Privacy
Last updated: 22 October 2026.
In one sentence. MotoReet is for finding people to ride with. We collect what that requires, and nothing else. Your exact address is never published, we don't sell any data, and you can delete everything.
Who is responsible
MotoReet is published by SamBaCreation, in Belgium.
For any question about your data, or to exercise your rights: confidentialite@motoreet.com
What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address | Creating the account, signing in, resetting the password | Performance of the contract |
| Username, display name, gender, photo | Being recognisable to other members before riding together | Performance of the contract |
| Approximate town | Showing the rides around you. Never the exact address | Performance of the contract |
| Declared bikes, experience, pace | Knowing whether a ride suits you, and whether you can take a pillion | Performance of the contract |
| Rides created and joined, attendance | Organising rides and calculating reliability | Performance of the contract |
| Ratings received | Letting people know who they'll be riding with | Legitimate interest: members' safety |
| Private and ride messages | Letting you get organised | Performance of the contract |
| Published photos | Illustrating rides and profiles | Performance of the contract |
| Reports and blocks | Moderating, protecting members | Legitimate interest: members' safety |
| Subscription and purchases | Giving access to what has been paid for | Performance of the contract, accounting obligation |
| Newsletter sign-up | Sending you news from MotoReet, never offers from other companies. Ticked at sign-up, you can untick it; unsubscribe in one click in every email or in the app settings | Legitimate interest (the “customers” exception of the Belgian Code of Economic Law), or your consent if you turn it on yourself |
What we don't collect
- No continuous location tracking. Your location is only read if you tap "Locate me"; it is used to centre the map, and it is neither stored nor sent.
- No third-party advertising trackers, no pixels, no resale of data.
- No exact postal address, ever, not even hidden: when a start falls inside your Privacy Zone, only the town is shown - not an approximate coordinate, because several rounded points around the same place lead back to the centre with a simple average.
What is public
Strangers look at your profile before deciding to ride with you. Visible are: display name, username, photo, bio, approximate town, bikes, declared pace, reliability, ratings, rides, published photos, followers and following.
Never public: your email address, your password, the centre of your Privacy Zone, your messages, your reports and your blocks - the person reported or blocked is not informed.
Who it is shared with
- Hosting - OVHcloud, Gravelines (France). The data stays in the European Union.
- Sign in with Google or Apple, if you use it: we receive an identifier, your name and your email address from them. Apple lets you hide your real address, and that's fine by us.
- Payment - Stripe on the web, Apple and Google on mobile. We never see your card number.
- Place search - Photon, based on OpenStreetMap: what you type when searching for a town or meeting point is sent to them to find the place.
- Emails - PlanetHoster, for sending codes, confirmations, support replies and the newsletter. The requests you send us from the app or the contact form are kept in our support tool, on our own server: only the part of the team concerned by the topic of your request can read them.
Audience measurement never leaves our hands: Umami runs on our own server, with no cookie, without keeping IP addresses and with no identifier that follows a visitor. No Google Analytics, no advertising pixel. See the Cookies page.
No data is sold, rented or handed over to data brokers. In the event of a legal obligation (court order), we only pass on what is required.
How long
- Your account: as long as it exists. You can delete it at any time.
- After deletion: your profile, sign-in identities, photos, follows and the content of your messages are erased immediately. The rides you were organising are cancelled, and their participants notified. Your username is never given to anyone else, so that nobody can pass themselves off as you.
- Reports and moderation decisions: three years, because an account that is deleted and recreated must not wipe out dangerous behaviour.
- Invoices: seven years, Belgian accounting obligation.
- Sign-in tokens: thirty days, revoked immediately on sign-out or password change.
- Newsletter: until you unsubscribe. We keep the date of your consent and of its withdrawal, so we can prove both.
Your rights
The GDPR gives you the right to access your data, correct it, erase it, receive it in a readable format, object to processing and request its restriction. Write to confidentialite@motoreet.com: reply within one month.
One exception to know about: your username cannot be changed. Reliability, ratings and reports are attached to it; a name you could change at will would let someone start afresh after bad behaviour, and members meet in person. Your display name, on the other hand, can be changed freely.
If you believe your rights are not being respected, you can contact the Data Protection Authority (Belgium): dataprotectionauthority.be.
Safety
- Everything goes over HTTPS, without exception.
- Passwords are hashed with scrypt and a unique salt: nobody, including us, can read them.
- Confirmation and reset links are stored hashed, valid once, and expire.
- Changing your password closes all sessions.
- Database backups are encrypted, copied off the server every night, and restoring them is tested automatically.
Cookies and local storage
MotoReet uses no advertising or audience-measurement cookies. On the web there is a single, strictly necessary cookie: your session, so we don't have to ask for your password every time you open it. It cannot be read by the page's scripts. The browser also keeps your display preferences. Everything disappears when you sign out.
Minimum age
MotoReet is reserved for people aged 16 or over.
Changes
Any significant change will be announced in the app before it takes effect. The date at the top of this page shows the latest version.