Privacy · Dirtmo

The short version#

We collect what Dirtmo needs to work: your email, your profile, your rides and what you post.
Your original GPS recordings and your privacy zones are never shown to anyone. Others see a cleaned-up map with your zones cut out, and only if you let them.
No ads, no analytics, no tracking across apps or sites. We don’t sell your personal information, rent it, or share it for advertising, and we never sell your location.
Dirtmo is offered in Canada and the United States, to adults: 18 or older, or the age of majority where you live if higher. Our database and files are in the United States.
You can delete your account in the app at any time. Email support@dirtmo.com for a copy of your data or to fix it.
When you receive a club code’s benefit, we keep a coded form of your email, made with a secret key, to give that benefit once per email for life. Gmail dots and +tags count as the same email, including googlemail.com addresses. This record stays after you delete your account. It contains no readable email address and cannot be used to contact you, but Dirtmo can check whether an email it is given matches it. Clubs and riders cannot read it; staff see counts, not the records.

What we don’t do#

We never sell your personal information, and never share it for advertising.
No ads, in the app or on this website.
No tracking across apps or sites.
We don’t train AI models on your information.
Apple Health data stays on your devices and never reaches our servers.

Who we are#

Dirtmo is a dirtbike app for iPhone, Apple Watch and Android, and this website, dirtmo.com, run from British Columbia, Canada. It is offered only to adults in Canada and the United States: 18 or older, or the age of majority where they live if higher.

Privacy Officer. Dirtmo’s Privacy Officer, its founder, is the person in charge of protecting personal information and responsible for how Dirtmo handles it. Reach the Privacy Officer at support@dirtmo.com for any question, request or complaint about your information, including about our service providers in the United States.

We follow Canada’s federal privacy law (PIPEDA), the privacy laws of British Columbia, Alberta and Quebec, and the US laws that apply to us. Sections below say what this means if you live in Canada, Quebec, the United States or Washington. Our Consumer Health Data Privacy Policy is on its own page.

If you use Dirtmo from another country, for example while travelling, this policy still applies as written and your information is handled the same way. Dirtmo is not offered there, and we don’t promise rights under that country’s laws.

