KeanTrip Privacy Policy
KeanTrip is an app for motorcyclists: rides, routes, clubs, events, messages and a lobby where you talk together while riding. Here you can read what information the app stores about you, why, who sees it, how long we keep it, and what you decide yourself.
This is a translation. If the English and the Danish text differ, the Danish text applies.
- Who is responsible
- In short
- What we store, and why
- What stays on your phone
- What we do not do
- How long we keep it
- Who we share with
- When you delete your account
- Your rights
- Security
- Changes
1. Who is responsible
The data controller is
Vipcom ApSCompany reg. no. (CVR) 39388707
Vestermosevej 32, 7400 Herning, Denmark
Email: privacy@keanvt.com
Write to us at that address if you have questions, want to see your information or want it deleted. We answer within one month.
2. In short
- We store what you put into the app yourself: your profile, your motorcycles, your rides and routes, your posts, your messages and the clubs and events you take part in.
- We use your location for the map and navigation, to record a ride when you start the recording yourself, and for »Visible on the map« (»Synlighed på kortet«), only if you switch it on yourself. It is off from the start.
- We show no ads, we do not track you across apps and websites, and we never sell your information.
- We count when the app is used and how much is ridden, but only as totals without names (section 3.15).
- Your information is on servers in Ireland (EU). A few services we cannot do without (push notifications, maps and sound in the lobby) are run by companies outside the EU. Section 7 says which.
- You can delete your account in the app at any time. It is then gone at once.
3. What we store, and why
3.1 Your account
What: your email address, a password if you have chosen to set one (stored in a form that cannot be read back), when the account was created, your latest login and when you last used the app, and which reminders about an unused account we have sent you (section 6).
Why: so you can log in, and so we can send you login codes and messages about your account, including the reminder before an unused account is deleted. You log in with a code or a link we send to your email, with your password if you have set one, or with your Google account.
Sign in with Google: if you choose »Continue with Google«, Google sends us your name, your email address, the address of your Google profile picture and the id Google uses for your account. Our login server stores what Google sends. The app does not use the picture and never copies it; your first name is suggested when you create your profile. If you already have an account with us with the same confirmed email, the two are linked. Google learns that you have logged in to KeanTrip. The link is deleted with your account (section 8).
Legal basis: the agreement with you to use the app (GDPR Art. 6(1)(b)).
3.2 Your age
The app is for people aged 16 or over. »Visible on the map« requires you to be 18 or over.
When you sign up, you enter your date of birth. We do not store your date of birth. The server works out what it means and discards it:
- If you are under 16, the sign-up is refused, and everything about you is deleted at once.
- If you are 16 or 17, we store only the date you turn 18, so we can unlock visibility on the map for you then. Once you are 18 and have confirmed it in the app, we delete the date again.
- If you are 18 or over, we store only that you are confirmed as an adult, and when.
Legal basis: the agreement with you and our legitimate interest in protecting children and young people (Art. 6(1)(b) and (f)).
3.3 Your profile and your garage
What: your display name, your profile text, your profile picture, your country, your rider number and your motorcycles (make, model, year, nickname, photo).
Who sees it: everyone logged in to the app, including people you are not friends with. That is how riders find each other and see who is in a club. So only put in your profile what you are comfortable with other riders seeing. Your friends and the events you take part in are not shown to others on your profile.
Your country is set the first time from where your first ride starts. You can change it yourself in the app (at most once a day).
Legal basis: the agreement with you (Art. 6(1)(b)).
3.4 Friends, online status, clubs, posts, pictures and videos
What: who you are friends with, who you have blocked, which clubs you are a member of or follow, your posts, comments and reactions, and the pictures and videos you upload.
Online status: while the app is open, it says »hello« to the server about once a minute. We store only your status (online, busy or invisible) and when you were last active. Your friends see whether you are online, busy or away; if you choose »Invisible« (»Usynlig«), you look away. The time is also used for the rule on unused accounts (section 6) and for the totals (section 3.15). While you ride, the server stores until when you are riding, so notifications to you arrive silently, and your friends can learn it. It is deleted when the time has passed.
