepted safety buddy can see these positions and alerts. Your followers, other riders, and a rider who has not accepted your invitation cannot see them. The positions expire 48 hours after the moto starts, and the alerts expire 48 hours after you tap them. Both are then deleted automatically.

You or your safety buddy can end the arrangement at any time in the app. It also ends when your safety buddy stops following you, or when you remove them as a follower. After it ends, that rider can no longer load your positions or alerts.

6. Public rider pages

When you have a Crew username, MotoFit gives you a link to your rider page, for example motofit.app/u/yourname. You can share this link, or its QR code, so that other riders can find and follow you.

Anyone who has the link can open the page, also without MotoFit or an account. The page shows your display name, your username, and your number plate. It never shows your profile photo, your location, your rides, your tracks, or who you follow and who follows you.

The page asks search engines not to index it. A person who has your link can still share it again. A change to your name or plate can take a few minutes to show on the page. If you change your username, your old link no longer leads to you.

7. Ride links

When you share a ride from the MotoFit app on iPhone or iPad, you can include a link to that ride, for example motofit.app/r/Ab3dEf7hJk9m. You do not need a Crew profile or a sign-in to share a ride link, and MotoFit shows before you share that the link is public.

When you include a link, MotoFit sends a copy of the ride to our servers: a simplified route of up to 200 points, the date, time and time zone, the track name, the ride time, the distance, the top and average speed, the lap count, the lap times and best lap, and your distance and speed units. It does not include your heart rate, your energy, or any other health data.

Anyone who has the link can open the ride, on the web without MotoFit or an account, or in the MotoFit app. The page shows a map of the route, an outline of the route, the date, the track name, the stats, and the laps. It shows your display name, username, and number plate only when you have a Crew username; otherwise it says "A MotoFit rider". The route shows where you rode.

Apple Maps draws the map on the page from the route. The browser of the person who opens the page loads the map image from Apple, so Apple receives the route and that browser's connection data, under Apple's Privacy Policy. We do not store map images.

The page asks search engines not to index it. A person who has the link can share it again. When you share the same ride again, the link stays the same and shows the ride's latest details.

The page is removed when you tap Stop Sharing in the app, when you delete the ride, or when you delete your account. A person who opens the link after that sees that the ride is no longer shared. Previews that messaging apps already made of the link, and anything that a person already saved or received, cannot be recalled.

8. Android waitlist

MotoFit is not yet available for Android. On the MotoFit website, you can join a waitlist to hear when it launches. When you join, we store:

• Your email address.
• The username of the rider whose link brought you to the waitlist, if there is one.
• A coarse platform (Android, iPhone, or other), from your browser.
• Your browser language.
• When you joined, and how many times you signed up with the same address.

We use this data only to tell you when MotoFit for Android launches, and to count how many people are waiting for it. We do not use it for advertising, we do not sell it, and we do not show it to other riders, including the rider whose link you followed.

To limit abuse, our server code counts the sign-ups from each network address for one hour. It stores a one-way hash of the address, not the address itself.

The waitlist is stored in Cloud Firestore, part of Google's Firebase, in the Google Cloud region us-central1, in the United States. We keep your sign-up until MotoFit for Android launches and we have told you, or until you ask us to delete it. To remove your email address from the waitlist, email us at jay@adaptedhub.com.

9. How MotoFit uses data

• Record and display workouts, routes, tracks, laps, heart rate, energy, distance, and speed.
• Identify saved tracks and organize future rides.
• Sync app data between your devices.
• Sign you in to your account, and send you a password reset email when you ask for one.
• Run Crew: show your profile to other riders, deliver follow requests, make ride-day summaries for your followers, and send Crew notifications.
• Review reports about riders and keep Crew safe.
• Share your location with your accepted safety buddy, and deliver your safety alerts.
• Show your public rider page to people who have your link.
• Show a ride that you share as a link to people who have the link.
• Tell you when MotoFit for Android launches, if you join the waitlist, and count how many people are waiting for it.
• Operate, secure, diagnose, and improve MotoFit, including with analytics and crash reports.
• Respond to support requests and meet legal duties.

MotoFit does not use your health data for advertising. It does not sell personal data. It does not use cross-app tracking.

10. Storage, sync, and services

MotoFit stores data on your device. Health data is also stored and controlled through Apple Health when you grant access.

MotoFit syncs workout, health-derived, track, lap, route, and settings data, and your Crew data, through Cloud Firestore, part of Firebase, which Google LLC provides. This data is stored under your account identifier. Other MotoFit users cannot read your private data. They can read your Crew data, and the rides that you share as a link, only as sections 4 to 7 describe.

MotoFit's server code runs on Cloud Functions for Firebase. It reserves usernames, answers username searches, handles follow requests and safety buddy invitations, files reports, applies blocks, makes ride-day summaries from your ride records, and sends notifications. It also saves the rides that you share as a link, removes a ride link when you delete its ride, shows public rider pages and ride pages, and saves Android waitlist sign-ups. It also keeps a count for each account of how often some Crew actions are used, to limit abuse.

The iPhone, iPad, and Apple Watch apps send crash reports to Firebase Crashlytics, which Google LLC provides, as section 3 describes.

MotoFit's Firebase database and server code are in the Google Cloud region us-central1, in the United States. Google processes this data as our service provider, under the Firebase privacy information and Google's Privacy Policy. Apple's Privacy Policy covers your data in Apple Health. MotoFit syncs only the ride data that this policy describes, not the rest of your Apple Health data.