What we collect#

Your account: Your email address, your @handle, your display name (and earlier ones, so a report stays traceable), an optional profile photo, bio and links, when you agreed to the Terms, and your settings: private profile, Share my times, notification choice. Staff can see when you last used the app, to support you and keep Dirtmo running; we keep only the latest time, with no history.
Your age from the store: Where the law makes app stores check ages (Texas does now), the App Store or Google Play may tell the app your age range and whether a parent agreed. We use it only to check you’re 18 or older and to follow that law, never share it, and delete it after the check.
Your rides: While you record: your precise location as GPS points (position, time, accuracy, height, speed and direction), barometer height changes and when the phone’s motion sensor says you were moving, pauses and gaps, the phone’s time zone and the app version. Also a ride’s title, who sees it, where you cropped it, and GPX files you import. From these we work out distance, riding time, the trails you rode, trail times and badges.
What you add: Posts, photos, comments, likes, saved posts, condition reports (with a place on the trail and an optional photo), trails you propose, changes you suggest to trails, points of interest, routes you plan or share, Looking for riders posts, trail work you log and work parties you join, and your bikes, their photos and service log in the Garage. The app re-saves photos on your phone before upload, which drops their location and other hidden data; photos of points of interest are cleaned again on our server.
People: Friends and friend requests, blocks, riders you tag, clubs you follow, group rides you join, and whose club code you joined with (when a place is available, you follow that club).
Phone number: Only if you add one, in Edit profile or to say I’m in on a Looking for riders post.
Privacy zones: The circles you draw and their labels.
Live location: While you share a group ride or a ride with your Pit crew: your latest position, speed and heading, and since when you’ve been stopped. We don’t keep a line of your live positions.
Pit crew: A crew phone signs in without an account, email or phone number. It gives the name its owner types, and we keep that name, a random identifier for the phone, whether it is an iPhone or Android, its push tokens and time zone, who it is connected to, invite links and codes, and notification choices. For a ride shared with your crew: its status, start place and time, finish time, distance, Back by and alerts.
Your device: A random install id made by the app, whether the phone is an iPhone or Android, and a push notification token while notifications are on. The app’s connection library also sends the phone’s system version. To list clubs near you, the Clubs tab sends where you are, rounded to about a kilometre; it isn’t stored. Before you share your location, the app may ask our server for a rough place from your network address (to about 10 km) to start the map there; that isn’t stored either.
Reports and support: Reports you make or that are made about your content, moderation decisions, and emails you send us. If you use Contact us in the app, we receive your message, account ID, name, account email and app version. We send these privately to Dirtmo support so we can reply. No ride tracks or diagnostic files are attached automatically. On Android you can choose to add crash details to a message, or to send them when the app asks after a crash: the app version, phone model, Android version and where the app crashed, never your location or rides. They stay on your phone until you send them.
App stability reports: If the app stops unexpectedly, crashes or freezes, it sends us a short report the next time you open it while signed in. The report says what kind of stop it was, whether a ride was recording, the app and phone software versions, the phone model, and where in the app’s code it stopped. It never includes your location, rides, trails, messages or phone number. Only Dirtmo staff can read these reports, and we use them only to fix the app.
Trails you send us: If you use Send us a trail, we keep the files, answers and email you send only to review the submission and to write to you about it, and the email is cleared 90 days after we decide. Nobody else sees them.
Club tools: If you run a club: what you publish for it (its page, posts, trail statuses and staging areas) and a record of who changed what.
Dirtmo Pro: Pro is free for everyone for now. If you buy it in the app later, we keep a record of each subscription event from the store (its kind and time, never the price, your country or card), the store’s transaction id and when your Pro ends.

What we don’t collect. No third-party analytics or crash-reporting services (our own stability reports are described above), no advertising, no advertising identifiers, and no tracking. We never read your contacts: riders are found by name and handle only. The app asks for location only while you use it, and only after you allow it in your phone’s settings: to show you on the map, record rides you start, share where you are when you choose to, and find clubs near you. Apple Health data, including heart rate the Apple Watch app shows during a ride, stays on your devices and never reaches Dirtmo’s servers (see our Consumer Health Data Privacy Policy).

Why we use it#

To run Dirtmo: sign you in, save and process your rides, show them to the people you choose, and keep your feed, friends and clubs.
To match rides to trails for trail times, leaderboards, badges and your riding level.
To make anonymous totals, such as how popular a trail is and its usual time. These count every rider’s times, yours too even with Share my times off, and show only once at least five riders are behind them, so nobody can be picked out.
To send you sign-in codes by email, push notifications you allowed, and, if you help run a club, an email about riders’ changes and reports on its trails.
To keep Dirtmo safe: rate limits, handling reports, and stopping abuse and bulk copying of trails.
To answer you when you write to us.

Who sees what#

Your profile is public by default: any signed-in rider sees your totals, friends, clubs and your public rides. Turn on Private profile and only friends do. Your name, handle, photo, counts and PRO mark always show.

Your bio and links (YouTube, Instagram, TikTok, Facebook, X, a website) show on your profile in the app, to whoever may see it: every rider while it is public, only friends while it is private. They are not on the website. Add only what you want seen. Dirtmo stores the handles you type and never contacts those sites.

Each photo or text post goes to your friends unless you choose Everyone, which any signed-in rider can then see, even if your profile is private. The rest of a private profile stays friends only. You can change it later; choosing Friends takes it away from everyone else at once.

Each ride is Public (whoever may see your profile), People tagged on this ride, or Only me. Others see its title, start time and a cleaned-up map with your privacy zones cut out, never the original recording. A ride on a trail its club keeps hidden stays yours alone.

