Privacy Policy

    Effective: October 8, 2026

    Ler em português

    1. Who is responsible for your data

    The data controller is Giovanne Faccio Tarcitano, a Brazilian sole proprietorship registered under CNPJ 59.366.154/0001-44, based in Curitiba, Paraná, Brazil.

    Data protection officer: Giovanne Faccio Tarcitano, at contato@monoriders.com.br.

    2. Data we collect

    • Account: name, email and photo from your Google or Apple account, your account identifier, and the profile name and photo you choose. We do not use passwords.
    • Rides: GPS location during a ride, including while the app is in the background as long as the ride is active, plus speed, distance, time and route.
    • Unicycle: model, firmware version, telemetry (battery, temperature, power, alarms) and settings.
    • Hidden addresses: places you mark so they do not appear on your rides.
    • Emergency contacts: name and phone number of the people you add.
    • Group rides: real-time location, speed and distance while you are in a group.
    • Content: posts, comments, routes, places, events, segments, suggestions, reports and support tickets, including screenshots and logs you attach.
    • Device and usage: phone model and OS, app version, app identifiers, push notification token, usage events, crash reports and the IP address received by our providers.
    • Age check: only the result is stored, and only on your device. Your birth year is never stored or sent.

    3. How we use data and our legal bases

    • Creating your account, recording and syncing rides and providing community features: performance of a contract (LGPD art. 7, V).
    • Sending the emergency alert to your contacts: protection of life and physical safety (art. 7, VII).
    • Background location and group ride sharing: consent, which you can withdraw at any time in your phone's permissions or by leaving the group (art. 7, I).
    • Understanding app usage, fixing errors, preventing fraud and cheating and keeping the community safe, including moderation: legitimate interest (art. 7, IX).
    • Complying with legal obligations and defending legal claims: art. 7, II and VI.

    We do not sell your data and do not use it for advertising.

    4. What other people can see

    • Rides: private by default. They appear in the feed only if you publish them or turn on "Publish my rides to the feed". A published route hides your hidden addresses and the start and end distance you set.
    • Public profile: name, photo, unicycle brand, ride count, achievements and the approximate area (about 20 km) of your latest post.
    • Profile photo: anyone with the link can open it.
    • Segment challenges: on by default. Your name and time appear on a segment leaderboard when a saved ride passes through it. You can turn this off under "Automatically join segment challenges".
    • Rankings: only if you choose to join.
    • Group rides: other members see your real-time position while you are in the group.
    • Heatmap: only aggregated, anonymized data (section 7).

    5. Who we share data with

    We share data only with service providers that process it on our behalf, in these categories:

    • Cloud infrastructure, database and server functions
    • Sign in with Google and Apple
    • SMS delivery for emergency alerts
    • Push notifications
    • App usage analytics and crash monitoring
    • Moderation and support triage by automated tools, including third-party artificial intelligence, which receive posted content, reports and support tickets
    • Automated analysis of profile photos to block inappropriate images
    • Weather forecasts, which receive the ride location for rain alerts
    • Maps and address lookup, through your phone's system services

    We also share data when required by law or court order. The full list of providers is available on request at contato@monoriders.com.br.

    6. International transfers

    Our main database is in Brazil (São Paulo). Some processing happens in other countries, mainly the United States: server functions, real-time database, SMS and push delivery, usage analytics and crash monitoring. These transfers follow the mechanisms of LGPD art. 33.

    7. Community heatmap

    The community map shows the paths most used by riders. It uses rides synced in the last 90 days that were recorded with a connected unicycle, always aggregated and anonymized:

    • The first and last 200 meters of each ride (or the longer distance you set) and your hidden addresses never enter the map
    • Rides are split into segments of about 40 meters, with no link to who rode them, when, or the full ride
    • A segment only appears once at least 3 different riders have passed through it
    • The map only shows intensity bands, never the number of people or passes

    Contribution is on by default and can be turned off under Settings > Privacy > "Contribute to the heatmap". Once off, your rides leave the map at the next update, within 7 days.

    8. Technical compatibility samples

    To check which unicycles work well with the app, it may send technical samples of the Bluetooth communication with the unicycle: manufacturer, model, firmware and app versions and raw telemetry. Samples contain no location or personal data. Your account identifier is used only to manage the upload.

    9. How long we keep data

    • Account, rides and settings: while your account exists.
    • Posts and comments: until you delete them or your account.
    • Group ride real-time location: deleted when the group ends.
    • Emergency alerts sent: up to 90 days.
    • App access logs (IP address, date and time): 6 months, as required by Brazil's Internet Civil Framework (Marco Civil, art. 15).
    • Support tickets, reports and moderation records: up to 5 years after they are closed, the limitation period for consumer claims in Brazil (CDC, art. 27).
    • Backups: up to 90 days.

    After you delete your account, we delete your data within 30 days, with the exceptions listed on the Delete account page. Data already sent to our analytics, crash monitoring and SMS providers follows those providers' retention periods.

    10. Your rights

    Under the LGPD (art. 18) and similar laws, you can ask for:

    • Confirmation that we process your data, and access to it
    • Correction of incomplete or inaccurate data
    • Anonymization, blocking or deletion of unnecessary or unlawfully processed data
    • Portability: each ride can be exported as GPX in the app; other data on request
    • Information about who we share your data with
    • Withdrawal of consent and information about the consequences of not consenting
    • Review of automated decisions, such as moderation actions (art. 20)

    Send your request to contato@monoriders.com.br. We reply within 15 days. You can also delete your account in the app and file a complaint with Brazil's data protection authority (ANPD).

    11. Security

    Data is encrypted in transit, and access is restricted by permission rules and authentication. No system is fully secure. If an incident may cause significant risk or harm, we will notify you and the ANPD.

    12. Children

    Mono Riders is not intended for anyone under 16. The app asks for your birth year before creating an account and blocks sign-up below that age. If we learn that an account belongs to someone under 16, we will delete it.

    13. Users in the United States

    The categories of data, purposes and providers are described above. We do not sell personal information and do not share it for cross-context behavioral advertising. The app does not track you across other sites or apps, so it does not respond to Do Not Track signals.

    California residents and residents of other states with privacy laws can request access, correction or deletion at contato@monoriders.com.br. We do not discriminate against anyone for exercising these rights.

    14. Users in the European Union and the United Kingdom

    The equivalent GDPR legal bases are performance of a contract, consent, vital interests and legitimate interests, in the same situations described in section 3. You have the rights of access, rectification, erasure, portability, objection and restriction, and you can complain to the data protection authority in your country.

    15. Changes to this policy

    When we make a material change, we will notify you in the app before it takes effect. If you keep using the app after that, you agree to the new version. If a change requires your consent, we will ask again. The effective date is shown at the top of this page.

    16. Contact

    Privacy questions or requests: contato@monoriders.com.br.