Your bike's memory, in your pocket.

This privacy policy explains how the Roost MX mobile application ("Roost MX", "we", "us", "the app") collects, uses, stores, and shares information when you use the app on Android, iOS, or the web.

Roost MX is a personal motorcycle service log: you record your bikes, service history, jetting setups, and suspension setups, optionally attaching photos and PDFs. The app uses your location only to fetch local weather conditions to help calculate jetting recommendations.

1. Who we are (Data Controller)

The data controller responsible for your personal data is Roost MX Ltd, a private limited company registered in England and Wales (company number 17450512), the developer of Roost MX. You can contact us at:

• Email: tristinwhiteqtec@gmail.com
• App: Roost MX (com.roostmx.app)

2. What data we collect

2.1 Account information (you give us)

• Email address (used as your sign-in identifier)
• Password (hashed by Firebase Authentication; we never see it)
• First name, last name, optional profile photo

2.2 App content (you create)

• Bike details: make, model, year, name, modifications, VIN, hours
• Service records: dates, notes, mileage, attached photos (taken with your device's camera or selected from your photo library), attached PDFs
• Jetting and suspension configurations: track, date, conditions, jet sizes, clip positions, suspension clicks, ratings, remarks

Camera and photo library access is only used when you choose to attach an image to a service record. The app does not record video, take photos in the background, or access photos unrelated to attachments you explicitly add. You can revoke camera and photo library permissions at any time in your device settings.

2.3 Device + usage data (collected automatically)

• Approximate or precise location, only when you tap "Use my location" or recalculate jetting — used once to look up temperature, humidity, and elevation. The coordinates themselves are not stored or transmitted to our servers.
• App version, device model, operating system, language preference
• App-activity events such as which screens you open, taps on key features, and crashes (via Firebase Analytics + Crashlytics)
• Authentication tokens stored locally on your device for keeping you signed in

2.4 What we do not collect

• Contacts, SMS, call logs, calendar, or browsing data outside the app
• Background location
• Audio recordings
• Health, fitness, financial, or biometric data

3. Why we use your data (purposes & lawful basis)

4. Where your data is stored

We use Google Firebase (operated by Google LLC and Google Cloud EMEA Limited) as our backend platform. Firebase data is stored in Google's data centres. The Firebase services we use are:

• Firebase Authentication — stores your email + a hashed password
• Cloud Firestore — stores your profile, bikes, configurations, transfer requests
• Cloud Storage for Firebase — stores image and PDF attachments you add to service records
• Cloud Functions for Firebase — runs the API your app talks to
• Firebase Analytics — anonymous usage statistics
• Firebase Crashlytics (if enabled) — anonymous crash reports

Google's privacy and security practices are described at firebase.google.com/support/privacy.

5. Third-party services

5.1 Open-Meteo (weather + elevation)

When you tap "Use my location" or "Recalculate with current weather", the app sends your latitude and longitude to open-meteo.com to fetch temperature, humidity, and elevation. Open-Meteo's privacy policy is at open-meteo.com/en/terms. We do not receive or store your coordinates ourselves.

5.2 Google Play Services / Apple App Store

Google or Apple may collect basic device and account information when you install or update the app. That collection is governed by their privacy policies, not ours.

6. International transfers

Firebase data may be processed in regions outside the UK or EEA, including the United States. Google relies on the EU-US Data Privacy Framework and Standard Contractual Clauses to safeguard such transfers. See cloud.google.com/terms/data-processing-addendum.

7. Data retention

• Active accounts: we keep your data for as long as your account is active.
• Account deletion: when you delete your account (in-app or by email request), we permanently delete your profile, bikes, services, configurations, and uploaded files within 30 days. Backups are purged on a 90-day rolling cycle.
• Anonymous analytics: aggregated, non-identifying analytics may be retained for up to 14 months.

8. Your rights (UK GDPR / EU GDPR)

You have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased ("right to be forgotten")
• Restrict or object to certain processing
• Receive a copy of your data in a portable format
• Withdraw consent where processing relies on consent
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your national supervisory authority

To exercise any of these rights, email tristinwhiteqtec@gmail.com. We will respond within 30 days.