Trail times show on leaderboards, your profile and your ride posts to whoever may see your profile, while Share my times is on (it is, until you turn it off).

Share links you create show a ride’s cleaned-up recap to anyone with the link until you remove it. A friend who saved a shared ride offline keeps that copy.

Condition reports show to riders of that trail with your name. Trails you propose show to your friends, with your zones cut, then to everyone once enough riders ride them.

Your phone number goes only to the author of a Looking for riders post you say I’m in to, and no longer through Dirtmo once you undo it, remove the number, or either of you blocks the other.

Clubs never see your private rides; a club role gives no access to them. If you log trail work with a club, the club can export it, with volunteers’ names, for the land manager. A block, either way, hides everything between the two of you.

A few Dirtmo staff can see account details such as your email and when you last used the app, to run Dirtmo, answer you and handle reports. They can also view posts, including posts only your friends can see, to look after the community and handle reports, and see the emails of accounts that download unusually many trails, to stop copying. Staff use two-step sign-in, and every change they make is logged. Community moderators can see a rider’s earlier display names, to handle reports. We don’t look at your private rides unless you ask us to, to fix a problem, or the law requires it.

Privacy zones and live location#

A privacy zone hides a place, like your home, on every map others see of your rides, on trails you propose, and in your live location. We cut a circle a little bigger than yours and not centred on it, so the middle can’t be worked out. What is left of a route can still hint at where you rode.

On a group ride, only Pro riders who joined the same ride see where you are, and only while you record. Sharing your own live location stays free. We keep only your latest position, never a history. Inside a privacy zone you show as hidden. Positions are deleted when the ride ends or you stop sharing, and after 12 hours at most.

Your Pit crew is separate: people you invite with a link or code can follow your ride in the app without an account, for free. They see your current position only while you record, never the line you rode or a position inside a privacy zone. They also see ride status, time out and Back by, and a summary of your last shared ride when you finish. They can receive late and stopped alerts. Hide any ride to stop sharing it with your crew, or remove a crew member to end their access.

Who processes it#

We use a few service providers. They handle data only to provide their service to us.

Supabase: Our database, sign-in and file storage: your account, rides, posts and photos. Hosted in the United States (Amazon Web Services, Northern California). Its sign-in service records the network address and app or browser type of each sign-in.
Vercel: Hosts this website and the background jobs that process rides, check uploaded files and send emails and push notifications. United States.
Resend: Sends our emails, including messages from the app’s Contact us form to Dirtmo support and a club’s trail updates, and may deliver the sign-in codes Supabase sends: your email address, your name and the message. United States.
Apple: Delivers push notifications to iPhones and Apple Watches (the words of the notification, such as who liked, commented or invited you, and what to open). Also the App Store and, if you turn it on, Apple Health on your own devices.
Google: On Android: delivers push notifications through Firebase Cloud Messaging (your push token, an install id Firebase makes, and the words of each notification); works out your position through Google Play services; passes a Pit crew invite link through Google Play when the app is first installed from it; and, if your phone backs up apps, keeps some app settings in your Google account (never your sign-in, account or rides). Also Google Play.
RevenueCat: If you buy Pro in the app, handles the subscription with the App Store or Google Play and tells us about it: your Dirtmo account id and the purchase. Not used while Pro is free for everyone.
Cloudflare: Hosts the map files (maps.dirtmo.com). When a map loads, your device asks it for map pieces, which shows it your IP address and the area in view. Cloudflare also runs the security check on the staff sign-in page.

The basemap is built from OpenStreetMap data with Protomaps, and trail heights come from Natural Resources Canada. We only use their data; nothing about you goes to them.

When you tap Text or WhatsApp to reach a rider, your phone opens that app; what you send there is between you and that service. We share information with others only if the law requires it, to protect someone’s safety, or if Dirtmo changes hands, in which case this policy continues to apply.

