Privacy Policy

BRAP is operated by two private individuals based in Ukraine. For privacy requests or questions about the processing of your personal data, contact us at: andrey.skumin@gmail.com, slavamokeev@icloud.com.

We do not intentionally collect payment-card details. BRAP does not currently use personal data for targeted advertising or integrate an advertising network for that purpose.

Location is a core part of several BRAP features. When you start a ride, BRAP may use foreground and background location so the ride can continue to be recorded while the app is in the background or the screen is locked. Ride points may first be stored locally on your device and later uploaded to our backend. If an upload fails, a pending local copy may remain until it is successfully processed or cleaned up.

During an active ride, BRAP may send your latest position to our backend and make it visible to other users according to the applicable visibility settings. Live-location visibility, completed-ride visibility, public ride sharing, and route-end trimming are separate controls and should not be understood as one universal privacy switch. Depending on your settings, completed rides and shared ride links may expose route and ride information to other users or, where public sharing is enabled, to people without a BRAP account.

Location may also be processed when you create or use planned rides, events, map notes, SOS alerts, weather, map, geocoding, or external navigation features. Some of these functions send coordinates to service providers such as Mapbox, Open-Meteo, Google Maps, Waze, or the location/geocoding services provided by your operating system.

You can change location permissions in your device settings. Disabling location or background location may prevent ride recording, live-map, SOS location, or other location-based features from working correctly. Operating-system restrictions, connectivity, GPS reception, battery settings, or force-closing the app may interrupt or delay location processing.

BRAP is a social motorcycle service. Information you publish or share may be visible to other users and, for some features, on public BRAP web pages. This may include profile information, motorcycles, rides, posts, events, groups, marketplace listings, images, statistics, map notes, and other content. Messages and chats are stored as application data and are not represented as end-to-end encrypted.

Visibility differs by feature. A privacy choice for live location does not necessarily apply to completed rides, public share links, events, marketplace listings, SOS alerts, or other content. Before publishing or sharing information, use the available privacy controls and consider whether you are comfortable making that information available to the relevant audience.

Where the GDPR, UK GDPR, or similar laws apply, we rely on the legal basis appropriate to the processing. This may include performance of our agreement with you where processing is necessary to provide a feature you request; your consent where required, including for device permissions or non-essential analytics technologies; our legitimate interests in operating, securing, troubleshooting, and improving BRAP where those interests are not overridden by your rights; and compliance with legal obligations.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing that was lawful before withdrawal, and some BRAP features may stop working if the required permission or consent is withdrawn.

BRAP uses PostHog for limited product analytics and Sentry for crash, error, and performance monitoring. PostHog is used to understand general feature usage and app interactions. We do not intentionally send your email address, precise GPS coordinates, ride routes, message or post content, marketplace content, or other detailed user-generated content to PostHog. PostHog session replay is disabled. Sentry may process app/device information, diagnostic information, error details, and technical context needed to identify and resolve crashes and performance issues.

Product analytics, crash reporting, and GPS ride recording are different from advertising tracking. BRAP does not currently request Apple AppTrackingTransparency permission or intentionally access the IDFA, and we do not currently use BRAP data for targeted advertising. If our practices materially change, we will update this Policy and obtain any consent required by applicable law.

We use third-party providers to operate BRAP. Depending on the feature you use, personal or technical data may be processed by:

We may also disclose information where required by law, to protect users or the service, or in connection with legal claims. Other users receive information that you make available through BRAP’s social, location, marketplace, event, sharing, or community features.

BRAP is operated from Ukraine and uses service providers that may process data in other countries. Your personal data may therefore be transferred to or processed outside your country of residence, including outside Ukraine, the European Economic Area, or the United Kingdom. Where applicable law requires safeguards for an international transfer, we rely on legally recognized transfer mechanisms or safeguards made available by the relevant provider, such as adequacy decisions, standard contractual clauses, or other permitted mechanisms, as applicable.

We retain personal data for as long as reasonably necessary to provide BRAP, maintain the relevant feature, comply with legal obligations, resolve disputes, protect the service, or exercise legal rights. Different categories of data have different lifecycles, and a visibility expiry does not necessarily mean immediate database deletion.

You can request account deletion from within BRAP. The deletion process removes the main BRAP account and associated backend records that are configured to be deleted with it. Some information may remain where deletion is technically incomplete, where data belongs to or is embedded in another user’s content, where files or local pending data have not yet been cleaned up, in security or administrative audit records, backups or infrastructure logs, or where retention is required or permitted by law.

Deleting your BRAP account does not delete your Apple or Google account and does not automatically erase historical records already held independently by analytics, diagnostics, map, push, authentication, or other service providers. We may take reasonable steps to address applicable deletion requests with providers where required by law and technically available.

Your rights depend on where you live. Subject to applicable law, you may have the right to request access to personal data, correction, deletion, restriction of processing, data portability, or information about how your data is used; to object to certain processing; and to withdraw consent where processing is based on consent.

If the GDPR or UK GDPR applies, you may also have the right to lodge a complaint with the competent data-protection authority. Residents of certain U.S. states and other jurisdictions may have additional rights, including rights to know, correct, delete, or obtain a copy of certain personal information and, where applicable, to opt out of certain forms of sale, sharing, targeted advertising, or profiling. BRAP does not currently sell personal data or use it for targeted advertising.

To exercise a privacy right, contact us at andrey.skumin@gmail.com or slavamokeev@icloud.com. We may need reasonable information to verify your identity and the scope of your request.

We use technical and organizational measures intended to protect personal data, including encrypted network connections, authentication controls, and database access policies such as Row Level Security where implemented. No Internet-connected service can guarantee absolute security, and you are responsible for protecting access to your device and account credentials.

BRAP is not intended for children under 16. You must be at least 16 years old, or older if the law of your country requires a higher minimum age to use the service without parental authorization. BRAP does not currently use a date-of-birth age gate or parental-consent mechanism. If we learn that personal data from a child has been processed without a valid legal basis, we will take reasonable steps to delete it.

We may update this Privacy Policy as BRAP changes, new features or providers are introduced, or legal requirements change. We will publish the updated version and effective date and, where required, provide additional notice or request consent for material changes.

For privacy questions or requests, contact the BRAP operators in Ukraine at: andrey.skumin@gmail.com, slavamokeev@icloud.com.