This Privacy Policy describes how Let's Ride LLC ("Let's Ride," "we," "us," or "our") collects, uses, and shares information about you when you use our mobile applications, website at letsrideoffroad.com, and related services (collectively, the "Services"). By using the Services, you agree to the collection and use of information in accordance with this policy.
1. Information we collect
Information you provide
- Account information: name, email address, phone number, password, profile photo, vehicle and rider preferences.
- Content: rides, routes, posts, photos, comments, messages, and other content you submit to the Services.
- Payments: if you purchase a paid membership or business plan, our payment processor collects payment information; we do not store full card numbers on our servers.
- Ride questions: answers you give after a ride — for example, whether your phone had signal out there, or on iPhone which carrier you use — may be used, without your name, to describe places to other riders.
- Communications: when you contact us for support or other inquiries, we retain a record of your communication.
Information collected automatically
- Location data: with your permission, we collect precise GPS location data to enable ride tracking, map-based discovery, and proximity features. You can revoke location access from your device settings at any time. Background location collection only occurs when you have an active ride session. Signal on every ride: each position recorded on a ride also notes your phone's signal at that moment — whether you had data, emergency calls only, or no service, the network type (such as 5G or LTE) and, on Android, its strength. This happens on every ride, whether or not you help map signal, and is kept with your ride (see "Data retention"). Unless you turn on “Help map signal for other riders” (below), these readings stay with your own ride and are never added to the map.
- Device information: device model, operating system, app version, language, and a generated device identifier.
- Usage data: how you interact with the Services, including features used, pages viewed, and approximate timestamps.
- Internet address and sign-in log: We record the internet address your requests come from in our logs, and on each signed-in device its address and the app or browser it used, to keep your account secure; we delete them within 90 days — unless we need to keep them longer for a safety report, a legal request, or to protect riders. When you accept a waiver, we keep its address with the waiver as a legal record.
- Cell signal map (only if you turn it on): "Help map signal for other riders" is off unless you turn it on. We offer it after a ride, when you review it, when you check in, and when the app is open inside a riding place.
- What turning it on adds: we add your phone's signal — data, emergency calls only, or no service — its strength, the network type (such as 5G or LTE) and your carrier, with where it was measured, to the map: the readings already noted with your ride positions (from when you turn it on; saying yes when you review a ride adds that whole ride), one each time you check in, and readings while the app is open inside a riding place. Never in the background otherwise. On iPhone, when you're on cell data, we tell your carrier from the network your connection comes through — we keep only the carrier's name, never your connection's address.
- Never your exact spot: for the map we keep only the area around each reading, about 250 m (800 ft) across, and we leave out the first and last half mile of every ride so where you start and end isn't mapped.
- Folded into counts: within about an hour (for a ride, a day after it ends) readings become counts for each area and carrier, and the map readings themselves are deleted. The counts hold no name, time of day or order you passed through; a coded mark (not your name) lets each rider count only once and is removed when you delete your account.
- Turning it off: any time in Settings › Privacy; that also deletes any readings not yet counted.
- Crash and diagnostic data: we collect diagnostic data to identify and fix issues. In the app, for some sessions and whenever the app hits an error, our error-monitoring provider (Sentry) records a replay of what the screen showed, with all text and anything you type hidden and maps left out, so we can see what went wrong. On the web app, a replay is recorded only when an error happens, with anything you type hidden. In the app, you can turn off "Share how I use the app" in Settings › Your data (it's on unless you turn it off): that stops app analytics, and these screen replays from the next time the app starts; crash reports still come to us so we can fix problems.
- Analytics: the app uses Google Analytics for Firebase to count how features are used. We never link your data to Google Ads or any ad network.
- Cookies: We only use cookies that keep you signed in.
Information from third parties
- If you sign in with Apple, Google, or another supported provider, we receive basic profile information from that provider.
- Map tiles and place data are provided by Mapbox and other map providers.
2. How we use information
We use the information we collect to:
- Provide, maintain, and improve the Services, including features like ride tracking, discovery, and rewards.
- Personalize your experience and surface relevant trails, events, and businesses near you.
- Communicate with you about your account, security, and product updates.
- Process payments and manage memberships.
- Detect, prevent, and respond to fraud, abuse, and security incidents.
- Comply with legal obligations.
