Privacy Policy.
Plain English summary
This is a summary. Full legal detail follows in the numbered sections below.
Rider Vault is a motorcycle management app. We collect and use your data solely to provide you with the service — nothing more.
- We hold your email address so you have an account. Your bike details, service history, and photos stay on your device — we don't keep them on our servers.
- We use your vehicle registration number to look up MOT, tax (VED), and recall data from official government sources when you open the app.
- We don't ask for your VIN or V5C reference number. We don't need them, so we don't collect them.
- We do not sell your data or share it with advertisers or use it for profiling.
- You can delete your account and all your data from within the app at any time.
- The account data we do hold is stored in the United Kingdom.
- For general queries and data subject rights requests, contact admin@arroketintelligence.com. For security and data-protection matters — including suspected data breaches — contact security@arroketintelligence.com.
1. Who we are
Arroket Intelligence Ltd ('we', 'us', 'our') is the data controller for personal data processed through Rider Vault (the mobile application and any associated service). Registered in England and Wales.
2. What data we collect and why
We collect only what is necessary to deliver the service. Each category below states what we collect, why, and the lawful basis under UK GDPR.
2.1 Account credentials
Rider Vault uses Sign in with Apple as the only way to access your account. Your Apple ID is the credential that opens your account.
Authentication assets we hold: a stable per-app Apple identifier (an opaque string supplied by Apple when you sign in) and a session token. Both are necessary to keep you signed in and to associate your account with the data you put in the app. The Apple identifier is used solely to look up your account on sign-in; it is not used for advertising, profiling, or any purpose beyond authentication. Lawful basis: Art. 6(1)(b) — Performance of contract.
Authentication assets we do not hold: no password, no recovery key or any fragment of one, no recovery share, no biometric template, no device-pair token, and no behavioural profile. Recovery of access runs through your Apple ID, not through us. The full position is set out in our Recovery Policy at ridervaultapp.co.uk/recovery-policy.
Authentication-derived signals — not collected. Geolocation patterns from sign-in events, device-pair patterns, session timing patterns, and behavioural signatures are not collected, not transmitted, not stored, and not used as inputs to any scoring or assessment the App produces. This is a deliberate non-collection decision recorded in our internal compliance log.
2.2 Vehicle data
VIN and V5C reference number — not collected. We do not ask for, transmit, or store either identifier. Neither is required to query the DVLA or DVSA APIs (both query on registration number only), and the legal change-of-vehicle-ownership process is handled by DVLA via the V5C document — not by Rider Vault. This is a deliberate data minimisation choice.
2.3 Service and maintenance records
Service logs you enter — service type, date, mileage, workshop, and notes — are stored on your device only. When a health score is calculated, a derived figure (such as distance since last service) may be sent to our server momentarily for that calculation; the service notes themselves are never transmitted to, or stored on, our servers. These records are not parsed for advertising or profiling. They are used solely to generate your health scores and reminders, on your device.
2.4 Photographs
Optional. If added, photos are stored on your device only using secure on-device storage. Photo files never reach our servers, and no filename, reference, or photo metadata is stored on our servers — photos and their details stay on your device. EXIF metadata (which may include GPS location) is stripped before the photo is written to device storage.
2.5 Location data
Rider Vault uses location in one limited way today, and one planned way in future:
On-device weather (active). With your permission, the app uses your device location to fetch local weather for display. This location is used on your device and is not sent to Arroket or any third party in a way that lets them keep it. The permission prompt states this. Because the location is processed on-device and not transmitted to us, we do not "collect" it.
GPS mileage tracking (future update — not yet active). When GPS mileage tracking is introduced, explicit consent will be required, only derived mileage figures will be stored (not raw GPS coordinates), and consent can be withdrawn from Settings at any time.
2.6 Crash and error data (Sentry)
Crash logs collected via Sentry for app reliability. Configured for crash reporting only — not behavioural analytics. Device identifiers are not linked to user accounts. Retained for 90 days. Does not constitute tracking under Apple ATT rules. Lawful basis: Art. 6(1)(f) — Legitimate interests.
3. How we use your data
We do not use your data for advertising, profiling, behavioural targeting, or any purpose beyond operating the service. We do not sell your data.
4. Data architecture and security
5. Third-party data processors
All processors have been selected with UK data residency and security in mind.
6. Data retention
7. Your rights
You have the following rights under UK GDPR. To exercise any right, contact admin@arroketintelligence.com or use the in-app controls where indicated. We will respond within 30 days. Security or data-protection enquiries — including suspected breaches — should be sent to security@arroketintelligence.com.
8. Government and data-source attribution
Vehicle and MOT data displayed within the app is sourced from official UK government APIs and is reproduced with permission:
Contains public sector information licensed under the Open Government Licence v3.0.
DVLA Vehicle Enquiry Service · DVSA MOT History API
Rider-facing weather is supplied by MET Norway (met.no) and is used under the Creative Commons Attribution 4.0 International Licence (CC BY 4.0). Attribution is shown wherever weather is displayed.
9. Changes to this policy
We will notify registered users of material changes via the email address on their account. The current version is always available at ridervaultapp.co.uk/privacy. Continued use of the app after notification constitutes acceptance of the revised policy.