Sezon (“the App”, “we”) is developed and operated by Dmytro Shakirov, an individual developer based in Warsaw, Poland (“the Controller”). For anything related to your personal data, contact us at [email protected].
This policy describes what data the App processes, why, and what rights you have. It is written to reflect what the App actually does — nothing more, nothing less.
Email address and authentication identifiers (Sign in with Apple, Google Sign-In, or email/password), plus your profile: nickname, optional avatar, country, and app settings synced to your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Motorcycles you add, odometer readings, maintenance items and service logs, expenses, fuel records, documents and gear you attach. This is the content you create to use the App. Legal basis: performance of a contract (Art. 6(1)(b)).
Legal basis: performance of a contract (Art. 6(1)(b)) for recording and sync; your consent (Art. 6(1)(a)) for live sharing, markers and leaderboards, withdrawable at any time.
You can optionally fill in an in-case-of-emergency (ICE) medical card: blood type, allergies, medication, emergency contact. This is health data under Art. 9 GDPR. We process it only with your explicit consent, given when you fill in the card. It exists so that it can be shown on your lock screen QR code and, if you enable it, to riders responding to your help signal. You can delete it at any time in Settings; deletion removes it from our servers. Legal basis: explicit consent (Art. 9(2)(a)).
Friendships, groups you join or create, group event chat messages, and your public profile card (nickname, avatar, level, season statistics — visibility configurable in Settings → Privacy). Legal basis: performance of a contract (Art. 6(1)(b)).
Legal basis: legitimate interest in keeping the App working and improving it (Art. 6(1)(f)); objection = the opt-out toggle.
Subscriptions are processed entirely by Apple through the App Store. We never see your payment details. We receive only an anonymized receipt confirming your subscription status.
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage, sync | EU region |
| Apple | Sign in with Apple, WeatherKit, push notifications, App Store payments | per Apple's terms |
| Google Sign-In (only if you choose it) | per Google's terms | |
| Mapbox | Map rendering and navigation; map tile requests include approximate viewport location | USA (EU–US Data Privacy Framework / SCCs) |
| Sentry | Crash reporting | EU |
| PostHog | Anonymous product analytics | EU |
We do not sell your data. We do not share it with advertisers. There is no advertising in the App.
Where a processor is located outside the EEA, transfers are protected by an adequacy decision, the EU–US Data Privacy Framework, or Standard Contractual Clauses.
Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time. Most of these you can exercise directly in the App (edit profile, privacy toggles, delete account). For anything else, email [email protected] — we respond within 30 days.
You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or the authority of your country of residence.
The App is not directed at children and requires users to be at least 16 years old.
If we change this policy, we will update this page and the effective date, and notify you in the App when changes are material. Material changes affecting consent-based processing will ask for your consent again.