Privacy Policy
Privacy Policy
RideZone helps parents set where and when their kids can ride, and warns a rider on their Apple Watch before they leave a zone. That means it holds a child’s location during a ride, which is about the most sensitive thing an app can hold. This page says exactly what RideZone collects, why, who else ever sees it, and how to get it deleted.
Throughout this policy, “RideZone” means the RideZone apps for iPhone, Android and Apple Watch and the website at ridezone.app, and “we” and “us” mean Coparia Labs LLC, a California limited liability company, which operates RideZone. If you have a question about anything here, write to support@ridezone.app.
The short version
- The rider turns it on. Location is collected only while a ride is on, and a ride is on only while the rider’s watch says so on screen. There is no hidden mode, no way to start a ride from afar, and no location between rides.
- Routes are deleted after 30 days. What stays is a ride’s numbers, like distance and top speed, and its zone alerts, and none of those hold a location.
- A child has no account. A parent creates a rider profile and pairs the rider’s watch. A rider has no email address and no password, and RideZone never asks a child for personal information.
- No photos of children. A rider’s picture is a drawing picked from a set.
- No ads, no analytics, no trackers. There is no advertising, no third-party analytics and no crash reporting service in any RideZone app or on this website. We do not sell or share personal information, and we never use it for advertising.
- You can delete everything. A parent can delete a rider, the family or their own account from the app or the website, at any time.
Children’s privacy (COPPA)
RideZone is designed for riders under 13, and for the Children’s Online Privacy Protection Act (COPPA), the US law that protects their privacy. The parent or guardian holds the account. A rider is a profile a parent creates, and the only information we collect from a rider’s device is what the ride needs, described below. It is collected automatically while a ride is on. We do not ask a child for more information than a ride needs. Children’s information goes to no one outside their family except the service providers listed under “Who sees it”, and only so RideZone can work; we do not disclose it to anyone else for any other purpose, so there is nothing further to consent to.
A parent can, at any time:
- review everything RideZone holds about their rider, in the app or on the website: the rider’s profile, zones, rides, routes (for 30 days), alerts and agreement;
- delete it: removing a rider deletes the rider’s profile, rides, routes and alerts, and unpairs their watch;
- stop further collection: unpairing the rider’s watch, or removing the rider, means nothing more is collected from them.
To have us do any of this for you, or to ask a question about your child’s information, write to support@ridezone.app or call +1 (949) 416-5322. We reply within 10 business days.
What we collect
About parents and guardians
- Your account. Your email address, and how you sign in. If you sign in with Google, Google tells us your email address and the name on your Google account. If you sign in with Apple, Apple tells us your email address, or a private relay address if you choose to hide yours, and your name if you share it. Your name from Google or Apple is kept by our sign-in service and is not shown in RideZone. If you use an email address and a password, your password is held by our sign-in service (Amazon Cognito), never by RideZone itself, and you can turn on two-factor sign-in.
- Your photo, if you add one. It is visible only to the families you are in, and it is deleted when you remove it or delete your account.
- Your settings, such as which alerts you have muted.
- Your phones and browsers that get alerts: the push address Apple, Google or your browser gives us for each, so we can send alerts to it.
- Your agreement signatures: the name you print and the signature you draw with your finger or mouse, on the riding agreement you sign with your rider.
- Invitations you send: the email address you invite and the role you offer.
About your family and riders
Everything here is entered by a parent.
- The family: its name, its time zone and its units (feet and miles, or meters).
- Each rider: a first name or nickname, their birth year if you enter it (only the year, so we know whether children’s privacy rules apply, never a date of birth), a picture picked from a set of drawings, a color, and the riding rules you set: riding times, curfew, speed limit and the checklist before a ride.
- Zones: the boundaries you draw on the map, their names and schedules.
- The riding agreement: its text and rules, its versions, and each signature on it: the name each signer printed and the signature they drew, the rider’s included. A rider signs on a parent’s phone or computer, with the parent there.
- Paired devices: the name of the rider’s watch (for example “Parker’s Apple Watch”), when it was paired and last seen, and a credential that lets it talk to RideZone. We store only a scrambled form of that credential.
During a ride, from the rider’s watch
- Location, about once a second while the rider is moving and the ride is on: latitude, longitude, how accurate the fix is, speed, direction of travel and the compass heading. The watch checks every fix against the zones itself, so a rider is warned even with no signal, and sends the fixes to RideZone about every 10 seconds so parents can follow the ride and get alerts.
- Battery level, so parents can be told when the watch is running low.
- How the ride went: when it started and ended, why it ended, whether the rider was inside their zones at the end, whether the checklist before the ride was done, and the zone alerts along the way (which zone and when, never where).
The watch collects nothing between rides. It never uses the microphone, the camera, contacts or an advertising identifier.
Apple Health on the rider’s watch
When a ride ends, the watch saves it to the rider’s own Apple Health as a cycling workout: its time, distance and active energy, so it counts toward the rider’s Activity rings. It never saves the route, and RideZone reads nothing from Health. The workout stays in the rider’s Health on their watch and in their iCloud account, where Apple’s privacy terms apply. It is not sent to RideZone. A ride shorter than a minute is not saved as a workout. A rider (or their parent) can decline Health when the watch asks; rides still work, and nothing is saved to Health.
On a parent’s phone or computer
The app and the website ask for your location only to center the map and show you on it while you draw a zone. RideZone never stores it and never sends it to us. Your phone’s or browser’s own location service handles it under its own terms, and on Android that includes Google Maps. The app asks for the camera or your photos only if you add your own profile picture, and for notifications so it can show alerts.
This website
ridezone.app sets no cookies, runs no analytics, has no forms and loads nothing from anyone else.
