Privacy policy

Summary

MeshRide is designed so that your data stays on your phone. Group conversation travels from phone to phone over Wi‑Fi Direct and does not go through our servers. When you use the mobile data backup, audio is end-to-end encrypted and the server only relays it, without storing it or being able to listen to it. We do not sell data or show ads.

Data controller

The party responsible for MeshRide and for processing your data is Sebastian Eliceiri, domiciled in the Argentine Republic. For any privacy question, write to us at [email protected].

Data the app uses

Each permission is requested only once, with the motorcycle stopped, and you can revoke it whenever you want from Android settings.

Your account

To use MeshRide you need a free account, which you create when installing the app with your e-mail and a password or with «Continue with Google». We store on our server (São Paulo, Brazil): your e-mail, your name, your Google account photo if you sign in with Google, the sign-up date and open sessions (with the name of the phone model). The password is stored only as an irreversible hash (scrypt), and sessions and e-mail links are also hashed (SHA‑256). With Google we receive only your verified e-mail, your name and your photo; never your Google password. We use the account to enable Mesh with artificial intelligence, live location for your family and MeshRide Premium, and to write to you about your account (verification, password change, deletion). When you create the account with your e-mail, we send you a link to confirm it; in the meantime, the app waits with a temporary key (it never stores your password) and signs in on its own when you tap the link. Accounts that are not confirmed within 7 days are deleted automatically. The account session is not included in the Android backup.

Copy of your profile in your account (optional)

If you have an account and accept «Save my profile to the account», the app stores on our server (São Paulo, Brazil) what you set up, so you can recover it when you sign in to your account on another phone: your name and profile photo, your emergency contacts (name and phone number), your motorcycles (make, model, license plate, mileage, maintenance and consumption), your own voice commands and wake word, your «Do not disturb» contacts and your settings. Your medical information (blood type and health insurance) is not stored; it stays only on your phone, as do your intercom and calibration data. The contacts you add are other people's data: upload them only if those people agree. You can turn off the copy in Profile → Account: turning it off deletes it from the server; it is also deleted when you delete your account. With MeshRide Premium, the same copy also stores your rides: the route (GPS points with their time), distance, time and speeds, stops, marked hazards, the names of those who rode and the ride's expenses; the 100 most recent are kept and, if you delete a ride on one phone, it is deleted from the server. If you stop being Premium, the saved rides remain on the server without syncing, and they are deleted when you turn off the copy or delete your account. Server data has encrypted backups (AES‑256) that are deleted after 30 days.

Mesh (artificial intelligence)

If, with your account, you make a request to Mesh that is not a voice command (or say «Mesh, copilot…»), and there is internet, the app sends to our server the audio of that phrase (or its text), the last two questions and answers from the last few minutes, to continue the conversation, and a brief context so the answer is useful: your approximate area (with a precision of about 1 km), speed, destination and distance, fuel range, how many motorcycles are in the group, the time and the country you chose (to speak to you in your own words). No names, phone numbers or contacts are sent. Our server passes the query to Google (Gemini API), which generates the answer, and we return it to you to be read out in your helmet. Google processes those queries under its own terms and may use them to improve its products, which is why we do not include data that identifies you. We do not store the audio, the question or the answer: we only count how many questions each account asked per day, for your plan's limit, and we keep daily totals without identifying anyone (number of questions and amount of text processed per plan) to know the cost of the service. The usual commands («Mesh, mute», «where is…», the emergency) are recognized on your phone and do not go through the copilot.

«Tell us» (bugs, ideas and questions)

If you write to us from Settings → Advanced → Tell us, we store your message, the e-mail you leave (optional) and the app version, your phone model and Android version, to understand the problem and reply to you. We keep it for up to 24 months or until you ask us to delete it.

MeshRide Premium (subscription)

If you subscribe, payment is processed by Google Play: we never see your card or payment method details. The app sends us the purchase receipt (a code provided by Google Play) and we check it with Google to confirm that the subscription is active. We store that receipt in your account, along with the plan (monthly or annual) and the date through which it is paid. So that the purchase is linked to your account, the app passes Google Play an irreversible hash (SHA‑256) of your e-mail, not the e-mail itself. Google notifies us automatically when the subscription is renewed, canceled, suspended or refunded, and we update your account accordingly. If you delete your account, this data is deleted; the subscription must be canceled separately in Google Play.

