Legal & Privacy

Information RiderMate collects

• Account and profile information: display name, email address, authentication and session information, account identifiers and Rider Profile preferences such as work areas or postcodes, delivery apps and vehicle choices.
• Rider records: earnings, mileage, expenses, shifts, plans, targets, vehicle costs, tax-related records and assumptions, and other information you choose to enter.
• Subscription information: selected plan, Stripe customer, subscription, Checkout, invoice, payment-status and refund identifiers, contract status, discount-code references and affiliate-attribution references.
• Communications: messages and information provided in support, refund, rights-request and complaint communications.
• Technical and security information: authentication cookies, request and operational logs, error details, browser or device information made available in requests, and security rate-limit data. Limited browser failure reports contain controlled categories, app sections, operations, technical codes and build references, not raw error messages, account identifiers, financial values, passwords or authentication tokens. For unauthenticated rate limiting, RiderMate hashes limited forwarded IP-address and user-agent information rather than using it to locate you.
• Aggregate usage information: cookie-less Vercel Web Analytics measures page views, page paths, referrers where available, country or region, and browser and device categories. It also counts successful new-shift logging events without shift details, and coarse anonymous, confirmed paid-subscriber or authenticated non-subscriber activity categories where membership status can be verified. These are anonymous visitor estimates and activity counts, not exact counts of unique people or database records. Query strings and fragments are removed from analytics page URLs before transmission. RiderMate does not attach account identifiers, email addresses, billing references or rider records to these analytics.
• Weather requests: a selected area is mapped to a configured weather zone. Stored weather-zone coordinates or provider location and the required forecast date range may be sent server-side to the weather provider.

RiderMate does not store your payment-card details; Stripe collects and handles those details on its hosted payment pages. RiderMate does not currently collect precise live GPS location or use an IP address to infer your work area. RiderMate does not currently load advertising, behavioural profiling, session replay or fingerprinting, and does not send user records to an external AI service.

How and why the information is used

• To perform the contract: create and secure your account; save and display your records and preferences; provide planning, forecasting, earnings, export and tax-estimate features; provide RiderMate PRO; administer Checkout, subscriptions, discounts, cancellations and refunds; and respond to service requests.
• For legitimate interests: prevent abuse and fraud, apply security limits, diagnose faults, keep services reliable, maintain accurate billing state, defend claims and understand operational problems and aggregate usage to improve the service. RiderMate considers the effect on users before relying on these interests.
• To meet legal obligations: maintain records required for tax, accounting, consumer, payment, fraud-prevention and data-protection purposes, and respond to lawful requests.
• With consent where it is specifically required: if RiderMate introduces processing that legally requires consent, it will ask first. Withdrawing consent would not affect earlier lawful processing.

Who receives information

• Supabase provides authentication and session handling, database services, server-side functions, secret storage and parts of the weather-refresh runtime.
• Vercel hosts RiderMate, runs application and scheduled server functions, routes requests and keeps limited operational logs. It also provides cookie-less Web Analytics for aggregate page-view and usage statistics.
• Stripe provides hosted Checkout, payment processing, subscription management, refunds and the customer billing portal. Stripe receives information needed for those services, including email, internal user and Checkout references, selected plan, discount or affiliate references, and billing details entered on Stripe's pages.
• Visual Crossing supplies weather forecasts. It receives the configured weather-zone location or coordinates and forecast date range, but RiderMate does not send it your user ID, email, earnings or shift records.
• Authentication email delivery providers deliver account and security emails through Supabase. The particular production email-delivery provider is not identified in the application code and can be confirmed on request.
• Support mailbox providers process emails sent to or from hello@ridermate.app, including support, refund, rights-request and complaint communications. The particular production mailbox provider is not identified in the application code and can be confirmed on request.

RiderMate may also disclose information to professional advisers, insurers, courts, regulators, law-enforcement bodies or another organisation involved in a business transfer where reasonably necessary and lawful. RiderMate does not sell personal information.

RiderMate does not currently use a customer-support tracking SDK, advertising provider, behavioural profiling provider, session-replay provider, separate error-monitoring service or external AI processor. Aggregate Web Analytics uses Vercel; operational console logs are handled within the Vercel and Supabase services described above.

International processing

Some providers may process information outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, RiderMate will use an applicable lawful mechanism, such as UK adequacy regulations or approved contractual safeguards, and take additional measures where appropriate. This notice does not claim a provider region or contractual arrangement that RiderMate has not verified.

