RidopPrivacy Policy
In short. Ridop helps friends plan outings together. We collect the minimum it needs to work: your email to sign in, your name so your crew knows who's coming, and what you create in the app. No ads, no trackers, nothing is sold. Your data is hosted in Montréal. The app has no access to your location or your contacts. You can delete your account yourself, in the app, at any time.
1. Who is responsible
Ridop is operated by Louis Nault, in Québec (“we”).
Person in charge of the protection of personal information: confidentialite@ridop.app. Write to us with any question, to exercise your rights or to report a problem.
2. What we collect and why
| Information | Why |
|---|---|
| Your email address | To sign you in: we send you a 6-digit code. We have no passwords. We never send you advertising. |
| Your display name | To show it to the members of your squads and the guests of your ridops. |
| What you create: ridops (title, description, dates, start, finish and stop locations, itinerary), replies (Yes, Maybe, No), squads, invitations, change proposals and votes | To make the app work for you and for the people you invite. |
| Cover photos you choose | To show them to the ridop's guests. Our server re-creates every photo and removes all its metadata, including GPS location. The original file is never kept. |
| Your phone's notification token and the app language | To send you the notifications you turned on, in your language. |
| Your IP address | To limit abuse (for example, too many code requests). It is kept in memory for a few minutes up to an hour, never in a database. |
We do not collect: your location (the app never asks for location access), your contacts, your date of birth, payment data, or usage data for analytics or advertising.
3. Who sees what in the app
- A ridop, its participants and its photos are visible only to invited and approved people.
- Someone who receives an invite link sees, before being approved, the title, the date, the organizer's name and the map of the route or meeting point. They see neither the participants nor the photos.
- A squad and its member list are visible only to its members.
- There is no user search: nobody can find your account by your name or email. There is no “online” status either.
- Notifications show on the lock screen the ridop title (or squad name) and the action, never an address, a place or a time.
4. Our service providers
We do not sell, rent or trade any information. We use these providers, only for what is described:
| Provider | What it does | Where |
|---|---|---|
| Amazon Web Services | Hosts the app: database, photos, sign-in emails. | Canada (Montréal) |
| Google (Google Maps Platform) | Finds the places you search for and computes routes and distances. Our server queries Google: Google receives the search text and the route's places, not your name, email or IP address. | May be outside Québec and Canada |
| Apple and Google (Firebase Cloud Messaging) | Deliver notifications to your iPhone or Android: they receive your phone's token and the notification text. | May be outside Québec and Canada |
| Cloudflare | Manages the ridop.app domain and hosts these web pages. | May be outside Québec and Canada |
In the app, maps are displayed by Apple Maps on iPhone and by Google Maps on Android: your phone downloads map images directly from them. The “Open in Google Maps” button sends the route's places to Google when you tap it.
Before entrusting information to a provider outside Québec, we assess whether it is adequately protected there, as required by Québec's Law 25.
We may disclose information if the law requires it (for example, a court order).
5. How long we keep your data
| Data | Retention |
|---|---|
| Your account (email, name) | As long as your account exists. Account inactive for 2 years (no sign-in): deleted, after a warning email sent 30 days before. |
| Sign-in codes | Valid 10 minutes, kept only in hashed (unreadable) form, erased within 24 hours. |
| Cover photos | Until the organizer replaces or removes it, or deletes their account. |
| Notification token | Until you sign out, delete your account, or Apple or Google rejects the token. |
| Notifications waiting to be sent | 7 days. |
| Server technical logs | 30 days. They contain no sign-in codes and no tokens. |
| Database backups | 7 days: deleted data may remain there up to 7 days, then disappears. |
6. Deleting your account
In the app: Profile › Delete my account. Deletion is immediate and permanent. You can also request it by email: see Delete your account.
What happens: your email, name, codes and sessions are erased; upcoming ridops you organize are cancelled; you leave your squads; your votes and undecided proposals are erased; your ridops' photos are erased. In other people's past ridops, you appear as “Deleted account”.
7. Your rights
At any time, you can:
- know what information we hold about you and get a copy, including in a structured, commonly used format (portability);
- have inaccurate information corrected (your name can be edited directly in Profile › Edit);
- have your information deleted;
- withdraw your consent, for example by turning off notifications (Profile › Notifications or your phone settings) or by deleting your account.
Write to confidentialite@ridop.app from your account's email address. We answer within 30 days. If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec.
8. Security
- No passwords: sign-in with a one-time code sent by email.
- All communications are encrypted (HTTPS); the database and photos are encrypted at rest.
- Codes and session tokens are stored only in hashed form; on your phone, your session is kept in the system's secure keychain.
- Photos are never reachable through a public link: our server checks every time that the person is invited.
If a confidentiality incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned, as the law requires.
9. Minimum age
Ridop is for people 16 and older. If we learn that an account belongs to someone under 16, we delete it.
10. Changes
If we change this policy in an important way, we will let you know in the app or by email before the change applies. The update date is shown at the top of this page.