Mobile data backup

If a member moves out of Wi‑Fi Direct range and has mobile data turned on, the conversation continues through our relay server (São Paulo, Brazil). The content is encrypted with a key that is generated on the phone of whoever creates the group and that the server never receives. While the connection lasts, the server only knows each phone's IP address, a random identifier for the group and the member, and technical counters. It does not store audio, positions or messages. You can turn off the backup in Settings.

Live location for your family

If you choose to, during a ride you can share a link so your family can see your live location. While the link is active, the app sends your latest position, your speed and your phone's battery to our server (São Paulo, Brazil) every 15 seconds, along with your name, the group name and your profile photo to show them on the map. The server keeps only the latest data point and the photo, in memory and never on disk, and anyone who has the link can see it. When the ride ends, or if you tap «Stop», the link stops working and the position is deleted. If you activate the emergency, the link is included in the alert to your contacts. In the Google Play version, creating the link requires being signed in to your account; with the free plan there is one trial ride (we record in your account the date you used it) and with MeshRide Premium there is no limit. The link created in an emergency is never limited.

Third-party services

• Google: maps, place search and routes (Google Maps Platform) when you use those features with internet, and cloud dictation (Speech‑to‑Text) for free text such as the content of a message. In those cases the query or the dictated audio fragment is sent to Google, under its own privacy policy.
• Google (Gemini API): generates the copilot's answers and may use the queries to improve its products, as explained above.
• Google Analytics: visit statistics for this website, only if you accept them in the cookie notice (see «This website»).
• Open‑Meteo: weather forecast when you ask for it; the coordinates of the place queried are sent, without any of your data.
• Alpha Cephei (Vosk): the first time you turn on voice commands, the app downloads the Spanish recognition model from its site (about 40 MB); after that, commands are recognized without internet. That download is an ordinary file request, without any of your data.
• Spotify: only if you connect your account, to play your playlists and share music with the group.
• WhatsApp and SMS: the messages you send by voice and emergency alerts go out from your own phone through those apps.

Diagnostics

To improve the connection and audio, at the end of each ride (and only over Wi‑Fi) the app sends our server a technical summary: link quality, delays, audio loss, battery, top speed, GPS accuracy (not the position), app events and errors, the version, the phone model and the Android version. In the Google Play version these diagnostics are anonymous: they do not include your location, people's names, contacts or what is said or dictated, and you can turn them off in Settings → Advanced → Diagnostics. The test version distributed outside Google Play also includes the names used by the group and the text of voice commands that were not understood. Diagnostics are used only to fix bugs, are deleted from the server after 30 days and are not shared.

This website

If you sign up for the waiting list, we store your name, e-mail, country and, if you provide them, your intercom and the size of your group, to let you know about the beta and send you MeshRide news. We keep them until you ask to unsubscribe. To measure visits we use Cloudflare Web Analytics, which does not use cookies or identify people. In addition, only if you accept it in the cookie notice, we use Google Analytics (Google LLC) to know how many people visit the site, where they come from and which pages they view: it stores Google Analytics' own cookies in your browser, with the IP address anonymized and without advertising or Google signals. If you reject it, nothing from Google is loaded. You can change your choice whenever you want with the «Cookies» link at the bottom of each page. This data is not combined with your MeshRide account or with the app.

Your rights

You can request access to, rectification, updating or deletion of your data, and unsubscribe from e-mails, by writing to [email protected]. We respond within the time limits of Law 25,326 on Personal Data Protection of the Argentine Republic. If you live in another country, you can also exercise the rights granted to you by your legislation (for example, the LGPD in Brazil or the GDPR in Europe).

The Agency for Access to Public Information (Agencia de Acceso a la Información Pública), the supervisory authority for Law 25,326, has the power to handle the complaints and claims filed by those whose rights are affected by non-compliance with the regulations in force on personal data protection.

MeshRide is intended for people over 18 years of age.

Delete your account

You can delete your account and all its data from the server whenever you want, from the app (Profile → Account → Delete my account) or, without the app, from meshride.app/cuenta/eliminar: we send a link to the account's e-mail to confirm it. Your e-mail, name, photo and sessions are deleted immediately, as is the copy of your profile and your rides on the server; what is on your phone (rides, motorcycles, profile) stays on the phone until you uninstall the app.

Security

Communication with this website and with the relay server is encrypted. Mobile data backup audio uses end-to-end AES‑128‑GCM. No system is infallible: if you find a vulnerability, write to us.

Changes

If we change this policy, we will publish the new version on this page with its date. If the change is significant, we will notify you in the app or by e-mail.