Privacy Policy

Last updated: 10 July 2026

Dwaal is a motorcycle touring app operated by Timodo Group B.V. ("Dwaal", "we", "us"). This policy explains what data we collect, why, and the control you have over it. Because Dwaal plans routes and records rides, it necessarily handles location data, and we treat that as the sensitive information it is.

Information we collect

• Account details: your name, username, email address, and a securely hashed password. Optionally a profile photo you pick from your photo library, a short bio, your motorcycles, and a home area you set.
• Location data: precise GPS positions while you are recording a ride, including when the app is in the background so a ride keeps recording with your screen locked. If you turn on live location, your current position is shared with your friends while you ride.
• Rides and routes: routes you plan, the tracks, distance, duration and pace of rides you record, and the road ratings you give.
• Social activity: your friends and friend requests, and the kudos and comments you send or receive.
• Technical data: basic device and log information needed to operate and secure the service.

How we use your information

• Plan routes and provide turn-by-turn navigation.
• Record your rides and keep an accurate history of your distance and activity.
• Share your rides and, if you choose, your live location with the friends you approve.
• Operate your account, keep the service secure, and prevent abuse.
• Improve routing and the app based on how features are used.

Location data

Location is the heart of Dwaal, so we are specific about it. Precise location is collected only while you are recording a ride, and background collection exists solely so a ride keeps recording when your phone is in your pocket or mounted with the screen off. Live location sharing is off by default and is opt-in per your settings. You can stop location collection at any time by ending a ride, turning off live sharing, or revoking the location permission in your device settings.

How we share information

• With other riders: friends you approve can see your rides and, when enabled, your live location, according to each ride's visibility setting.
• Service providers: we use third parties strictly to run the app: route planning and address/place search are generated via GraphHopper (your start, destination and search terms are sent to it), map tiles are served by CARTO using OpenStreetMap data (which receives the map area you view and your IP address), and our own servers host your account and ride data. These providers process data only to deliver their service to us.
• Legal reasons: we may disclose information where required by law or to protect the rights and safety of our users.
• No selling, no ad trackers: we do not sell your personal data, and Dwaal contains no third-party advertising, analytics, or tracking SDKs.

Data retention and deletion

We keep your account and ride data for as long as your account is active. You can delete individual rides, routes, comments, and your live location in the app at any time. To delete your entire account and the personal data associated with it, email us at privacy@dwaal.eu and we will erase it, except where we must retain limited information to meet legal obligations.

Your rights

Depending on where you live (including under the EU GDPR), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit most of your information directly in the app, or contact us to exercise any of these rights. You may also withdraw consent for optional processing, such as live location sharing, at any time.

Security

We use industry-standard measures to protect your data in transit and at rest, including encrypted connections and hashed passwords. No system is perfectly secure, but we work to keep your information safe and to respond quickly if something goes wrong.

Children

Dwaal is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, please contact us and we will remove it.

International transfers

Your data may be processed in countries other than your own. Where it is, we take steps to ensure it receives a level of protection consistent with this policy and applicable law.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you in the app.

Contact

Questions about this policy or your data? Email us at privacy@dwaal.eu.