How long information is kept

Retention depends on why the information is needed:

• Core account, earnings, mileage, expense and tax-related records: up to six years after the user's last use where needed for legal, tax, accounting or dispute purposes.
• Payment, refund, contract and complaint records: up to six years where needed.
• Accounts that never become paid accounts: normally up to 12 months after last activity.
• Technical and security logs: only for the shorter period reasonably required for security, troubleshooting and provider operations.
• Backups: until overwritten through the normal backup cycle.

Self-service account deletion removes your RiderMate account and the product data covered by that process. RiderMate and its providers may still retain payment, refund, contract, fraud-prevention, security, complaint and other records where legally required or reasonably necessary. Stripe may retain transaction records under its own legal obligations and retention rules. Account deletion therefore does not promise erasure of legally required transaction records, and backups age out through their normal cycle.

Your UK data-protection rights

Depending on the circumstances, you may have the right to ask for access to your information, correction, deletion, restriction of processing, an objection to processing, or transfer of information in a portable form. You may also withdraw consent where processing relies on consent and complain to the Information Commissioner's Office.

You can start self-service account deletion from Settings, under Billing, or from an authenticated restricted-account screen. Self-service account deletion does not include a data-export offer; the existing Shift History CSV export remains a separate feature. This does not automate every data-protection right or override records RiderMate must retain. Manual deletion and other erasure requests, and requests for access, correction, restriction, objection or portability, may be sent to hello@ridermate.app. RiderMate may need to verify your identity and will respond without undue delay and within the applicable legal timeframe, normally within one month. The law permits more time in limited circumstances; if that applies, RiderMate will explain why.

Security and your choices

RiderMate and its providers use technical and organisational measures intended to protect information, but no internet service can guarantee absolute security. Keep your account credentials private and contact RiderMate promptly if you suspect unauthorised access. After confirmed account deletion, RiderMate attempts to remove that account's RiderMate storage and authentication session from the browser or installed PWA where deletion is completed. It cannot remotely clear local state on another browser or device, downloaded exports, browser history or password-manager entries; clear RiderMate site or PWA data on those devices yourself. Clearing browser or installed-PWA storage may also remove local preferences or unfinished signup information, and some locally dismissed items may return.

Necessary authentication storage

Supabase authentication uses first-party cookies with names based on the RiderMate Supabase project, commonly shaped like sb-<project-ref>-auth-token. A session may be split across cookie chunks, and a temporary PKCE verifier may be used for sign-in, password recovery or other secure authentication flows. This storage is necessary to sign you in, maintain your session and protect authentication flows.

Unfinished signup information

Local storage may temporarily hold unfinished onboarding information under ridermate.pendingSignupProfile. It can contain the account identifier, email address, display name, selected work area, vehicle and apps so RiderMate can safely finish onboarding after an interruption. RiderMate removes it when the related onboarding flow completes or is cleared, but browser storage may otherwise retain it until it is removed by RiderMate or by you clearing site data.

Rider Insights and Dashboard preferences

Rider Insights uses persistent local storage containing an opaque user namespace and a limited rotation history of up to 20 insight identifiers, families, purposes and dates. It does not store the underlying earnings or tax amounts in that history. RiderMate preserves this information so recently shown insights can rotate sensibly across visits.

Dashboard To Do dismissals also use persistent local storage, namespaced by an opaque authenticated-user value, stable task key and occurrence key. This prevents a different RiderMate user in the same browser from inheriting the dismissal and allows the same occurrence to remain dismissed on that browser or device. It does not synchronise across browsers or devices, and clearing browser or PWA storage may make a dismissed action return.

Temporary Catch-Up storage

Session storage may use a key containing your authenticated account identifier and Catch-Up setup revision, with a random mutation identifier stored as its value for concurrency checks and idempotency. It lasts for the browser-tab session and helps prevent duplicate or stale Catch-Up updates.

Offline application files

RiderMate's service worker uses the browser's Cache Storage for offline support. The current RiderMate cache, ridermate-offline-v2, stores only the self-contained offline page. Older RiderMate offline-cache versions are removed when the service worker updates. The cache remains until it is updated, removed by RiderMate or cleared through browser or PWA storage controls. RiderMate does not create an IndexedDB database.

Storage on hosted provider pages

Third-party services may use their own cookies or similar storage when you visit pages they host. For example, Stripe Checkout and the Stripe customer portal may use storage for payments, fraud prevention, security and session continuity. That storage is governed by the provider's own information presented on its hosted service.

Who provides RiderMate

RiderMate is provided by:

Who may use RiderMate

RiderMate is available only to people aged 18 or over who are in the United Kingdom. It is designed for delivery riders. You must give accurate account information and use RiderMate only for lawful purposes.

What RiderMate provides

RiderMate provides tools for planning work, tracking earnings, mileage and costs, producing earnings forecasts, reviewing performance and estimating tax. Features may use the information and assumptions you enter together with weather, date, event and other forecasting signals.

