Privacy Policy
This privacy policy explains how Everytech ("Everytech", "we", "us", "our"), the Danish company that publishes RideDiag, handles information in connection with the RideDiag apps (RideDiag for Moto Guzzi, RideDiag for BMW Motorrad, and any future brand app in the RideDiag family) and the ridediag.com website (together, the "Service").
Everytech is a data controller established in Denmark (CVR 46324072, Copenhagen, Denmark). You can reach us at support@ridediag.com for any privacy question, including to exercise the rights described in section 8.
1. Summary
RideDiag is designed to be local-first. There is no user account. Your VIN, odometer readings and generated reports stay on your device and are never sent to our servers. The only information that reaches our servers is what is strictly needed to operate the credit system that unlocks protected functions, and — only if you opt in — anonymised crash reports. Details follow below.
2. Information we collect
2.1 Activation and credit data
When you activate a credit using an activation code, the app sends the following to RideDiag's servers, and we store it for as long as your activation remains valid, plus 24 months:
- A random device key generated by the app (not derived from any hardware identifier tied to you personally);
- A device id;
- The platform (e.g. Android) and app version;
- The brand app you are using (e.g. Moto Guzzi);
- Your credit ledger (how many credits you have redeemed and have remaining).
We also keep an audit log of key requests, retained for 12 months. This log records only a seed prefix — never your VIN, never an odometer reading, and never any other data specific to your motorcycle.
2.2 Diagnostic data
ECU identification, fault codes, live data, freeze frames, VIN, odometer readings and generated PDF reports are read from your motorcycle and processed and stored only on your device. None of this is transmitted to Everytech, except where you explicitly choose to share a report yourself (for example, by emailing it to a workshop) — an action entirely outside the Service and under your own control.
2.3 Optional crash reporting
RideDiag can optionally report crashes to help us fix bugs. This is opt-in and off by default. If you turn it on, crash reports are sent to Sentry, hosted in the EU region, and are configured to never include your VIN, activation keys, seeds, odometer readings, or any server URLs the app communicates with.
2.4 Support exports
If you contact support and choose to export diagnostic information to help us help you, that export is user-initiated: you choose what to include, and the app lets you redact individual fields before anything is sent to us.
3. Why we process this information
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Operating the credit and activation system | Performance of a contract with you (Art. 6(1)(b)) |
| Audit log of key requests | Legitimate interest in preventing abuse of the activation system (Art. 6(1)(f)) |
| Optional crash reporting | Your consent (Art. 6(1)(a)), which you can withdraw at any time in settings |
| Support exports | Performance of a contract / your request (Art. 6(1)(b)) |
4. Who we share information with
We use the following categories of processors, each bound by a data processing agreement:
- Infrastructure providers hosting the activation and credit servers;
- Sentry (crash reporting, EU region), only if you opt in.
We do not sell your information, and we do not use it for advertising or cross-app tracking. We do not share information with Piaggio & C. S.p.A., BMW AG, or any other vehicle manufacturer.
5. International transfers
We aim to keep processing within the EU/EEA. Where a processor operates outside the EU/EEA, we rely on the safeguards required by GDPR, such as Standard Contractual Clauses.
6. Data retention
- Device and credit records: for as long as the activation is valid, plus 24 months.
- Audit log of key requests: 12 months.
- Diagnostic data (VIN, odometer, reports): stays on your device under your control; we hold none of it.
- Crash reports (if opted in): retained per Sentry's standard retention, and never contain VIN, keys, seeds, odometer readings or server URLs.
7. Security
We apply reasonable technical and organisational measures to protect the information we hold, including encryption in transit and access controls on our servers. No system is completely secure, and we cannot guarantee absolute security.
8. Your rights (GDPR)
Under GDPR, you have the right to access, correct, delete, restrict or object to our processing of your personal data, and the right to data portability and to withdraw consent (for crash reporting) at any time. To exercise any of these rights, contact us at support@ridediag.com. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.
9. Children
The Service is not directed at children and is not intended for use by anyone under the age required by applicable law to consent to processing of their own data without parental authorisation.
10. Changes to this policy
We may update this policy from time to time. We will update the effective date above when we do, and material changes will be reflected in the app or on this website. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy.
11. Governing law
This policy is governed by Danish law, and any dispute relating to it is subject to the venue of the courts of Denmark, without prejudice to any mandatory consumer-protection rights you may have in your country of residence.
12. Contact
Everytech, Denmark (CVR 46324072, Copenhagen, Denmark). Email: support@ridediag.com.