Last updated: 10 October 2026
TWIRVALL is an app for motorcyclists: it lets you create and share routes, join communities, chat, keep track of your bike's servicing, and buy and sell gear with other riders. This policy explains what data is collected, why, and what you can do about it.
| Data | Why | When |
|---|---|---|
| Email and password | To create and authenticate your account | At sign-up by email |
| If you sign in with Apple or Google: the account identifier, email and name | To create and authenticate your account without a TWIRVALL password. With Apple's Hide My Email, we only receive an Apple relay address | When you choose Sign in with Apple or Continue with Google |
| Username, name, bio, profile photo | To identify you to other members | When you fill in your profile |
| Phone number | Contact details on marketplace listings | Optional, only if you provide it |
| Location | To show your position on the map and share it with a group during a ride | Only with the app open, and only when you turn sharing on |
| Recorded trips: route, times, distance and speeds | To keep the trips you record and add their km to your bike and to the weekly challenge | Only after you tap Record trip, until you tap Finish — also with the screen off, with a visible notice while recording. Only you can see your trips; if you post one, the post carries only the totals |
| Photos | Posts, chats, listings, bike photos and route covers | When you choose to upload |
| Content you post | Posts, messages, comments, routes, listings, events, and the places you recommend, with your reviews and photos (visible to all users) | When you publish |
| Your bike and servicing records | Garage features: services, fuel, gear | When you record them |
| Emergency contacts | SOS feature | When you add them |
| Notification identifier and app language | To send notifications to your device, in your language | If you allow notifications |
We collect nothing beyond this table. There is no advertising, no behavioural profiling, and we do not sell data to anyone.
TWIRVALL relies on third-party services to work. Each receives only what it needs:
| Service | What for | What it receives |
|---|---|---|
| Supabase | Database, authentication and file storage | All account and content data |
| Apple | Sign in with Apple, if you choose it | That you are signing in to TWIRVALL. Apple returns your account identifier and email (or the relay address) and, the first time, your name |
| Continue with Google, if you choose it | That you are signing in to TWIRVALL. Google returns your account identifier, email, name and profile photo | |
| Expo | Notification delivery | Device identifier and notification text |
| Anthropic | Route translation | The title and description of the route you ask to translate |
| OpenStreetMap | Address and point-of-interest search | Coordinates and search terms |
| Open-Meteo | Weather forecast for a route | Route coordinates |
None of these services receives your password, which is never visible to us — it is stored encrypted by Supabase. If you sign in with Apple or Google, there is no TWIRVALL password, and your Apple or Google password never passes through us.
Your account data is kept for as long as the account exists. When you delete your account, personal data is removed immediately (see the next section). Supabase backups may retain data for a limited additional period before being overwritten.
You can delete your account at any time, inside the app, under Rider → Delete account. You do not need to ask us for anything.
When you delete your account:
If you created your account with Apple, deleting it asks you to confirm with Apple and revokes TWIRVALL's access to your Apple account. With Google, you can also remove access at myaccount.google.com → Security → Third-party apps & services.
The reason is straightforward: deleting your messages would delete half of other people's conversations, and deleting a group you created would take every member's history with it. If you want specific content removed beyond this, write to the contact address above.
Under the GDPR you have the right to access your data, correct it, delete it, restrict processing, object to it, and receive a copy in a readable format. Correction and deletion are available directly in the app; for the rest, use the contact address above.
You also have the right to lodge a complaint with your national data protection authority. In Portugal, that is the Comissão Nacional de Protecção de Dados.
Access to data is controlled at the database level by policies that ensure each user only reads what concerns them. Communications are encrypted. Group and chat photos are held in private storage, reachable only through temporary links generated on demand.
TWIRVALL is not intended for anyone under 16. If we become aware of an account belonging to someone under 16, it will be deleted.
If this policy changes significantly, the change will be announced in the app before taking effect. The date at the top shows the last revision.