Privacy Policy

Last updated: 13 July 2026

MotoHeads ("MotoHeads", "we", "us" or "our") operates a community platform for motorcycle riders where you can create and join riding crews, plan rides, chat, share photos and videos, and post to a Discover feed. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and the rights you have over it. It applies to our Android app and our website at https://motoheads.in.

MotoHeads is intended only for adults aged 18 and over. By using the app you confirm that you are at least 18 years old.

1. Data we collect and why

We collect only what we need to run the community and keep riders safe.

2. Legal basis and consent

We process your personal data under the India Digital Personal Data Protection (DPDP) Act, 2023, which is our primary legal framework, and, for users located in the European Economic Area, the EU General Data Protection Regulation (GDPR).

• Consent: You provide your data and agree to this policy when you create an account. Sensitive data such as your blood group and emergency contact is collected only with your explicit consent and is entirely optional.
• Contract / legitimate use: We process the data necessary to provide the service you have signed up for (for example, delivering your OTP, displaying your posts, and running crew chat).
• Legal obligation: We may process data where required to comply with applicable law or lawful requests from authorities.

You can withdraw your consent at any time (see Section 8). Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide some or all of the service.

3. How your data is stored and protected

• All data is transmitted over encrypted connections using HTTPS/TLS.
• We do not store passwords. Login uses an email one-time password (OTP), and any credential material is stored only in hashed form (bcrypt), never in plaintext.
• Access to production systems is restricted and data is stored on secured servers.

No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your information.

4. Third parties we share data with

We do not sell your personal data. We share data only with service providers who help us operate the app, and only to the extent needed:

• Google Play services — app distribution and, in future, payment processing. If premium features are introduced, payments would be handled entirely by Google Play; MotoHeads never receives or stores your card or bank details.
• Email delivery provider — to send your login OTP and service emails.
• Push notification service — to deliver notifications to your device.

These providers process data on our behalf under their own terms and applicable data-protection law. We may also disclose data where required by law.

5. Data retention

We keep your personal data for as long as your account is active. When you delete your account (see Section 9), we delete or anonymise your personal data. Some information may be retained for a short period in secure backups or where required for legal, security or dispute-resolution purposes, typically no longer than 30 days, after which it is purged.

6. Sensitive data: blood group and emergency contact

Blood group and emergency-contact details are collected only if you choose to provide them, as an aid to ride safety. They are intended to help in an emergency but are not a substitute for professional medical or emergency services. You can view, edit or remove this information at any time from your profile.

7. Location data

We use only approximate location, and only while the app is in the foreground, to power features such as discovering nearby riders, crews and rides. We do not track your precise location in the background. You can disable location access at any time through your device settings; some nearby features may then be unavailable.

8. Your rights

Under the DPDP Act and the GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data (most of which you can edit directly in your profile).
• Delete your data and account.
• Withdraw consent for processing, including for sensitive data.
• Grievance redressal / complaint — you may raise a concern with us, and you may lodge a complaint with the Data Protection Board of India or, if you are in the EEA, your local supervisory authority.

To exercise any of these rights, contact us at support@motoheads.in from your registered email.

9. Deleting your account and data

You can delete your account and personal data at any time. In the app, go to Profile → Delete account and confirm; you can also request deletion by emailing support@motoheads.in from your registered email address. Deletion permanently removes your account and your content — including your posts, comments, crews, expenses and the photos and videos you uploaded, which are deleted from our storage. Full instructions are on our Account Deletion page. We action email deletion requests within 30 days; some information may remain briefly in secure backups as described in Section 5.

10. Children

MotoHeads is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe a minor is using the app, please contact us.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.

12. Contact and grievance officer

For privacy questions or data requests, email support@motoheads.in. For complaints or grievances, email complaint@motoheads.in.

Postal address / legal entity: [To be added].

Governing law: these terms and this policy are governed by the laws of India.