Privacy: Ridgewake

What is collected

Your account: your name, your email address, your password (kept only as a salted one-way hash, never as itself), and the language you made it in, so our emails to you are in that language.
Keeping your account safe: when you last signed in, the name each phone or browser gives itself when it signs in and when it was last used (so you can see and sign out each one), and, if you turn on two-step sign-in, its key (encrypted) and your backup codes (kept only as one-way hashes). We email you when there is a new sign-in, and when the password, the email or two-step sign-in changes.
Your drives: what the logger records from the vehicle (speed, engine readings, fault codes, battery voltage) and, with its GPS, where the vehicle went and when.
The logger's own diagnostic log: what it did (connections, uploads, errors), so a fault can be found. It carries no route.
The Tracking edition: the vehicle's position every 10 seconds while it moves and a check-in every few hours while it is parked, over the mobile network, for the live map, the theft alert and geofences.
What you type in: logbook notes, fuel prices, the names of your vehicles, your places and geofences.

What it is for

To show you your drives and your vehicles, to email you when the vehicle reports a problem, and to keep the logger working.

Who can see it

You, signed in. A trip you share as a link can be seen by whoever has the link, until you stop sharing it, and you can hide where it started and ended.

For the traffic on the app's map, the speeds in your drives and the Tracking edition's live positions are mixed into anonymous road-speed averages, shown only where several drives from different loggers agree; the traffic map never shows your route, your speed or whose vehicle it was.

A vehicle you share with somebody from the app is shared with the email address you type. Once they have confirmed that address and accepted, they see that vehicle's drives and routes, the trips map, where it was last left and its fault codes. They cannot change anything on it, and they never see your other vehicles, your logbook, your fuel log or your settings. You can take it back at any time, and they can leave it.

Who else handles it

NHTSA, the US vehicle safety agency: to name your vehicle (its make, model and engine), the VIN it reports is looked up in NHTSA's public vPIC service. Only the VIN is sent: never your name, your email or your drives.
Stripe: a card payment for the Tracking edition's plan is taken on Stripe's own page. Stripe gets your email address and your card; we never see the card number.
Shopify: the shop's cart and checkout are Shopify's. What you put in the cart, and your name, address, email and payment at checkout, go to Shopify under its own privacy policy, and we see your order.
Apple and Google: a Ridgewake Plus subscription bought in the app is taken by the App Store or Google Play. We get a record of the subscription (which plan, until when, and whether it renews), never your card.
The service that sends our email: it gets your email address and the words of each email (a sign-in link, an alert, a report you asked for).

Your phone

The app uses Bluetooth to set your logger up and to take drives off it. With Send drives by itself turned on, it does that in the background after a drive, and keeps your sign-in and each logger's claim code on the phone for it. The app asks for your phone's location only to record a trip or show your way, and only while you use it.

This website

Kept in your browser, not sent to us: your light or dark choice, your cart's id (so the cart is still there next time), your answer to the cookie question, and the language you picked.
Counting visits: if we turn on visit counting, it is either Plausible, which sets no cookies and keeps no personal data, or Google Analytics, which sets cookies and therefore loads only after you press Allow. Your answer is passed to Shopify's own analytics too. Change it any time under Cookie settings at the bottom of any page.
"Tell me when it opens", the news and the list's page: the email address you leave goes to our waitlist, described just below.

The waitlist and the news

What we keep: your email address, which products you asked about, whether you ticked the monthly news, the page you signed up on, when you signed up and confirmed, the network (IP) address the sign-up and the confirmation came from, the wording you agreed to and the language it was shown in. The last five are the record that you asked, which Canada's anti-spam law requires us to keep.
Nothing until you confirm: we email you a link first. Until you open it you are on no list and get nothing more from us. The link works once, for 7 days.
What we send: one email when a product you picked goes on sale, and, only if you ticked it, Ridgewake news about once a month. Every email says who sent it and has a one-click unsubscribe.
What we count: for each email, whether our mail service took it, and whether a link in it was clicked (links go through our own address first, then straight on to the page). Some emails also carry a 1x1 picture that tells us the email was opened, when your mail app loads pictures; turn picture loading off and it tells us nothing. We use these counts only to see what people find useful. They are never sold or shared.
Who else handles it: the service that sends our email gets your address and each email's words.
Leaving: unsubscribe from any email and it stops at once; we keep a note that you unsubscribed so you are not emailed again by mistake. To have your address and its record erased completely, reply to any of our emails and ask.

What you can do

Take everything with you: the data export saves one ZIP of every drive (a spreadsheet, and a GPX route for each drive with GPS), your fuel log, battery readings and places, on the phone or by email to your confirmed address. The same ZIP carries account.json: your account, its settings, your loggers, the phones signed in, Ridgewake Plus, and everything else kept under your account (service reminders, expenses, geofences, saved routes, the vehicles you share).
Save your logbook as a spreadsheet and any route as a GPX file.
Delete the whole account (Settings > Delete the account, in the app or on this website's account page): it is deleted at once, with its drives, routes and positions, its logbook, fuel log, places, geofences and settings, the phones signed in, and its claim on every logger, which can then be claimed again. We email you to say it was done.
What deleting does not reach: the anonymous road-speed averages (they carry no account or vehicle), a record that a Plus code was used (with no account in it), what Stripe, Shopify, Apple or Google keep under their own rules, and the copies in our backups of the database, which are kept only to restore the service after a failure. A Ridgewake Plus subscription from the App Store or Google Play is not stopped by deleting the account: cancel it in the store.
Factory reset a logger (hold its button 10 seconds) before you sell it or give it away.

Questions about your data: reply to any email Ridgewake has sent you.