Who sees posts: what you choose for each post: everyone, friends only, only you, or the club. A new post is public unless you choose otherwise when you write it. A post about a route you have just rated is for friends only until you choose otherwise, and a post in a club follows the club's choice. If you make a post less visible, comments from people who can no longer see it are hidden. If you block someone, you no longer see each other's posts, comments or messages, and their comments under your posts disappear for everyone.
Clubs: a club's board can remove members' posts, routes and events from the club.
Pictures and videos: what you upload is at an address that anyone who knows the address can open, even without logging in. The address is long and random and is only shown to those allowed to see the post, but if someone passes it on, others can open the file. This also applies to your profile picture.
Legal basis: the agreement with you (Art. 6(1)(b)).
3.5 Messages
What: the messages you send and receive, who is in the conversation, and when you last read it.
Who sees it: only those in the conversation. You can only write to riders you are friends with. We do not read your messages. If a message is reported, a moderator sees that one message, not the rest of the conversation (section 3.11).
Push notifications about new messages show the sender's name and the first line of the message. They are sent through Expo and Google or Apple (section 7), who therefore see that line while the message is delivered.
When someone deletes their account, the messages they sent you stay in your conversation without their name. The same applies to your messages to others if you delete your account.
Legal basis: the agreement with you (Art. 6(1)(b)).
3.6 Events and your calendar
What: the events you create or take part in (title, time, meeting place, who is coming), and whether you are in the waiting room for an event's lobby.
Your phone's calendar: if you switch it on, the app puts the events you have said »Going« to into the calendar on your phone that you choose. The app only reads the list of calendars and its own entries in the chosen calendar to keep them up to date. It does not read your other appointments and never changes them, and nothing from your calendar is sent to us. If you choose a calendar that syncs (for example Google or iCloud), or that you share with others, your calendar service and your choice decide who sees the entries. On iPhone the app can make its own calendar, »KeanTrip«; it is in iCloud and synced by Apple, not by us. If you have reinstalled the app, it reads the entries in a calendar called »KeanTrip« once (up to a year back) to recognise its own entries; that does not leave the phone either. The entries are removed when you switch the feature off, log out or delete your account.
Legal basis: the agreement with you (Art. 6(1)(b)); the calendar only with your consent, which you give in the app and can withdraw in Settings.
3.7 Rides, routes and XP
- Rides: when you rode, how far and how long, and how many of you there were. Only you can see your rides.
- S-bends: to give points for S-bends, we store where you rode through a bend for 7 days (at most 30 if the ride has not been saved yet); after that only the time.
- Routes: when you save a recorded ride as a route, the whole track you save is stored. If you share the route, it therefore also shows where you started and finished, for example your home. Trim the start and end yourself before saving if you want to avoid that. Routes you draw without riding them are stored the same way.
- Route pictures: your phone makes a picture of each route on the map (light and dark), shown in the lists. The picture shows the same as the route and is seen by the same people. It is deleted when you delete the route or your account.
- XP: your points are stored as a ledger, one entry per ride, so you can see where they come from. The entries are not changed afterwards.
- Leaderboards: your name and points can be shown on leaderboards for your friends, your club and everyone in the app. You can switch this off on your profile (»Show me on leaderboards«, »Vis mig på ranglister«); your place is then shown without your name.
- Your own places: the places you save on the map yourself (for example »Home« or »Summer house«): the name, icon, colour, location and address. Only you can see them. You delete them yourself under »My places« (»Mine steder«), and they are deleted with your account.
Who sees routes: what you choose for each route: only you, friends, the club or everyone. This also applies to the route's picture. Someone who sees your route without having access to routes themselves (section 3.10) sees the picture but cannot open the route in detail or navigate by it.
Legal basis: the agreement with you (Art. 6(1)(b)).
3.8 Visible on the map: your location
It is off from the start, and it requires you to be 18 or over. If you switch it on, you choose who may see you: friends, friends and clubs or everyone nearby.
- Friends: your friends see your exact location and direction, wherever they are.
- Friends and clubs: also the members of your clubs, wherever they are. Anyone can join an open club.
- Everyone nearby: only riders within 25 km of you see you. Friends and club mates among them see your exact location and direction; others see an area of about 500 metres and roughly which way you are heading, and only once you have shared for two minutes. Friends and club mates further away do not see you.
- We store only your latest location, never a history, and it deletes itself after 2 minutes without a new location.
