This Policy describes how Revline ("we", "the Platform") collects, uses, stores, shares and protects the personal data of users ("you") of the Revline app and website, in accordance with the Brazilian General Data Protection Law — LGPD (Law No. 13,709/2018) and the Internet Civil Framework (Law No. 12,965/2014). By creating an account or using Revline, you agree to the practices described here. If you do not agree, do not use the Platform.
01 Who we are and how to contact us
Revline is a product of 2MT Motorsports LLC, a company organized under the laws of the State of Florida, United States of America, with its registered office at 6457 Winder Oaks Blvd, Orlando, FL 32819, United States ("Controller", for the purposes of the LGPD).
Although established abroad, 2MT Motorsports LLC offers Revline to data subjects located in Brazil and is therefore subject to Law No. 13,709/2018 (LGPD), under its article 3, II.
For any question, request or complaint about the processing of your personal data:
This channel also serves as the point of contact for the Data Protection Officer (DPO) — see Section 14.
02 What data we collect
We collect only the data necessary for Revline to work, in the categories below.
2.1 Registration and profile data
When you create an account: email and password (authentication), username, display name, full name (optional), profile photo, bio, main motorcycle model, riding category (Street, Track or Road Race) and external link (optional).
2.2 Geolocation — riding sessions
This is Revline's core function and deserves special attention. When you record a session, we collect via the phone's GPS:
- Latitude, longitude, instantaneous speed, heading and timestamp of each recorded point (roughly every 1 second or 3 meters travelled);
- The complete route trace, total distance, average/maximum speed, duration and, for PRO subscribers, lap times;
- The circuit or racetrack identified automatically by geographic proximity, where applicable.
This data is collected only while a session is actively being recorded, which is a voluntary action by the user. We never track your location in the background outside a session being recorded.
2.3 "Live" geolocation (PRO feature, opt-in)
PRO subscribers may, optionally and only when expressly enabled by them, share their position in real time with other users. In that case:
- We store only the last known position, never a continuous history in this feature;
- You choose the visibility: public, only for people you mutually follow, or invisible;
- You can define privacy zones (e.g. home, work) — when you enter the configured radius, your position is neither sent nor stored;
- Sharing can expire automatically and can be turned off manually at any time.
By default, no position is shared until you enable the feature.
2.4 Photos and videos
Photos taken with the Revline Camera (with automatic overlay of average/maximum speed and route trace) and photos/videos uploaded to posts and sessions.
2.5 Social interaction data
Followers and following, likes, comments, participation in group rides (including text messages from the group ride chat) and participation in in-app communities, which may contain links to external groups (e.g. WhatsApp) managed by third parties and outside Revline's control.
2.6 Subscription data (Revline PRO)
We store only the subscription status (active, expired or free) and the store of origin. Revline does not collect, process or store credit card data — the transaction is processed directly by Apple or Google, under their own privacy policies.
2.7 Technical data
Usage logs, session identifiers and diagnostic information necessary for the security of the service.
2.8 Sensitive data
Revline does not intentionally collect sensitive data (racial/ethnic origin, religion, political opinion, health, biometrics, sexual orientation, etc.). We ask that you do not include such information in free-text fields (bio, comments, messages).
03 Legal bases for processing (LGPD, art. 7)
| Purpose | Legal basis |
|---|---|
| Account creation and management, authentication | Performance of a contract (art. 7, V) |
| Recording and storage of GPS sessions | Performance of a contract — essential functionality requested by the user |
| "Live" position sharing | Specific, prominent consent (art. 7, I) — opt-in feature |
| Processing of the PRO subscription | Performance of a contract (art. 7, V) |
| Public display of profile/sessions in the feed | Performance of a contract, with privacy controls available to the user |
| Fraud and abuse prevention | Legitimate interests (art. 7, IX), balanced against your rights |
| Compliance with legal obligations | Compliance with a legal obligation (art. 7, II) |
| Service-related communications | Performance of a contract / legitimate interests |
04 What we use your data for
- To enable the recording, storage and display of your sessions, including metric calculation and circuit detection;
- To provide the live location feature when you enable it;
- To operate the social features (feed, followers, likes, comments, group rides, communities);
- To generate photos with metric overlays via the Revline Camera;
- To process and validate your Revline PRO subscription;
- To ensure security and prevent fraud and misuse of the Platform;
- To handle support requests and communicate relevant changes to the service or to this Policy;
- To comply with legal obligations and respond to orders from competent authorities.
