Privacy Policy | Rider Point

1. Information we collect

When you use RiderPoint websites, mobile applications, Electric Bicycle Rental, repair, support, TIN/Wolt registration, accounting, or related services, we may collect information necessary to provide and secure those services:

Identity and account information such as name, surname, sex, date of birth, email address, phone number, ID card PIN code, profile photo, preferred language, referral information, and account status.
Profile and contact information such as city, address, display name, emergency contact name, and emergency contact phone number.
Service information such as Bicycle details, Rental records, Maintenance and Repair Order records, Support Tickets, messages, and service history.
Payment and financial records such as amounts, payment methods and statuses, transaction references, Investor Earnings, bank account name, and IBAN for Withdrawals. Payment card credentials are processed by payment providers where applicable; RiderPoint stores the transaction and reference information needed for service and accounting.
Photos, documents, and files you choose to upload, including profile photos, Bicycle photos and documents, Maintenance photos, and Support attachments.
Technical and security data such as installation identifiers or hashes, push notification tokens, device platform, IP address, user agent, timestamps, and security or operational logs.

2. How we use information

We use personal data for RiderPoint service, operational, security, and legal purposes, including:

Creating, verifying, authenticating, and securing Rider and Investor accounts.
Providing Electric Bicycle Rentals, Bicycle management, Maintenance, repairs, Support, and related operational services.
Processing Payments, deposits, refunds, Investor Earnings, Withdrawals, and accounting records.
Sending service, security, support, and notification messages and delivering requested TIN, Wolt, tax, or accounting services where applicable.
Preventing fraud, investigating account or device security events, troubleshooting, monitoring, maintaining backups, and improving service reliability.
Meeting legal, tax, accounting, audit, dispute-resolution, and regulatory obligations.

3. Sharing and protection of information

Rider Point LLC (RIDER POINT MMC) does not sell personal data. We disclose data only when necessary to provide a requested service, operate and secure RiderPoint, process Payments or notifications, comply with law, or protect users and RiderPoint. We use reasonable technical and organizational safeguards, including authenticated access and encrypted transport for production services.

Payment processors and configured payment or POS providers, including Kapital Bank where used to process a Payment.
Google/Firebase services used for push notifications, installation identifiers, and related mobile-app infrastructure.
Hosting, storage, email, monitoring, and technical service providers that process data for RiderPoint.
Government bodies, tax authorities, Wolt, or other service partners when you request the relevant service or when disclosure is required by law.
Authorized RiderPoint personnel receive information only as necessary to perform the applicable Rental, Support, Maintenance, Payment, accounting, security, or operational process.

4. Device permissions and mobile-app features

The RiderPoint mobile app uses device permissions only for features that need them:

Camera access is used for barcode scanning, Bicycle Photo Checks, and supported photo-capture flows.
Photo and file selection is used when you choose to upload profile, Bicycle, Maintenance, Support, or other service files.
Notification permission, push tokens, and installation identifiers are used to deliver account, Rental, Payment, Support, Maintenance, and security notifications.

5. Data retention and account deletion

Rider and Investor accounts can request deletion from the RiderPoint app or from the public Account Deletion page linked below.

When RiderPoint Admin processes an account deletion, app access is disabled and authentication and push tokens are revoked.
Direct account, profile, device, and related personal data is scheduled for purge after the configured account-deletion retention period.
Rental, Payment, accounting, audit, security, dispute, and other business records may be retained or anonymized where necessary for legal, tax, fraud-prevention, audit, regulatory, or dispute-resolution purposes.
The current deletion-retention period and a web deletion request form are available on the Account Deletion page.

6. Your choices and contact

You can update profile information in the app, manage email notification preferences, request account deletion, and contact RiderPoint about privacy questions.