- The zone around your home: the app suggests a zone around the place you start from most often. Inside the zone your location is never sent. The zone is stored only on your phone; we do not know it.
- In a lobby call your location is also sent directly to those in the call who may see you on the map under your choice above, about once a second, so they see you without delay. It is not stored, neither by us nor by them.
- When you close the app, log out, delete your account or lose access to the feature, sharing is switched off.
If you block someone, or they block you, you never see each other's location.
Legal basis: your consent (Art. 6(1)(a)), which you give when you switch it on and withdraw by switching it off.
3.9 The lobby
In the lobby you talk through your phone's microphone. The sound is sent in real time through LiveKit (section 7) and is not recorded or stored, neither by us nor by LiveKit; recording and transcription are switched off. The app uses the microphone only while you are in a lobby, and Bluetooth only to reach your headset.
We store who is in the lobby, and when. The lobby and everything about it (members, destinations, rooms and invitations) is deleted one hour after it has closed. When a lobby closes, we store a row without names and without the lobby's id for statistics: whether it was a lobby between friends or for an event, when it was opened and closed, when the ride started, how many took part, how many extra rooms there were, and the total number of minutes. The row is deleted after 40 days at the latest and after that exists only in the totals (section 3.15).
Legal basis: the agreement with you (Art. 6(1)(b)); the statistics our legitimate interest (point (f), section 3.15).
3.10 Access
Some parts of the app, for example routes, the lobby and visibility on the map, require access. Every new account has access for 14 days from sign-up, and in periods when we open up for everyone, everyone has access. We can also give individual riders access. We store whether your account has access, why, and until when.
Nothing can be bought in KeanTrip today, and we receive no payment details. If paid access comes, we will update this policy before you can buy anything.
Legal basis: the agreement with you (Art. 6(1)(b)).
3.11 Reports and bans
You can report a post, a comment, a message, a route, a picture, an event, a club, a group or a rider. We store the report (what, why and your words about it) and a copy of what you reported as it looked when you reported it, also when it is a private message. The copy is only the one thing you reported, not the rest of the conversation. What you report is hidden for you at once, but not for others, until a moderator has looked at it.
Who sees it: only the moderator at Vipcom and the person who runs the database for Vipcom. The person you report never learns who reported them, not even if they ask for access to their information. We answer within 48 hours, and you get an answer in the app about what we did. If we remove content or ban an account, we store the reason the author was given together with the report.
How long: the copy of the reported content is deleted 6 months after the report has been handled, and the report itself 12 months after. A picture in the copy is kept only while the report is open. Open reports are not deleted.
Filter against threats: text with a direct threat against another person's life or an encouragement to suicide is refused before it is posted. The filter stores nothing about the refused text.
If someone breaks the rules seriously, the account can be banned. A banned account is deleted if the rider asks for it at support@keanvt.com. We only write factual, necessary notes about reports and access.
Legal basis: our legitimate interest in a safe app and our duties under the EU Digital Services Act (Art. 6(1)(c) and (f)).
3.12 Push notifications
To send push notifications, we store an address for your phone (a token) and a list of your latest notifications (who, what, when; deleted after 30 days). You decide in your phone's settings which kinds of notifications you want. The push address is deleted when you log out, and when it has not been used for 90 days.
Legal basis: the agreement with you (Art. 6(1)(b)); you give the push permission itself to your phone.
3.13 Technical: logs and limits
Our database and server (Supabase, section 7) keep logs of requests. They can contain your IP address, your user number and, at login, your email address, and they are deleted after 1 day. Our own server functions write user numbers in the log, never names or email. We count how many map requests each account makes, to keep costs down; the counters are deleted continuously (at most 90 days). At start-up the app asks Expo's servers whether there is an update, with a random installation number, platform and version, without your account and without your location.
Legal basis: our legitimate interest in operation and security (Art. 6(1)(f)).
3.14 Ice-cream shops, workshops and rest stops on the map
The map's »Ice cream«, »Workshops« and »Rest stops« buttons show businesses and places, not riders: name, location, address, website and opening hours. The information comes from OpenStreetMap and the Overture Maps Foundation, which collect it from public sources, including business registers. Many workshops are run by one person, so the name can be a person's. We use it only to show the places on the map; it is in the app and is updated when the app is. We leave out phone numbers.
