Privacy Policy

Last updated: June 2026

Throttle Torque ("we", "us", "our") operates the Throttle Torque web app and Android app. This policy explains what personal data we collect, why we collect it, and your rights under UK GDPR.

1. Who we are

Throttle Torque is operated as a sole trader based in the United Kingdom. For data protection queries, contact us at nathan.carter82@gmail.com.

2. What data we collect

• Account data — email address, username, and password (stored as a secure hash).
• Profile data — postcode and rider type that you provide during onboarding.
• Garage data — details of bikes you add, including make, model, mileage, and service records.
• Activity data — rides you create or join, crew memberships, RSVPs, and completion records.
• Subscription data — your subscription status (free or Pro) and expiry date. We do not store your payment card details — these are handled entirely by Google Play.
• Support messages — content of any messages you send via the Contact Admin or Feature Request forms.

3. How we use your data

• To provide and personalise the Throttle Torque service.
• To send crew invite emails when another user invites you to a crew.
• To manage your subscription and enforce feature access tiers.
• To respond to support messages.
• To display community features such as leaderboards and public ride boards.

4. Legal basis for processing (UK GDPR)

• Contract — processing necessary to provide the service you signed up for.
• Legitimate interests — keeping the service secure and operational.
• Consent — where you have explicitly provided information (e.g. profile details).

5. Who we share data with

• Supabase — our database and authentication provider. Data is stored on Supabase-managed servers. See supabase.com/privacy.
• Resend — used to send crew invite emails. Only your email address is shared for this purpose. See resend.com/privacy.
• RevenueCat — used to manage in-app subscriptions. Subscription status and a user identifier are shared. See revenuecat.com/privacy.
• Google Play — handles payment processing for subscriptions. We do not receive your card details. See Google's privacy policy.

We do not sell your data to any third party.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where we are required to retain it by law.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, email nathan.carter82@gmail.com. We will respond within 30 days.

8. Security

All data is transmitted over HTTPS. Passwords are never stored in plain text. Database access is protected by row-level security policies.

9. Children

Throttle Torque is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has registered, please contact us and we will delete the account.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified in the app. Continued use of the service after changes constitutes acceptance.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).