Where it’s stored#

Our database and files are in the United States. Information stored or processed there is subject to US law, and US courts, law enforcement and national security authorities may be able to get it under that law.

Our service providers outside Canada collect, use or store your information in the United States, each only for the purposes listed under Who processes it: Supabase (database, sign-in and files), Vercel (this website and background jobs), Resend (emails), Google (Android push, location and backups), Apple (push and the App Store), Cloudflare (map files and the staff sign-in check) and, only if Pro is sold, RevenueCat (subscriptions). Apple, Google, RevenueCat and Cloudflare may also handle data in other countries where they operate. Our Privacy Officer answers questions about how these providers handle your information: support@dirtmo.com.

Your rides, the maps you download and cached lists are also kept on your phone, and your phone’s own backups may include some of them.

How long we keep it#

Account and profile: Until you delete your account.
Club code benefit: Dirtmo sets the places and free Pro months for each club. The coded email record stays for life, including after account deletion, so a new account cannot receive the benefit again.
Invite codes: When you enter an invite code at sign-up, we hold your email with it until your account is made, about two hours at most.
Rides and posts: Until you delete them, or your account.
Riding areas you download: Which riding areas you download while signed in is kept for 30 days, to spot bulk copying of trails, and deleted with your account.
Live location: Until the ride ends, and 12 hours at most.
Pit crew: Invite links and codes last until used, 7 days at most. A ride’s start place is cleared when it ends. A crew phone connected to nobody and unused for 30 days is removed.
Condition reports: They leave the map after 3 days, or when cleared (a tree, ruts or a closure sign lasts up to 30 days). The report stays with your account until you delete it.
Push notifications: One not delivered within a day is dropped. Sent ones are cleared after 30 days, a Pit crew one after a day.
Contact us messages: Our copy of a message you send with Contact us is kept for 90 days after it is sent to our support mailbox (or after we stop trying to send it), then deleted, and it is removed when you delete your account.
App stability reports: App stability reports are deleted after 90 days, and when you delete your account.
Trails you send us: The email you send with a trail is cleared 90 days after we decide on it (accepted or declined); until we decide, we keep it so we can ask you about the trail. A submission whose upload you never finish is deleted after 24 hours.
Network addresses: For visitors who aren’t signed in, rate limits keep a scrambled form of the address, made with a secret key, for about a day at most. A trail you send us keeps that scrambled form with it for 7 days, then it is cleared. Our hosting providers and Supabase’s sign-in service keep logs of their own.
Moderation and staff records: Kept so decisions stay traceable, including after an account is deleted. The log of what staff did keeps the handle and email of the staff member, and can keep those of the account they acted on.
Pro purchases: The store event record stays, without your account, after you delete it.

Your choices#

Who sees each ride: on the ride, under its name.
Private profile and Share my times: You → Settings.
Privacy zones: You → Settings → Privacy zones.
Crop a ride before it leaves the phone, or later from the ride’s ··· menu.
Live location: only if you join, and Stop sharing my location at any time.
Phone number: change or remove it in Edit profile.
Bio and links: change or remove them in Edit profile.
Notifications, location and Apple Health: in your phone’s settings and You → Settings.
Delete a ride or a post: it goes everywhere, including its shares and trail times.
Block a rider: see Help.

Deleting your account#

In the app: You → Settings → Edit profile → Delete account, at the bottom. After you confirm, we email you a code, and entering it deletes the account. Or email support@dirtmo.com from your account’s address. Deleting your account doesn’t cancel a Pro subscription bought in the App Store or Google Play; cancel it there.

Your profile, rides, trail times, posts, shares, friendships, phone number and privacy zones are removed from Dirtmo at once, and your comments and reports stop showing. Your files (tracks and photos) are then deleted from storage, usually within minutes; if a try fails, we keep trying for about two days. Your sign-in record goes last, and with it your comments, the reports you made and your earlier names. Your times leave every anonymous total at its next nightly count.

