Privacy Policy

This policy covers the Motozy Android app, the Motozy web dashboard (motozy-app.com/app) and their backend services. Motozy is a rental-business management tool: a business owner ("Owner") signs up, invites their staff, and uses the app to track their own bikes, rentals, customers, expenses, and payments.

Who controls what

The Owner controls their business's data. Customer/renter names, phone numbers, rental records, pricing, and expenses that an Owner or their staff enter into the app belong to that business. Motozy stores it on their behalf (as a data processor) so it's available across their devices and staff accounts — Motozy does not sell it, share it with other businesses, or use it for anything other than running the app.

Motozy (the developer) controls account and diagnostic data described below — collected to operate, secure, and improve the app itself.

What each person on a business can see depends on their role. Owners and Managers see the business's financials; Staff see the fleet, rentals, customers and payments they need for the day, and only the current month's figures.

What we collect

To create and secure your account:

• Your sign-in method: a phone number (verified with an SMS code), an email address and password, or your Google account (we receive your name, email address and Google account ID, never your Google password).
• Email accounts must confirm their address by tapping a link we email before a business can be set up.
• Business name and type, city, and the currency, time zone, market and app language you choose.

Business data you or your staff enter:

• Bike/fleet records and maintenance records; rental records (including the renter's name and phone number with country code); payment records; expense records; staff names and roles — stored per business and never visible to other businesses.
• Customer records: name, phone, email, address, notes, and the date consent was recorded.
• Photos or documents you choose to attach: a customer's ID photo or document, a bike photo, a bike's registration/insurance/road-tax document, an expense receipt, your business logo, or your own profile photo. Every one of these is optional — nothing is captured automatically or without you picking a file.

Automatically, to run and improve the app:

• Firebase Analytics: anonymized usage events (which screens are used, general app health) — not linked to renter data.
• Firebase Crashlytics and Performance Monitoring: crash and error reports and app speed measurements (device model, OS version, stack traces) to fix bugs.
• Google abuse protection (Play Integrity / reCAPTCHA) when you sign in with a phone number, so bots cannot use the SMS service.
• Firebase Cloud Messaging: a notification token, used to deliver product news and offers from Motozy. Your plan, country and app language decide which messages you receive. You can turn these off any time in Settings → Notifications.
• Subscription status: Google Play purchase tokens, used to verify an active subscription (handled via Google Play Billing; Motozy never sees payment card details).

Only on your phone (not sent to us): the country of your SIM card, mobile network or phone language is read once to pre-select your dialing code. A working copy of your business data is kept on the device so the app opens fast and works offline; it is erased when you sign out or delete your account, and it is excluded from Android cloud backups.

Emails we send: address verification and password-reset emails (through Firebase Authentication), a monthly business report to the Owner's email address on Pro plans, and replies to messages you send us.

What we do not collect: payment card numbers, government ID numbers as data fields (an ID photo you attach is stored as a file, not read), precise location, your contacts, or any data from people who are not using the app (a renter's data is entered by the Owner/staff, not collected directly from the renter by Motozy). We never access your phone's camera roll or files beyond the one photo or document you pick each time.

How we use it

• To provide the core rental-tracking functionality
• To authenticate you and keep your business's data isolated from every other business using Motozy
• To verify an active subscription and enforce Pro-only access to Pro features
• To diagnose crashes and improve reliability
• To contact you about your account (e.g., subscription renewal, security notices) — and to send product news only while you have news notifications switched on

Who else receives it

• Google provides our infrastructure (Firebase and Google Cloud, Google Play billing, Google Sign-In). It processes data for us; it is not sold to anyone.
• WhatsApp and other apps you choose. When you tap to share a receipt, a payment reminder, a review request or a staff invite — or leave automatic receipts on — Motozy hands the message or image, and the phone number you entered, to WhatsApp (or your phone's share sheet) on your own device. Motozy's servers do not send these or see them, and WhatsApp's own terms and privacy policy apply to what happens next.
• The web dashboard (Pro) shows the same data in a browser to people who sign in and belong to your business, with the same role limits as the app.
• We do not sell personal data, do not show ads, and do not collect an advertising ID.

Where it's stored

Records are stored in Google Cloud Firestore; photos and documents you attach are stored in Google Cloud Storage. Both are hosted in the asia-southeast1 (Singapore) region, behind Firebase Authentication and server-side security rules that restrict every read/write to members of that specific business.

Data retention and deletion

Business data is retained for as long as the account is active. To delete your account:

• In the app: Settings → Delete My Account
• On the web, without needing the app installed: motozy-app.com/app/delete-account.html

If you're the Owner, this signs out your entire business immediately — you and every staff member lose access at once. Your records, photos and documents are then permanently erased 30 days later. That short window exists only to recover from an accidental request: contact contact@motozy-app.com within 30 days and we can restore full access; after that, deletion is final and cannot be undone. If you're a Manager or Staff member, only your own account and access are removed immediately; the business's data is unaffected.

We keep a small record that a business existed and was deleted (its name, plan, and a few aggregate counts such as number of bikes and rentals) after the 30 days are up, for our own internal reporting — never the actual bike, rental, customer, or payment records, which are erased along with everything else. Signing out of the app, or deleting your account, also clears the business data and generated report files held on that phone.

Your choices

• Turn news and offers off in Settings → Notifications; alerts about your own rentals are separate switches.
• Ask us to correct, export or delete your information: contact@motozy-app.com.
• Owners are responsible for having a lawful basis (for example, the renter's consent) for the customer data and ID photos they store in Motozy.

Children

Motozy is a business tool and is not directed at, or knowingly used to collect data from, children.

Changes to this policy

If this policy changes materially, we'll update the "Last updated" date above and, for significant changes, notify Owners in-app.

Contact

Questions about this policy or a data deletion request: contact@motozy-app.com