Privacy Policy

At a glance

• Your bikes, logs and records belong to you. We never sell your data.
• Receipt and odometer scanning sends the photo to Google's Gemini API to read it. Fuel and odometer scans are read and discarded; service and expense receipts are kept with your log until you delete them.
• Location is used only while the app is open, to show workshops near you. We never track you in the background.
• Face ID / fingerprint unlock happens entirely on your device. Biometric data never reaches us.
• You can export everything, opt out of analytics, and delete your account — all in-app, no email required.

1. Introduction

MYRIDESG PTE. LTD. (UEN 202635558K) ("we", "us", or "our") operates the MyRideSG mobile application for iOS and Android and the website at myridesg.com (together, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: You can sign in with Apple, with Google, or with a one-time email code. From Apple or Google we receive your name and email address (and profile picture, from Google) — never your password. If you choose Apple'sHide My Email, we only ever see the private relay address Apple creates for you.

Rider Data: Information you enter into the Service, including motorcycle details (make, model, plate number), maintenance logs, fuel fill-up records, mileage readings, expense records, and document expiry dates (COE, insurance, road tax).

Photos You Scan: If you use the scan feature, the photo you take of a receipt, invoice, or odometer is processed as described in Section 4. Photos are only ever captured when you tap the scan or attach button — the app never reads your camera or photo library on its own. The camera is also used, only when you open the scanner, to read the QR code on a shop's screen when you collect a chop or use a reward — that scan reads the code and nothing else, and no photo is taken or stored.

Location: With your permission, your device location while the app is in use, so we can show workshops near you and how far away they are. See Section 7.

Usage and Device Data: Information about how the Service is used — screens opened, features used, device type and OS version. See Section 5.

Crash Reports: If the app crashes or something breaks, a technical report is sent to us. See Section 6.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To authenticate your identity and manage your account
• To store and display your motorcycle and maintenance data
• To read receipts and odometer photos you scan, so log forms can be filled in for you
• To send service reminders, expiry alerts, and push notifications you have opted into
• To calculate and display fuel efficiency, cost per km, and spending analytics
• To operate the XP rewards, quests, and loyalty programme
• To show workshops near you and let you contact or navigate to them
• To improve and personalise the Service
• To communicate important updates about the Service

4. Receipt and Odometer Scanning

The scan feature uses AI to read the photo you take and fill in the log form for you. The photo is sent over an encrypted connection from our servers to Google's Gemini API, which returns the extracted fields (for example the workshop name, date, and amounts). Google processes these images solely to provide this service to us and does not use them to train its AI models.

What happens to the photo depends on the type of scan:

• Fuel and odometer scans are read and discarded — the photo is not stored anywhere after the fields are extracted.
• Service invoices and expense receipts are kept with the log entry they belong to, so you can look at the original later. Deleting the log entry (or your account) deletes the photo.

Scanning is always optional — every form can be filled in by typing. Scans are rate-limited per rider per day to keep the feature fair and secure.

5. Usage Analytics

We record how riders move through the app — which screens are opened, which features are used, and where a form is abandoned — so we can find what is confusing or broken and fix it. We rely on the Business Improvement exception under Singapore's Personal Data Protection Act for this.

These records never contain your name, email address, phone number, vehicle plate number, NRIC, location, or anything you typed into the app. We store them in our own database, never sell them, and never share them with advertisers. We keep them in our database for 180 days, after which they are deleted automatically. You can turn this off at any time under Account → Privacy and data → Share usage data, and deleting your account removes the link our systems hold between these records and you.

We also send these events to PostHog, a product-analytics service hosted in the EU, which acts as a processor on our behalf (see Section 10). PostHog receives event names and your random account identifier, plus your device model, operating system version, app language and time zone. It never receives your name, email, plate or precise location, and it does not record your screen. PostHog keeps the events under its own retention period, which we do not control. When you delete your account, we also ask PostHog to delete your events and the profile tied to your random identifier. PostHog completes this in the background, so it may not be immediate. If you turn off Share usage data, we stop sending events to PostHog once your preference has loaded.

6. Crash Reporting

We use Sentry, a crash-reporting service, to learn when the app crashes or an error occurs so we can fix it. Before a report leaves your device, we scrub it of personal details — vehicle plate numbers, email addresses, and phone numbers are removed. Reports contain technical context (device model, OS version, what the app was doing) rather than the content of your logs.

7. Location

If you grant location permission, we use your position only while the app is open to show nearby workshops and their distances. We do not track your location in the background, we do not keep a history of where you have been, and location is never attached to your fuel, service, or expense records. You can use the Service without granting location — workshop search simply won't sort by distance.

8. Biometric Unlock

You can choose to lock the app behind Face ID, Touch ID, or your device's fingerprint unlock. The biometric check is performed entirely by your device's operating system — your face or fingerprint data never leaves your device and is never visible to us.

9. Sign-In Providers

We use Apple and Google solely to authenticate you. We access only your basic profile information (name and email address) as permitted by the scopes you authorise — we do not access your iCloud, Gmail, Google Drive, contacts, or any other Apple or Google service data. Your use of these sign-in options is also governed byApple's Privacy Policy andGoogle's Privacy Policy. One-time sign-in codes are delivered by our email provider, Postmark.

10. Service Providers

We share data with a small number of vendors, only so they can perform services for us, under their confidentiality and data-protection terms:

• Supabase — cloud database, authentication, and file storage. This is where your account and rider data live.
• Google Gemini API — reads the photos you scan (Section 4).
• Google Maps — renders the workshop map inside the app.
• Sentry — crash reporting (Section 6).
• PostHog — product analytics, hosted in the EU (Section 5).
• Postmark — delivers sign-in code and Service emails.
• Expo — delivers push notifications and app updates.
• Google Wallet — only if you tap "Add to Google Wallet", your name and member code are sent to Google to create your club card pass. On iPhone, the Apple Wallet pass is generated by us and saved straight to your device — we don't send anything to Apple.

We may also disclose data:

• Legal Requirements: if required by law, regulation, or valid legal process.
• Business Transfer: in the event of a merger, acquisition, or sale of assets, user data may be transferred with appropriate notice.

We do not sell, trade, or rent your personal information to anyone.

11. Data Retention and Deletion

We retain your personal data for as long as your account is active. You can delete your account and associated data at any time, in-app, at Account → Privacy and data → Delete account — no need to contact support. Deletion is immediate and cannot be undone. We also ask PostHog to delete the analytics events we sent it, which it completes in the background (Section 5). Some records may be retained where required by Singapore law. You can also export everything you have entered as a CSV backup from the same screen, and you may request deletion by contacting us at hello@myridesg.com if you prefer.

12. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and secure cloud infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

13. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Export your data (in-app, as CSV)
• Request deletion of your data, including the analytics events we sent to PostHog
• Withdraw consent at any time by deleting your account
• Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore

To exercise any of these rights, contact us at hello@myridesg.com.

14. Cookies and Local Storage

On the website, we use browser local storage and session cookies to maintain your login session and application preferences (e.g., theme, settings). We do not use third-party advertising cookies. You may clear cookies and local storage through your browser settings, which will log you out of the Service.

15. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

17. Governing Law

This Privacy Policy is governed by the laws of Singapore, including the Personal Data Protection Act 2012 (PDPA). Any disputes shall be subject to the exclusive jurisdiction of the courts of Singapore.

18. Contact Us

If you have any questions about this Privacy Policy, please contact us:

MYRIDESG PTE. LTD. (UEN 202635558K)
Email: hello@myridesg.com
Website: https://myridesg.com
Singapore