3. How we share information
We do not sell your personal information. We share information in the following limited circumstances:
- With other users: content you choose to share publicly (rides, posts, profile information) is visible to other users. You control your privacy settings for individual posts and rides.
- Riders on your ride: On a ride, the riders on it see where you are while you ride and your trail afterwards — never a rider you've blocked or who blocked you. If you're under 18, only the ride's creator, leader and tail, the staff of a business running it and your friends see your spot and trail. A trail that leaves the app as a file is only ever your own, or a trimmed line with no times if you're an adult with a public profile.
- Cell signal map: if you help map signal, other riders see what riders measured at a place, by carrier — only for areas at least 5 different riders have measured, with the day it was last measured. Never a path, a time of day, or who measured it.
- With your emergency contact: when you start a ride with a check-in, your first name, where you started (with a map link) and when you are due back. When an alert goes — you are not back by your time, or you mark yourself hurt, stopped for the night, or broken down and ask us to tell them — your first name, your last known position (when it was taken and how accurate it is), start, destination, rig and planned route, your phone's battery level then, and your phone number so they can give it to rescuers. A private link (no sign-in) shows this until you check in or your ride ends, for 14 days at most. We record when the link is opened and when your contact tells us they reached you.
- Service providers: we share information with companies that run parts of the Services for us, only for that work:
- Amazon Web Services — hosting, storage and email
- Twilio — text messages
- Google — Firebase Analytics, push notifications, Google sign-in and Google Play billing
- Apple — Sign in with Apple, push notifications and in-app purchases
- Sentry — error reports and screen replays, with text and typing hidden
- Mapbox — maps
- Stripe — payments
- Resend — our newsletter
- Upstash — limiting repeated sign-in and sign-up attempts on the web app
- Cloudflare — the check that a person, not a bot, is signing up or resetting a password on the web app
These providers are contractually limited in how they may use your information. We never link your data to Google Ads or any ad network.
- Legal and safety: we may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Let's Ride, our users, or others.
- Business transfers: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.
4. Text messages (SMS)
Let's Ride sends text messages for one purpose: ride check-in alerts to the emergency contacts riders choose. We do not send marketing or promotional text messages.
- Who we text: a person a rider has named as their emergency contact, and only after that person has agreed. A rider who is out on a ride may also text our number (for example, to say they are running late or are back) and receive a reply.
- How someone agrees: we never send the first text. The rider sends the invitation from their own phone, and the contact agrees by texting YES to our number, (844) 410-7433. Until the contact texts YES, we send them nothing. Agreeing is not a condition of any purchase.
- What we send: messages about the rider's rides: started a ride (where and when they are due back), changed their back-by time, not back by the time they set, marked hurt or broken down, stopped for the night, added time, stopped sharing their location, riding again, back — and the rider's last position when you text WHERE. We also send a one-time note when we add a new kind of message, and we reply when you text us (for example HELP).
- How often: message frequency varies with how often the rider rides and checks in, usually a few messages per ride. Message and data rates may apply.
- Stopping texts: reply STOP at any time to stop all texts from us; you may receive one message confirming you have been unsubscribed. Reply START to begin again, or HELP for help. You can also contact privacy@letsrideoffroad.com. A rider can remove a contact in the app at any time, which also stops texts to that contact.
- What we keep: the contact's name and mobile number as the rider entered them, and their email if the rider gave it, when the contact agreed or stopped, the messages we sent, the replies we receive such as YES, STOP or HELP, and whether our messages were delivered. We use this only to run check-in alerts, to honor opt-outs, and to keep the service secure. Records of when a number agreed or stopped are kept even after a contact is removed, so we never text a number that told us to stop. Contacts can ask us to stop texts or delete their number and messages at privacy@letsrideoffroad.com.
- Email backup: if a text can't be delivered for a technical reason and the rider gave the contact's email, we send the same message by email — never to a contact who replied STOP or said no.
- No sharing for marketing: we do not sell, rent, or share mobile phone numbers, text-message opt-in data, or consent with any third party or affiliate for their marketing or promotional purposes. Twilio delivers our messages for us. The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.
5. Your choices
- Location: you can revoke location permissions at any time from your device settings. Some features will not work without location access.
- Profile visibility: you can adjust who sees your rides, posts, and profile in app settings.
- Notifications: you can enable or disable push and email notifications at any time.
- Account deletion: you can request deletion of your account and associated data by contacting privacy@letsrideoffroad.com or using the in-app delete account flow.