Selected analytics and diagnostic data, from the app and from our server code, is sent to Owlmetry as section 3 describes. The map on a ride page comes from Apple Maps, as section 7 describes. We disclose data to a service only when it is needed to provide, protect, or improve MotoFit, or when law requires disclosure.

11. Permissions and your choices

MotoFit asks for access only when a feature needs it:

• HealthKit: to read and save workout and health information.
• Precise and background location: to record a ride while the app or screen is not active. If you have a safety buddy, MotoFit also uses your location to share your position with them.
• Notifications: to show reminders from the app itself, such as a ride that is still paused, and, if you use Crew, notifications about other riders and your safety buddy. MotoFit registers for push notifications only after you allow notifications.
• Photos: MotoFit does not ask for access to your photo library. The system photo picker gives MotoFit only the photo that you pick for your Crew profile.

You can change these permissions in Apple Health or device Settings. Some features will not work if you remove a required permission.

12. Retention and deletion

Local data stays on your device until you delete it in MotoFit, remove the app, or erase the device. In the device keychain, the Owlmetry identifier and the sign-in token for your MotoFit account can stay after you remove the app. The Owlmetry identifier stays until you erase the device, or until MotoFit replaces it, for example when you delete your account. When keychain sync is on for your Apple Account, Apple also keeps the sign-in token in your synced keychain, so erasing one device does not remove it from your other devices. Data in Apple Health remains subject to your Apple data settings and retention controls.

Your private synced data stays in Firestore until you delete it in MotoFit, or until your account is deleted. When you delete a ride or a track in MotoFit, MotoFit also deletes its synced copy. A small deletion record, with the item's identifier and the time of deletion, stays so that your other devices do not restore the item.

Crew data is kept as follows:

• Ride records and the ride-day summaries that your followers see expire about 30 days after the ride, and are then deleted automatically.
• Safety buddy positions expire 48 hours after the moto starts, and safety alerts expire 48 hours after you tap them. Both are then deleted automatically.
• Your profile and username stay until you change them or your account is deleted. Your photo stays until you remove it or your account is deleted. Your riding status keeps only your latest ride.
• Follow requests, follows, and your safety buddy arrangement stay until you or the other rider remove them, or until your account is deleted.
• Each block stays until you undo it, or until your account is deleted.
• A push token is replaced when it changes, and deleted when Firebase Cloud Messaging reports that it no longer works.

A ride link stays until you stop sharing it, delete the ride, or delete your account.

Android waitlist sign-ups are kept as section 8 describes.

Firebase Authentication keeps your account, including the name and email address from your sign-in and the protected form of the password of an email sign-in, until your account is deleted.

We keep Owlmetry analytics and diagnostic data only for as long as it is reasonably needed to operate, secure, and improve MotoFit, or to meet a legal duty.

As the Firebase privacy information states, Crashlytics keeps crash stack traces and the identifiers that go with them for 90 days.

In MotoFit, you can delete rides and tracks, stop sharing a ride link, remove your profile photo, remove followers, unfollow riders, unblock riders, and end a safety buddy arrangement. You can manage Health data in Apple Health.

You can also delete your whole account in MotoFit on iPhone or iPad. In Settings, tap Delete Account. After you confirm, MotoFit deletes your MotoFit account and the data synced to it: the synced data of your rides, your tracks, your settings, your Crew profile, username, and photo, your follows and follow requests, your list of blocked riders, your safety buddy data, your ride links, the reports that you filed, and your sign-in account. Workouts saved in Apple Health stay in the Health app. Reports that other riders filed about you, with the copy of your profile and photo that each report holds, are kept as a safety record. A device that was offline can still send data that it held for up to about an hour after the deletion. MotoFit deletes that data in a second pass. Instead of using the app, you can email us at jay@adaptedhub.com to delete your account and its data.

If you signed in with Apple, Google, or an email address, tell us the email address of that sign-in or your MotoFit username, so that we can find your account. If you never signed in, your data is stored under an anonymous identifier, and we might not be able to identify data that cannot be linked to your request.

You can also stop using Sign in with Apple with MotoFit in your Apple Account settings, and remove MotoFit's access in your Google Account settings. This does not delete the data that MotoFit holds. To delete that data, delete your account in MotoFit, or email us.

13. Children

MotoFit is not directed to children under 13. Crew is not meant for children under 13 either. We do not knowingly collect personal data from a child under 13. If you believe that a child has provided personal data, contact us. We will investigate and delete data that we control when required.

14. Security

We use reasonable technical and organizational measures to protect data. No storage or transmission method is completely secure. You are responsible for securing your Apple devices and the Apple or Google account, or the email address and password, that you use with MotoFit.

15. International processing

Apple, Google, and Owlmetry can process data in countries outside your country. Privacy laws in those countries can differ from your local laws. We use these services only for the purposes described in this policy.

16. Legal disclosure

We can preserve or disclose data when law requires it, or when this is reasonably necessary to protect rights, safety, security, prevent fraud, or respond to a valid government request.

17. Policy changes

We can update this policy when MotoFit or its legal duties change. We will publish the new policy on this page and change the effective date. Please review the policy before you continue to use MotoFit after a material change.

18. Contact

For privacy questions or requests, email Adapted Hub LLC at jay@adaptedhub.com.