Forecasts, predicted earnings, tax figures and other calculations are estimates. They are not guarantees, financial advice, tax advice or a substitute for advice from a qualified professional. Actual earnings, demand, costs and tax can differ. You remain responsible for checking the accuracy and completeness of your records, filing returns, paying tax and meeting your other legal obligations.

RiderMate PRO price and renewal

• RiderMate PRO costs £5 monthly or £48 annually before any applicable discount. No free trial is currently offered.
• RiderMate is not VAT registered. The displayed price is the total subscription price.
• Your subscription renews automatically at the applicable monthly or annual interval until it is cancelled.
• You can view subscription and billing information through the Stripe customer portal linked from your RiderMate account.
• You can cancel through your account. Cancellation normally takes effect at the end of the paid billing period, and access normally continues until then.

Discount codes

Discount codes may differ in percentage, eligible plan, duration and other conditions. A discount described as “lifetime” or “for life” applies only while the original subscription remains uninterrupted. Successful payment recovery before Stripe cancels the subscription does not interrupt it.

If cancellation takes effect, or payment recovery fails and the subscription lapses, a lifetime discount ends unless the specific offer states otherwise. Other discount codes follow the terms attached to their particular offer. A discount does not change the underlying standard subscription price and may not be combined with another offer unless its terms say that it can.

Your initial 14-day cancellation and refund right

You may cancel your initial purchase within 14 days and receive a full refund, including where you have already accessed RiderMate during that period. You do not need to give a reason.

To exercise this right, email hello@ridermate.app from your account email address, or identify that address in your message, and clearly request cancellation and a refund. A request may use the following model wording, but does not have to:

To: hello@ridermate.app

Subject: Cancellation of my initial RiderMate PRO purchase

I give notice that I am cancelling my initial RiderMate PRO subscription purchased on [purchase date]. My RiderMate account email is [account email]. Please provide the full refund due.

Name: [name]
Date: [date]

Normal cancellation after the initial 14-day period does not create a right to a refund unless a refund is legally required or RiderMate otherwise agrees.

Deleting your account

Deleting your account is separate from cancelling RiderMate PRO and from exercising a cancellation or refund right. A subscription that can still renew or collect payment must first be cancelled through Billing. Where deletion is available during an already-cancelled paid period, deleting immediately ends any remaining access and does not automatically refund unused time. RiderMate may retain transaction and other records where the law or a legitimate legal need requires it, as explained in the Privacy Notice.

Your account and acceptable use

You are responsible for keeping your password and devices secure, for activity under your account and for telling RiderMate promptly if you believe your account has been compromised. You must not share access, attempt to bypass access or payment controls, misuse discount codes, interfere with the service, introduce malicious code, scrape or overload RiderMate, access another person's information, or use RiderMate unlawfully or fraudulently.

Availability and changes

RiderMate aims to provide a reliable service, but continuous or error-free availability is not guaranteed. Maintenance, faults, provider outages, security work or events outside reasonable control may interrupt features. RiderMate may change, suspend or withdraw a feature where reasonably necessary, while taking account of paid subscriptions and applicable consumer rights. Material changes to these terms will be communicated where required, and the current version and effective date will remain on this page.

Intellectual property

RiderMate and its software, design, branding and original content are protected by intellectual-property law. Subject to these terms, you receive a personal, limited, non-exclusive and non-transferable right to use RiderMate. You retain ownership of information you enter and permit RiderMate to process it only as needed to provide, secure and operate the service and as described in the Privacy Notice.

Suspension and termination

You may stop using RiderMate, cancel RiderMate PRO or use self-service account deletion when its billing-safety check allows it, as described above. RiderMate may suspend or terminate access for a serious or repeated breach, fraud, security risk, legal requirement or non-payment, using proportionate notice where reasonably practicable. Termination does not remove rights or liabilities that already arose, including applicable cancellation, refund and data-protection rights.

Responsibility and liability

Nothing in these terms excludes or limits liability where doing so would be unlawful, including liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or your statutory consumer rights. RiderMate is responsible for foreseeable loss caused by its failure to use reasonable care and skill or by its breach of these terms. RiderMate is not responsible for loss that was not reasonably foreseeable, for outcomes caused by inaccurate or incomplete information you supplied, or for decisions made by relying on an estimate as though it were a guarantee or professional advice.

Law and disputes

These terms are governed by the law of England and Wales. If you live in Scotland or Northern Ireland, you retain the benefit of any mandatory local consumer law and may bring proceedings in your local courts. Please contact hello@ridermate.app first so RiderMate can try to resolve a concern fairly.