If you do not want to be listed, write to privacy@keanvt.com, and we will remove the place with the next update. You can also correct it in OpenStreetMap yourself.
Legal basis: our legitimate interest in showing motorcyclists places along their way (Art. 6(1)(f)). The information was not collected from you (Art. 14).
3.15 Statistics without names
We want to know whether and when the app is used and people ride, and whether XP is balanced right. Without numbers we would be guessing. So the server counts:
- when the app is open (per hour),
- when posts, comments, reactions and new routes are made,
- when people ride, how far, how long and with how many, and when routes are ridden,
- when lobbies and group rides are used, and for how long (section 3.9),
- how much XP is given for each kind.
How: the totals have neither a name nor a user number, they contain no places, and time is never more precise than month, weekday and hour. They are counted from what the app already stores in order to work; the app sends nothing extra to be counted. A number is shown and used only when at least 10 different riders are behind it (for lobbies: at least 5 lobbies). Smaller numbers are combined with others until they reach that limit. They stay in the tables without names, but we never look at them on their own.
App open: so that you are counted only once an hour, we store the last hour you were counted together with your user number. It is overwritten when you are counted again and deleted with your account. You are counted as »app open« even when you have chosen »Invisible«: invisible decides what your friends see, and the count shows nobody who you are.
Riders aged 16 and 17 are counted the same way as everyone else. We find that reasonable because the totals have no names or user numbers, because nothing new is collected about them, because no number is shown with fewer than 10 behind it, and because the totals are never used for advertising, personal offers or a profile of anyone. Without them the totals would give a skewed picture of who uses the app.
How long: the number of active riders per hour is kept for 13 months. The other totals have no names and are kept.
Legal basis: our legitimate interest in understanding how the app is used and making it better (Art. 6(1)(f)). Statistics are compatible with the purposes the information was stored for (Art. 5(1)(b) and Art. 89). You can object (section 9).
4. What stays on your phone
On your phone the app stores your login session, your settings (theme, voice, calendar), the zone around your home, a ride while you record it, and, if the app crashes, an error report that you can choose to send us yourself. Pictures you take with the camera in the app are also saved in the phone's gallery. None of it is sent to us unless you do it yourself (for example by saving the ride). It disappears when you uninstall the app.
5. What we do not do
- No ads and no tracking across apps and websites.
- We never sell or rent out your information.
- We make no profile of where and when you ride.
- We do not read your contacts, your photo library or your other calendar appointments.
- We never ask to follow your location »always«, only while you use the app, and during a recording you have started yourself, with a visible notification.
- We do not use your information to train artificial intelligence, and we do not give it to others who do.
6. How long we keep it
| Information | How long |
|---|---|
| Account, profile, garage, friends, clubs, posts, comments, pictures, videos, messages, events, rides, routes, XP | As long as you have your account |
| Date of birth | Never stored |
| The date you turn 18 (only 16–17-year-olds) | Until you have confirmed that you are 18 |
| Your latest location (Visible on the map) | 2 minutes after the last location |
| Where you rode through an S-bend | 7 days (at most 30 if the ride has not been saved) |
| Sound in the lobby | Never stored |
| A closed lobby with its members | 1 hour |
| A closed lobby's times and numbers, without names | At most 40 days |
| The last hour you were counted as »app open« | As long as you have your account (overwritten) |
| Number of active riders per hour, without names | 13 months |
| Other totals without names | Kept |
| Notifications | 30 days |
| Push address | Until you log out, or 90 days without use |
| Club invitations | 1 day |
| Reports | 12 months after the report has been handled; a copy of the reported content 6 months |
| Reminders about an unused account (which and when) | Until you use the app again, or the account is deleted |
| Server logs | 1 day |
Unused accounts: if you have not used the app for 9 months, we send you a reminder by email, and again after 11 months. If you have not used it for 12 months, we delete your account and everything that belongs to it, the same way as if you had deleted it yourself. Using the app means logging in or opening it. The email says on which day the account will be deleted at the earliest, and the last reminder always comes at least 30 days before; we never delete without it.
7. Who we share with
We use these services to run the app. They process information only for us and may not use it for their own purposes.
Supabase
What it does: our database and server.
What it sees: everything in section 3.