What we do not collect
No contacts, no microphone, no advertising identifiers, no photos of children, no dates of birth, no location between rides, and no location from a parent’s phone or computer.
How we use it
We use this information for one purpose: to run RideZone for your family. That means showing your family’s zones, rides and alerts to the people in your family who are allowed to see them, warning the rider on their watch, sending the alerts you asked for, and keeping the service secure and working. We do not profile you or your rider, we do not make automated decisions about you, and we do not use your family’s information to train machine learning models.
Who sees it
In your family. Parents see everything about the family’s riders. A guardian you invite sees the live map, rides and alerts only for the riders you give them, can be given access for a limited time, and cannot change rules or sign the agreement. A rider’s watch shows the rider their own zones, rules and agreement, and never another family member’s information.
Our staff. A small number of people at Coparia Labs can sign in to an admin console to keep the service running. It never shows a route or a position. For a rider it shows a name, whether they are under 13, and how many rides, zones and paired watches they have. It also shows a family’s name and time zone, its members’ email addresses and roles, and each watch’s name and when it was last seen. For an account it shows the email address, how it signs in, whether two-factor is on, and its families. Every time an admin looks at a family, searches, or opens the list of email that failed to send, it is recorded.
Service providers. These companies process information for us, only to provide RideZone:
| Who | What for | What they get |
|---|---|---|
| Amazon Web Services (US) | Hosting, database, file storage, sign-in (Amazon Cognito) | Everything described on this page, riders’ ride locations included, encrypted at rest |
| Apple | Sign in with Apple; maps on iPhone, Apple Watch and the website; alerts to iPhones and Safari | Your sign-in details if you choose Apple; the map area being viewed and what you type into place search; the text of an alert |
| Sign in with Google; maps and place search in the Android app; alerts to Android phones and Chrome; our email (support@ridezone.app) | Your sign-in details if you choose Google; the map area being viewed and what you type into place search on Android; the text of an alert; anything you email us | |
| Mozilla, Microsoft | Alerts to Firefox and Edge, if you turn them on there | The text of an alert |
| Resend | Sending email (sign-up codes, invitations) | Your email address and the message |
Of a rider’s information, AWS holds everything, to run RideZone, and Apple, Google, Mozilla and Microsoft get only the text of an alert, to deliver it to a parent. An alert’s text names the rider and the zone (for example “Parker left Park loop”), never a position. A map provider sees which area of the map is on screen, from your device’s internet address, the same way every map app works. RideZone sends map providers no names or ids.
Nobody else, except where the law requires it, such as a valid court order, and then only what it requires. We do not sell or share personal information, and we would tell you before any change of ownership of RideZone changed what this page says.
Security
Information is encrypted in transit and at rest, under a key held for each environment. Passwords are held by our sign-in service, never by RideZone. A rider’s watch holds a revocable credential, never a password, and a parent can unpair it at any time. Admin access requires two-factor sign-in, and admins never see a route or a position.
No system is perfectly secure. If we learn of a breach that affects your information, we will tell you, and the authorities where the law requires.
How long we keep it
We keep information only as long as it serves the purpose it was collected for, and then delete it. This is our retention policy.
| What | Why we keep it | How long |
|---|---|---|
| A ride’s route (its location fixes) | So parents can look back at a recent ride | 30 days after the ride ends, then deleted |
| A ride’s numbers and zone alerts (no location) | So parents can look back over a season, on the Dashboard | Until a parent removes the rider, or the family is deleted |
| Everything else about a rider (profile, rules, zones, agreement, paired watch) | It is how RideZone works for that rider | Until a parent removes the rider, or the family is deleted |
| Your account | So you can sign in | Until you delete it |
| Sent email | To retry a message that failed | 30 days, and its body is deleted as soon as it is sent |
| Alert messages | To retry an alert that failed | 7 days |
| Our server logs | To find and fix problems | Up to 90 days |
| Automatic database backups | To recover from a failure | 30 days |
| A database snapshot taken when we replace a database | To recover from a mistake while replacing it | Until we delete it |
| The record of what our admins looked at | To show who saw what | Kept |
Deleting your account
You can delete your account yourself, in the app or on the website, under Profile, Delete account. It takes effect at once. RideZone first tells you exactly what will go:
- If you are the only parent in a family, the whole family is deleted: its riders, zones, rides, alerts and agreements, and its riders’ watches are unpaired.
- If there is another parent, you leave, and the family stays with them. Your signatures stay on the agreements you signed, as the record of what was agreed, but are no longer linked to you.
- Your sign-in, your photo and your settings are deleted, and you are signed out everywhere. A record with no email address, holding only an internal ID, stays, so the deletion can finish and your old sign-in cannot come back.
If you signed in with Apple, you can also remove RideZone from your Apple Account at account.apple.com, under Sign in with Apple.
Your choices
You can:
- see and correct everything about your family, in the app or on the website;
- remove a rider, which deletes their rides, routes and alerts;
- unpair a rider’s watch, which stops any further collection from it;
- mute alerts, or turn them off for a phone or browser;
- decline Apple Health on the rider’s watch;
- delete your account, as described above;
- ask us for a copy of your family’s information, or for anything on this page you cannot do in the app, at support@ridezone.app.
Depending on where you live, you may have further rights, including under the California Consumer Privacy Act. We give the choices above to everyone, wherever they live.
Changes
If we change this policy in a way that matters, we will raise the version number at the top of this page and tell parents before the change takes effect. If a change would let us collect or use a child’s information in a new way, we will ask for a parent’s consent first. Small corrections get a version bump and nothing more.
Contact
Coparia Labs LLC, 2108 N Street #17510, Sacramento, CA 95816, USA.
Phone: +1 (949) 416-5322
support@ridezone.app for anything on this page, or security@ridezone.app to report a security problem.