Privacy Policy
Last updated: 13 July 2026
MotoHeads ("MotoHeads", "we", "us" or "our") operates a community platform for motorcycle riders where you can create and join riding crews, plan rides, chat, share photos and videos, and post to a Discover feed. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the rights you have over it. It applies to our Android app and our website at https://motoheads.in.
MotoHeads is intended only for adults aged 18 and over. By using the app you confirm that you are at least 18 years old.
1. Data we collect and why
We collect only what we need to run the community and keep riders safe.
| Data | Why we collect it |
|---|---|
| Email address | To create your account, send you a one-time password (OTP) to log in, and send important service messages. If you choose "Continue with Google", Google shares your verified email address with us for the same purpose; we do not receive your Google password or access your Google account data. |
| Name / username, city and state | To identify you within the community and help riders discover crews and members near them. |
| Motorcycle details and riding experience | To personalise your profile and help you connect with similar riders and crews. |
| Blood group and emergency contact (sensitive) | Provided voluntarily for ride safety, so that this information can be made available in an emergency. See Section 6. |
| Profile photo | To personalise your profile. Optional. |
| Posts, photos, videos, comments and messages | To deliver the core social features of the app: the Discover feed, crew chat and direct messaging. |
| Approximate location | To power "discover nearby" features. See Section 7. |
| Basic device and usage information | To operate the service, keep it secure, diagnose problems and improve reliability. |
| App usage events and install source | Anonymous in-app events (for example: account created, crew created or joined, ride RSVP, live map opened) and how you found the app (the Play Store install referrer), used to understand which features and campaigns work. Collected through Google Firebase Analytics, which may use your device's advertising ID. |
Pay links. If a crewmate owes you money on a ride, you can send them a "Pay your share" link (motoheads.in/pay/…). Anyone who opens that link sees only your first name, your UPI ID (if you have added one), the amount, the ride or crew name and whether it has been settled; never your email, phone number or other profile details. Each link uses a random, unguessable address and stops working after 30 days. You can remove your UPI ID from your profile at any time.
2. Legal basis and consent
We process your personal data under the India Digital Personal Data Protection (DPDP) Act, 2023, which is our primary legal framework, and, for users located in the European Economic Area, the EU General Data Protection Regulation (GDPR).
- Consent: You provide your data and agree to this policy when you create an account. Sensitive data such as your blood group and emergency contact is collected only with your explicit consent and is entirely optional.
- Contract / legitimate use: We process the data necessary to provide the service you have signed up for (for example, delivering your OTP, displaying your posts, and running crew chat).
- Legal obligation: We may process data where required to comply with applicable law or lawful requests from authorities.
You can withdraw your consent at any time (see Section 8). Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide some or all of the service.
3. How your data is stored and protected
- All data is transmitted over encrypted connections using HTTPS/TLS.
- We do not store passwords. Login uses an email one-time password (OTP), and any credential material is stored only in hashed form (bcrypt), never in plaintext.
- Access to production systems is restricted and data is stored on secured servers.
No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your information.
4. Third parties we share data with
We do not sell your personal data. We share data only with service providers who help us operate the app, and only to the extent needed:
- Google Play services — app distribution and, in future, payment processing. If premium features are introduced, payments would be handled entirely by Google Play; MotoHeads never receives or stores your card or bank details.
- Google Sign-In (optional) — if you use "Continue with Google", Google confirms your email address to us so you can log in without a code.
- Email delivery provider — to send your login OTP and service emails.
- Push notification service — to deliver notifications to your device.
- Google Firebase Analytics — to measure app usage and install sources in aggregate. You can reset or limit use of your advertising ID in your device settings.
These providers process data on our behalf under their own terms and applicable data-protection law. We may also disclose data where required by law.
5. Data retention
We keep your personal data for as long as your account is active. When you delete your account (see Section 9), we delete or anonymise your personal data. Some information may be retained for a short period in secure backups or where required for legal, security or dispute-resolution purposes, typically no longer than 30 days, after which it is purged.
6. Sensitive data: blood group and emergency contact
Blood group and emergency-contact details are collected only if you choose to provide them, as an aid to ride safety. They are intended to help in an emergency but are not a substitute for professional medical or emergency services. You can view, edit or remove this information at any time from your profile.
7. Location data
We use only approximate location, and only while the app is in the foreground, to power features such as discovering nearby riders, crews and rides. We do not track your precise location in the background. You can disable location access at any time through your device settings; some nearby features may then be unavailable.
Watch links. During a ride, a crew member can create a "watch the ride" link (motoheads.in/watch/…) to send to family or friends. Anyone who has the link can open it in a browser, without an account, and see the ride's name plus the first name, current position and last-update time of riders in that crew who are sharing their live location at that moment. It never shows email addresses, phone numbers, photos or past routes. A watch link stops working after 12 hours, or earlier if the rider who made it or a crew admin stops it. If you are not sharing your live location, you do not appear.
8. Your rights
Under the DPDP Act and the GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data (most of which you can edit directly in your profile).
- Delete your data and account.
- Withdraw consent for processing, including for sensitive data.
- Grievance redressal / complaint — you may raise a concern with us, and you may lodge a complaint with the Data Protection Board of India or, if you are in the EEA, your local supervisory authority.
To exercise any of these rights, contact us at support@motoheads.in from your registered email.
9. Deleting your account and data
You can delete your account and personal data at any time. In the app, go to Profile → Delete account and confirm; you can also request deletion by emailing support@motoheads.in from your registered email address. Deletion permanently removes your account and your content — including your posts, comments, crews, expenses and the photos and videos you uploaded, which are deleted from our storage. Full instructions are on our Account Deletion page. We action email deletion requests within 30 days; some information may remain briefly in secure backups as described in Section 5.
10. Children
MotoHeads is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe a minor is using the app, please contact us.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.
12. Contact and grievance officer
For privacy questions or data requests, email support@motoheads.in. For complaints or grievances, email complaint@motoheads.in.
Postal address / legal entity: [To be added].
Governing law: these terms and this policy are governed by the laws of India.