9. Account deletion

You can delete your account at any time:

• In the app: Profile → Delete my account (or your equivalent path)
• Web: roost-mx.co.uk/delete-account — fill in your account email and we will erase all associated data within 30 days
• Email: send a deletion request to tristinwhiteqtec@gmail.com

10. Security

Data in transit is encrypted via HTTPS / TLS 1.2+. Data at rest in Firebase is encrypted using Google-managed keys. Authentication uses industry-standard token-based mechanisms. Locally cached data on your device is stored in the operating system's app sandbox; we recommend using a device passcode or biometrics. No system is perfectly secure, but we apply reasonable technical and organisational measures appropriate to the risk.

11. Children

Roost MX is not directed at children under 13 (or under 16 in the UK and EEA). We do not knowingly collect personal data from children under those ages. If you believe a child has provided personal data, contact us and we will delete it promptly.

12. Cookies and local storage

The app uses local storage on your device (IndexedDB, Capacitor Preferences, browser localStorage) for essential functions: keeping you signed in, caching your profile and configurations for offline use, and remembering your language and display preferences. We do not use cookies for advertising or cross-site tracking.

13. Changes to this policy

We may update this policy to reflect changes in the app or in the law. The "Last updated" date at the top of this page will be revised accordingly. Material changes will be notified in-app or by email.

14. Contact

Questions or concerns about your privacy? Email tristinwhiteqtec@gmail.com.

These Terms of Service ("Terms") govern your use of the Roost MX mobile application and any associated websites or services (together, "the Service"). By creating an account or using the Service, you agree to these Terms. If you don't agree, please don't use the Service.

1. Who we are

The Service is operated by Roost MX Ltd, a private limited company registered in England and Wales (company number 17450512), the developer of Roost MX. Contact: tristinwhiteqtec@gmail.com.

2. Eligibility & account

• You must be at least 13 years old (16 in the UK and EEA).
• You're responsible for the accuracy of the information you provide and for keeping your password secure.
• You're responsible for all activity that happens under your account. Notify us immediately if you suspect unauthorised use: tristinwhiteqtec@gmail.com.
• One person, one account. You may not share or sell your account.

3. What the Service does

Roost MX is a personal motorcycle service log. You can record bikes, service history, jetting and suspension setups, ratings, and notes; attach photos and PDFs; and use built-in calculators that suggest jetting changes based on weather, altitude, and humidity.

4. Acceptable use

You agree not to:

• Use the Service in violation of any law or regulation.
• Upload content that is unlawful, infringing, defamatory, or contains malware.
• Attempt to access another user's account or any data you're not authorised to see.
• Reverse-engineer, decompile, or attempt to extract source code, except where local law expressly permits.
• Probe, scan, or test the vulnerability of the Service or the backend without our written permission.
• Use automated systems (bots, scrapers) to access the Service in a way that imposes an unreasonable load.
• Resell, sublicense, or commercially exploit the Service or its contents without our written permission.

We may suspend or terminate accounts that violate these rules, with or without notice depending on severity.

5. Your content

You retain ownership of the content you create or upload (bike records, configurations, photos, notes — "Your Content"). By uploading Your Content, you grant us a limited, non-exclusive, royalty-free licence to host, transmit, back up, and display it solely for the purpose of operating the Service for you. We do not claim any ownership of Your Content and we do not use it for marketing without your separate consent.

You're responsible for ensuring you have the rights to upload anything you upload (for example, photos containing recognisable people).

6. Free and paid tiers

The Service may be offered with a free tier and one or more paid ("Pro") tiers. Where paid tiers are available:

• Pricing, billing cycles, and feature differences are shown in-app at the point of purchase.
• Subscriptions are billed through the Apple App Store or Google Play Store. Their terms govern payments, refunds, and renewals. You can manage or cancel subscriptions in your store account settings.
• Cancelling a subscription stops future renewals; access to Pro features remains until the end of the current billing period.
• We may change pricing or feature allocations with reasonable notice. Changes apply to the next renewal, not the current one.
• Refunds outside the App Store / Play Store policies are at our sole discretion.

If you live in the UK or EU, statutory rights under consumer protection law (including the Consumer Rights Act 2015 in the UK) are not affected by these Terms.

7. Account deletion & data

You can delete your account at any time. See our Privacy Policy for the full process and our retention schedule, or use the in-app option (Profile → Delete my account) or the web request form at roost-mx.co.uk/delete-account.

Once deleted, Your Content cannot be recovered. Export anything you want to keep before deletion.