- Cell signal map: turn "Help map signal for other riders" off at any time in Settings › Privacy.
- Text messages: reply STOP to any text from us to stop all texts; see "Text messages (SMS)" above.
- Marketing opt-out: you can unsubscribe from marketing email at any time using the link in any marketing email we send.
6. Data retention
We retain your information for as long as your account is active or as needed to provide the Services. When you delete your account, we delete or anonymize your personal information within a reasonable time, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.
Backups: We keep backup copies of our databases and stored files so we can recover from an outage, an attack or a mistake. Each copy is deleted within 90 days of being made, unless we must keep it longer for a legal matter, and then only until that matter ends. We don't use backups for anything else, except where the law requires it or we need it for a legal matter. If we ever restore from a backup, we first erase again every account deleted since that backup was made.
Safety records are kept on their own clock, even after an account is deleted: check-in alert texts (the words sent, which can include the rider's position, when, and whether they were delivered) are deleted 2 years after they are sent, and records of when a number agreed to texts or stopped them are deleted 5 years after that number's last such record, so we never text a number that told us to stop. Check-ins themselves (the back-by time, start, destination and rig) are kept as safety records, even after an account is deleted, and deleted 2 years after the ride. Ride positions, with the signal noted on each, are kept as part of your ride while your account is open; when you delete your account, your positions are erased, including on rides others joined (the ride itself stays for them). Cell signal: when you delete your account, your readings not yet counted are deleted and you are taken out of the rider counts. The area counts themselves hold no one's name and are kept with no end date.
When you check in at an event or a place, or scan a booth, we check your phone's location against the spot, keep whether you were there, and delete the location itself after 30 days.
7. Children and riders under 18
The Services are not directed to anyone under 16, a stricter standard than COPPA's under-13 threshold. We do not knowingly collect personal information from anyone under 16. Our sign-up flow requires age verification — a date of birth, or an age signal provided by your device's app store where required by law — and blocks registrations from anyone under 16; when a registration is refused for age, the submitted date of birth is not stored. If you are a parent or guardian and believe your child has provided information to us, please contact us and we will delete it.
Riders who are 16 or 17 can use the Services with a parent or guardian's permission (see our Terms). We do not sell anyone's personal information or share it for advertising, at any age, and we do not show ads. A parent or guardian of a rider under 18 can ask to see or delete that rider's information by emailing privacy@letsrideoffroad.com; we will ask for proof that you are the rider's parent or guardian before acting on it, and may decline if we cannot confirm it.
8. Security
We use administrative, technical, and physical safeguards designed to protect your information. No system is perfectly secure, and we cannot guarantee absolute security.
9. International users
The Services are operated in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States.
10. California privacy rights
This section is for California residents, but we offer the same to every rider.
- What we collect and who we share it with: the kinds of personal information we collect are listed in section 1, and the kinds of companies and people we share it with in section 3.
- See, correct, or delete your information: you can change most of your information in the app, delete your account in the app, or email us to ask for a copy, a correction, or deletion. We will check that the request comes from you, and answer within 45 days, or tell you within that time if we need up to 45 more. We will not treat you differently for asking.
- No selling or sharing: we do not sell personal information or share it for cross-context behavioral advertising, as the California Consumer Privacy Act (CCPA) defines those terms. Because of our size, the CCPA does not currently apply to us; if that changes, we will meet it. We answer the requests above either way.
- Do Not Track: we do not track you across other companies' websites or apps, and no other company collects information through the Services to follow you across other companies' sites or apps for advertising; the companies in section 3 (such as Google for analytics, Sentry for errors, and Mapbox for maps) provide services to us. Browsers' "Do Not Track" signals have no common standard, so we do not change anything when we receive one. Because we don't sell or share your information, there is nothing for such a signal, or a Global Privacy Control signal, to switch off. In the app, Google Analytics for Firebase counts how features are used, with an identifier for the app install — never your device's advertising ID, and never for ads.
- Direct marketing: we do not give personal information to other companies for their own direct marketing (California's "Shine the Light" law).
- Changes: we tell you about material changes as described in section 11. The date at the top of this policy shows when it last changed.
To ask, email privacy@letsrideoffroad.com.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Services or by email. The "Last updated" date at the top of this policy reflects when it was last changed.
12. Contact us
Questions about this policy or our privacy practices? Email privacy@letsrideoffroad.com.