Where: servers in Ireland (EU). The company is American; access from the USA takes place under the EU Standard Contractual Clauses.
Geoapify
What it does: the map, route planning and search.
What it sees: map areas, route points, GPS tracks for route planning, and search text. Map tiles are fetched directly from your phone, so Geoapify sees your IP address.
Where: the company is in Cyprus (EU); servers in Germany and Finland. Requests are logged for at most 24 hours.
Expo
What it does: delivers push notifications and the app's updates.
What it sees: the push address and the text of the notification; at start-up a random installation number.
Where: USA, under the EU-US Data Privacy Framework.
Google (Firebase)
What it does: delivers push notifications on Android.
What it sees: the push address and the text of the notification.
Where: USA, under the EU-US Data Privacy Framework.
Google (sign-in)
What it does: »Continue with Google«, only if you choose it.
What it sees: that you log in to KeanTrip. Google sends us your name, your email, the address of your profile picture and your Google id (section 3.1).
Where: USA, under the EU-US Data Privacy Framework.
Apple
What it does: delivers push notifications on iPhone.
What it sees: the push address and the text of the notification.
Where: USA, under the EU-US Data Privacy Framework.
LiveKit
What it does: sound and location in the lobby, in real time.
What it sees: your user number, your display name, the sound and the location while the call lasts. The sound and the location are not stored; recording and transcription are switched off. LiveKit keeps a log of the connection (user number, room and times).
Where: the log is in the EU (Frankfurt). The sound goes through the nearest data centre. The company is American; access from the USA takes place under the EU Standard Contractual Clauses.
Copernicus (via Amazon Web Services)
What it does: elevation data for route profiles.
What it sees: no personal information.
Where: Frankfurt (EU).
DLX
What it does: sends login codes and emails from us, and hosts this website.
What it sees: your email address and the content of the email.
Where: Denmark.
Transfers to the USA. Supabase, Expo, Google, Apple and LiveKit are American companies. Your data itself is in the EU with Supabase and LiveKit; push notifications go through the USA, and sound in the lobby through LiveKit's nearest data centre. Expo, Google and Apple are certified under the EU-US Data Privacy Framework, which the European Commission has approved. For Supabase and LiveKit, any access from the USA takes place under the EU Standard Contractual Clauses in our agreements with them. If the Data Privacy Framework is struck down, we will send push notifications without the message text until a new basis is in place.
We only pass on information to others if the law requires it.
8. When you delete your account
You delete your account in the app under Settings (Indstillinger): »Delete account« (»Slet konto«) is at the bottom under Account (Konto). You must type your email address to confirm. The account is then deleted at once, and it cannot be undone. Your rides, routes, posts, comments, pictures, videos, friendships, club memberships, points and settings are deleted. Events you made for a club are handed over to the club's owner; your own events are cancelled, and the participants are told.
What stays:
- Messages you sent to others stay in their conversations without your name.
- Reports you sent stay without your name until they are deleted under the rules in section 6.
- If you have blocked someone, the block still works for them.
- Other riders' points for riding your routes do not change.
- The totals without names (section 3.15) and a closed lobby's row without names, until it is deleted (at most 40 days).
9. Your rights
You have the right to:
- know what we have about you and get a copy: in the app under Settings → Account → »Download my data« (Indstillinger → Konto → »Hent mine data«). You get one file (JSON) with your own information, including your login methods, which you choose where to send. Other people's messages and information are not included. You can also write to us;
- have incorrect information corrected (you can correct most of it yourself in the app);
- have your information deleted (delete your account in the app, or write to us);
- take your data with you in a common format;
- object to processing based on our legitimate interest;
- withdraw a consent (you switch off visibility on the map and the calendar yourself).
Write to privacy@keanvt.com. We answer within one month.
If you are unhappy with how we handle your information, you can complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk.
10. Security
All traffic between the app and our servers is encrypted. Access to your information is controlled by rules on the server: your rides, your location and your messages can only be read by you and those you have given access yourself. Our keys to the services are on the server, never in the app. If we discover a security breach that may affect you, you will be told, and we report it to Datatilsynet within 72 hours.
11. Changes
If we change what the app stores, or who we share with, we update this page and write the date at the top. If the change is significant, you will be told in the app.
See also the KeanTrip Terms of Use.