8. Service availability & changes

We aim for high availability but do not guarantee the Service will always be uninterrupted, error-free, or secure. We may add, modify, or remove features at any time. Material changes that reduce functionality you've paid for will be announced in advance.

9. Third-party services

The Service relies on third parties — including Google Firebase (hosting, authentication, storage, analytics) and Open-Meteo (weather + elevation). We don't control those services and aren't responsible for their availability, terms, or any data they process. Their privacy practices are summarised in our Privacy Policy.

10. Disclaimers

The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including implied warranties of merchantability, fitness for a particular purpose, or non-infringement.

We don't warrant that jetting, suspension, or other recommendations will produce any particular outcome, that the Service will be free from bugs, or that data you upload will always be retrievable. Always keep your own backups of critical data.

11. Limitation of liability

To the fullest extent permitted by law, neither we nor our suppliers are liable for indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, data, or goodwill arising out of or related to your use of the Service — even if we've been advised of the possibility of such damages.

Our total liability for any claim arising out of or related to the Service is limited to the greater of (a) the amount you paid us in the 12 months preceding the claim, or (b) £50.

Nothing in these Terms excludes or limits liability for: (i) death or personal injury caused by negligence; (ii) fraud or fraudulent misrepresentation; or (iii) any other liability that cannot lawfully be excluded.

12. Indemnity

You agree to indemnify and hold us harmless from any claim, damage, or expense (including reasonable legal fees) arising out of (a) your breach of these Terms, (b) Your Content, or (c) your misuse of the Service.

13. Termination

You may stop using the Service at any time. We may suspend or terminate your access if you violate these Terms or if continued operation would expose us or other users to legal or security risk. Sections that by their nature should survive termination will do so (including 5 ownership, 10 disclaimers, 11 liability, 12 indemnity, 14 governing law).

14. Governing law & disputes

These Terms are governed by the laws of England and Wales, without regard to conflict-of-laws principles. Disputes will be resolved in the courts of England and Wales, except where mandatory consumer-protection law in your country of residence gives you the right to bring proceedings locally.

15. Changes to these Terms

We may update these Terms from time to time. The "Last updated" date at the top will be revised. If changes materially affect your rights, we'll notify you in-app or by email at least 14 days before they take effect. Continuing to use the Service after the effective date means you accept the updated Terms.

16. Contact

Questions about these Terms? Email tristinwhiteqtec@gmail.com.

Need help with Roost MX? We're a small team and reply personally to every message — usually within 1–2 working days.

Contact us

Common questions

• Forgotten password — tap "Forgot password?" on the sign-in screen, or sign back in with Google / Apple.
• Restore a Pro subscription on a new device — sign in with the same Apple ID or Google account, then go to Profile → Restore Purchases.
• Cancel a subscription — iPhone: Settings → [your name] → Subscriptions → Roost MX Pro. Android: Play Store → profile → Payments & subscriptions.
• Delete your account — Profile → Delete account, or visit roost-mx.co.uk/delete-account.
• Bike or service entry missing — make sure you're signed into the same account on this device. If you're sure you're signed in correctly, email us with your account email.

Privacy & legal

• Privacy policy
• Terms of service

You can permanently delete your Roost MX account and all associated data at any time. This page explains how, what's deleted, what's retained (if anything), and the timeline.

Can't access the app? Email request

If you've lost access to your account or no longer have the app installed, email us with the subject line "Delete my account":

Email a deletion request

Your email must come from the address registered on the account. Include the account email in the body of the message.

What gets deleted

• Your profile (name, email, avatar)
• All bikes you've added
• All service records, including attached photos and PDFs
• All jetting and suspension configurations
• Any pending or completed bike-transfer records you initiated or received
• Your authentication credentials (your sign-in email and password)
• Any cached data on your device after you sign out

What's retained (if anything)

Aggregated, non-identifying analytics events (e.g., screen counts, feature usage) may be retained for product analytics. These are not linked to your identity and cannot be used to recover your account.

Encrypted backups of our databases are purged on a 90-day rolling cycle. Your data may persist in those backups for up to 90 days after the live deletion completes, but is not accessible during normal operations.

Timeline

If you change your mind

Once an in-app deletion completes there is no recovery. If you've sent an email request and want to cancel, reply to the same thread within 24 hours of submitting and we'll halt the request.

Questions?

Email tristinwhiteqtec@gmail.com.