We do not use your data for third-party targeted advertising, and we do not sell personal data to third parties under any circumstances.
05 Who we share your data with
We share personal data only with the processors and partners that are strictly necessary:
- Supabase, Inc. — database infrastructure, authentication, file storage and real-time communication. The processor responsible for hosting all data processed by Revline.
- Apple Inc. and Google LLC — process payment for PRO subscriptions via the App Store / Google Play. Revline receives only the subscription status confirmation, never financial data.
- Map providers (OpenStreetMap / CARTO) — map display on the website and in the app; they receive only the coordinates needed to render the requested map, with no association to account data.
We may also share personal data:
- With other Revline users, to the extent of the visibility you choose;
- By legal requirement or court order, with competent authorities;
- In the event of a corporate reorganization (merger, acquisition, sale of assets), preserving the level of protection required by this Policy.
06 Public visibility by default, and how to restrict it
By default, your profile and the sessions you record are public and can be seen by any user in the Revline feed — Revline is, in part, a social network for riders. You have full control:
- When saving a session, you can mark it as private (visible only to you);
- You can delete photos, sessions or your entire account at any time;
- Live position is never public by default — only if you specifically enable that visibility.
07 Your rights as a data subject (LGPD, art. 18)
You may exercise the following rights by request to privacy@riderevline.app:
| Right | What it means | How to exercise it |
|---|---|---|
| Confirmation and access | Learn whether we process your data and obtain a copy of it | Email; response within 15 days |
| Correction | Correct incomplete, inaccurate or outdated data | App (Edit Profile) or email |
| Anonymization, blocking or erasure | Remove unnecessary data or data processed in breach of the law | Account deletion in the app, or email |
| Portability | Receive your data in a structured format | |
| Information about sharing | Learn who we share your data with | Section 5 of this Policy; details by email |
| Information about withholding consent | Learn the consequences of refusing consent | Shown in the feature itself, when enabling it |
| Withdrawal of consent | Disable, at any time, processing based on consent | App settings |
| Objection | Object to processing based on legitimate interests | Email, reviewed case by case |
Account deletion is self-service, available in the app settings, and may also be requested by email.
08 Data retention and deletion
We keep your personal data while your account is active and for as long as necessary to fulfil the purposes of this Policy, subject to legal retention obligations (e.g. art. 15 of the Brazilian Internet Civil Framework, which requires application logs to be kept for 6 months).
When you delete your account:
- Profile data, private sessions, photos and live location are removed within 30 days;
- Public sessions that received likes/comments from third parties may retain interaction records in anonymized form, unless you request full removal by email;
- Backups may retain data for a limited additional period, exclusively for disaster recovery, and are erased in the normal backup rotation cycle.
09 International data transfers
Our data is stored and processed by Supabase, Inc., whose cloud infrastructure may be located outside Brazilian territory. This transfer is necessary for the provision of the service and observes the protection mechanisms set out in art. 33 of the LGPD (standard contractual clauses and/or equivalent safeguards offered by the provider).
10 Information security
We adopt technical and administrative measures to protect your data against unauthorized access and accidental or unlawful destruction, loss, alteration, disclosure or dissemination, including:
- Access control through row level security policies in the database;
- Encryption of data in transit (HTTPS/TLS);
- Secure account authentication.
No system is absolutely secure. In the event of an incident posing a relevant risk to you, we will notify you as required by the LGPD and the ANPD.
11 Children and minors
Revline is not directed at persons under 18 and does not intentionally collect data from children or adolescents. If we identify an account belonging to a known minor without the proper consent of their legal guardians, we may suspend the account and delete the associated data, pursuant to art. 14 of the LGPD.
12 Cookies and similar technologies on the website
The Revline website may use cookies strictly necessary for its operation (e.g. keeping your login session in the PRO Area) and, occasionally, analytics cookies to understand site usage in aggregate form. We do not use third-party advertising cookies.
13 Changes to this Policy
We may update this Policy from time to time to reflect changes in Revline or in applicable legislation. Relevant changes will be communicated in the app or by email, with the new effective date shown at the top of this document. Continued use of the Platform after a change implies agreement with the updated version.
14 Contact and Data Protection Officer (DPO)
To exercise your rights, clarify questions or submit complaints about the processing of personal data by Revline:
If you are not satisfied with our response, you may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD), at gov.br/anpd.