What stays: the coded email record for a club code benefit, which contains no readable email address, profile or account id; moderation decisions and the staff log (see How long we keep it); a store purchase record without your account; and trail work, points of interest and club photos you gave a club, without your name.

We can’t recall copies already outside Dirtmo: a shared ride a friend kept offline on their phone, GPX files you exported, a number someone already copied, or a support email already delivered to our mailbox. If our database host keeps backups, they may hold your data until they expire; if we ever restore one, we delete removed accounts again before anyone can use it.

Getting or fixing your data#

Wherever you live, you can ask for a copy of the personal information we hold about you, ask how it was used and who it went to, or ask us to correct or delete it. Email support@dirtmo.com from your account’s address. We may ask you to confirm it’s you. There is no button for a copy yet: we put it together by hand. It’s free, and we answer within 30 days (45 days for a request under a US state law: see If you live in the United States). You can also export each of your own rides as a GPX file from the ride’s ··· menu.

If you live in Canada#

We collect, use and share your information only for the purposes in this policy, with your consent. You give it when you sign up and when you turn on a feature, such as location or live location. You can withdraw consent at any time by turning a feature off, changing a setting, or deleting your account; some parts of Dirtmo can’t work without the information they need.

You can ask to see and correct your information as described above. If you’re unhappy with our answer, write to our Privacy Officer first; you can also complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Information and Privacy Commissioner of Alberta, or, in Quebec, the Commission d’accès à l’information.

If you live in Quebec#

Person in charge. Dirtmo’s founder, as its Privacy Officer, is the person in charge of the protection of personal information; reach them at support@dirtmo.com. Besides the rights above, you can ask for your information in a structured, commonly used format, and ask us to stop spreading your information or to remove a link to it where the law allows. If you’re not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec.

Who sees your riding. Today a new profile is public, Share my times is on and a new ride is Public until you change them: Private profile and Share my times in You → Settings, and each ride under its name (see Who sees what).

Technology that locates or profiles you, and how to turn it off:

Your location (GPS): off until you allow it in your phone’s settings, and used only while you use the app. A ride is recorded only when you start it. Turn location off for Dirtmo in your phone’s settings at any time.
Live location: shared only when you join a group ride or start sharing with your Pit crew. Stop sharing, hide the ride from your crew or remove a crew member at any time.
Clubs near you: the Clubs tab sends where you are, rounded to about a kilometre, only while location is allowed. It isn’t stored.
A rough place from your network address: before you allow location, the app may ask our server for your area, to about 10 km, to start the map there. It isn’t stored.
Riding level, pace and rank: each night Dirtmo works out, from the trail times of your rides that others may see, a riding level, a pace, the area where you ride most and your place among that area’s riders (such as “Top 8%”). This is profiling. It is worked out even while Share my times is off, but then nobody else sees your level, pace or times. A ride set to Only me is never counted. There is no switch yet that stops the calculation itself; to remove it, delete those rides or your account.
Suggestions: suggested riders and the For you feed use the areas where you ride, the riders you rode with and friends you have in common to choose what to show you.

One decision is made by a computer alone: the word filter blocks text with a slur, such as a post, comment or name, when you send it. If you think it got it wrong, email us and a person will look at it.

Your information is stored and processed outside Quebec, in the United States and in other countries where our providers operate, by the providers listed under Who processes it, under their data protection terms.

How we manage your information. The person in charge decides how Dirtmo handles personal information. This policy says who can see it (Who sees what), how long it is kept and how it is deleted (How long we keep it, Deleting your account) and how it is protected (Security). If a confidentiality incident happens, we record it, and we tell the Commission and the people affected when it presents a risk of serious injury. Write to the Privacy Officer with any complaint; we answer within 30 days.

