Privacy Policy

1. What Data We Collect

We collect the following information when you use COA Roost AI:

• ·Account information — name, email address, and password (hashed)
• ·Profile data — riding level, home state, preferred terrain, rider handle
• ·Bike information — make, model, year, and engine size
• ·Ride data — GPS routes, distance, speed, elevation, jump metrics, and duration
• ·Location data — approximate GPS location during active rides and trail reports
• ·Marketplace listings — item descriptions, photos, pricing, and contact details you choose to share
• ·Emergency profile — blood type, medical conditions, and emergency contacts (only if you choose to set these)
• ·Usage data — pages visited, features used, and app interactions (for analytics)

2. How We Use Your Data

Your data is used to power the following features:

• ·Displaying your ride history, stats, and profile
• ·Powering the leaderboard (total km and rides — display name only)
• ·AI ride analysis and coaching insights
• ·Emergency contact and crash detection features
• ·Club membership and event management
• ·Marketplace listings and AI scam detection
• ·Improving app features and fixing bugs

3. We Do Not Sell Your Data

Your personal information is never sold, rented, or shared with third-party advertisers or data brokers. We do not use your data for targeted advertising.

4. Infrastructure Providers

COA Roost AI is built on industry-standard infrastructure. Your data is processed and stored by the following trusted providers under their respective privacy frameworks:

• ·Supabase — database, authentication, and file storage
• ·Vercel — web hosting and serverless functions
• ·Anthropic — AI analysis (ride summaries, scam detection). Query content only, no personal identifiers

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days. Aggregated, anonymised data (e.g. total km tracked on a trail) may be retained for analytics purposes.

6. Your Rights

Under the Australian Privacy Act 1988, you have the right to access, correct, or request deletion of your personal data. To exercise these rights, email us at clubs@coa.au. We will respond within 30 days.

7. Cookies and Local Storage

The app uses browser local storage to cache ride data for offline use and session state. No third-party tracking cookies are used.

8. Children

COA Roost AI is intended for users aged 16 and over. We do not knowingly collect personal information from children under 16.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via in-app notification. Continued use of the app after changes constitutes acceptance.