If you live in the United States#

Several US states, including California, Virginia, Colorado, Connecticut, Utah, Texas and Oregon, give their residents privacy rights. Some of these laws may not apply to a service of Dirtmo’s size, but we give these rights to every rider in the United States:

Know and access what personal information we hold about you, and get a copy you can take elsewhere.
Correct it, and delete it (deleting your account in the app does this).
Opt out of the sale of your information, targeted advertising and profiling that has legal or similarly significant effects. We do none of these.
Appeal a refused request by replying to our answer; we answer an appeal within 45 days and tell you how to contact your state attorney general if you disagree.
No discrimination: using these rights never costs you anything in Dirtmo.

Ask at support@dirtmo.com, from your account’s address so we can confirm it’s you. Someone you authorize can ask for you with your signed permission; we’ll still confirm with you. We answer within 45 days. If we say no, you can appeal by replying; we answer an appeal within 45 days and, if we still say no, tell you how to complain to your state attorney general.

What we collect, in the categories these laws use: identifiers (email, handle, account and install ids, push tokens), personal records (name, phone number if you add one), precise geolocation (your rides and live location), photos and what you post, and app activity (likes, comments, friends, clubs). It comes from you and your phone, and from other riders (tags, friend requests, reports). We use it for the purposes in this policy and give it only to the service providers listed, to run Dirtmo.

Precise location is sensitive, and we ask before we use it. Before your phone asks, Dirtmo shows its own screen saying why it needs your location. We collect it only after you allow it, and only while you use the app: to show you on the map, record the rides you start, share where you are when you choose to, and find clubs near you. We never use it to infer anything else about you, never use it for ads, and never sell it. To withdraw your consent, turn off location for Dirtmo in your phone’s settings: collection stops at once. Rides you already saved stay until you delete them or your account.

No sale, no sharing. We don’t sell your personal information or share it for cross-context behavioral advertising, as US state laws define those words, and we haven’t in the past 12 months. We don’t collect, use or sell personal information to train large language models or any other AI model. We sell no personal information, so there are no categories sold and no buyers to list. We don’t use it for targeted advertising, and we offer no financial incentive for it. We don’t knowingly sell or share the information of anyone under 18.

Global Privacy Control and Do Not Track. We treat a Global Privacy Control signal as a request to opt out of sale and sharing, though we do neither. This website has no tracking cookies and lets no one else track you across sites, so it works the same whether or not your browser sends Do Not Track.

Washington consumer health data#

Our Consumer Health Data Privacy Policy, for Washington, Nevada and similar laws, is on its own page: dirtmo.com/consumer-health-data.

Security#

Sign-in is by emailed code, with no password to leak. Every read and write is checked on our server against who you are. Files are private and downloaded only through links that expire within minutes, except profile photos, which anyone with their address can load. Staff use two-step sign-in. No system is perfect: if a breach puts you at real risk, we’ll tell you and the regulators (in Canada, the federal, Alberta and Quebec commissioners; in the US, as each state requires) as the law requires, and we keep a record of every breach.

Age#

Dirtmo is not for anyone under 18, or under the age of majority where they live, and it is not made for children. We don’t knowingly collect information from anyone that young. If we learn an account belongs to someone that young, we delete it. If you think one does, email support@dirtmo.com.

This website#

Visiting dirtmo.com sets no cookies and loads nothing from advertising or analytics companies; pages, images and map files come from the providers above. If you sign in on the website, for your account or club tools, the site keeps your sign-in in cookies and remembers your theme and unsaved trail edits in your browser. The staff sign-in page also loads Cloudflare’s security check.

Changes#

We’ll update this page when Dirtmo changes what it collects or who processes it, and change the date at the top, which is when this version took effect. If a change matters, we’ll tell you in the app or by email before it takes effect, and ask for your consent again where the law requires it.

Contact#

Questions, requests or complaints about your information: our Privacy Officer, support@dirtmo.com. Anything else: support@dirtmo.com. See also the terms and help.