Draft. Not yet reviewed by a lawyer.
Privacy policy
We collect as little as we can. The short version: the app doesn't track you, your route stays on your phone, and this website only measures visits if you say yes.
Who is responsible
Potential Green LDA, trading as Rides on Clouds, NIF PT518205061, Rua das Maravilhas 38A, Edf. Unique Maravilhas, bloco B apt K, is the data controller. For anything about your data, write to anamaria@ridesonclouds.pt.
In the app
- Location. The app uses your location only while a drive is running, to know where you are on the route. It stays on the phone and is never uploaded.
- Account. You don't need an account to hear the intros. If you sign in, with Apple or with your email address, we keep that address and an account ID so your drives and progress follow you to another device.
- Progress. If you're signed in, we store which drives you've started and how far you got.
- Purchases. Apple handles the payment; we never see your card. We receive the state of your subscription (for example, active or expired) through RevenueCat, so the app knows what to unlock.
- Downloads. Drives you download are stored on your phone.
- Maps. When the app shows a map, it loads it from Mapbox, which receives your device's IP address to deliver the map.
The app has no advertising and no analytics, and it doesn't track you across other apps or websites.
On this website
The site is served by Cloudflare, which processes your IP address to deliver pages and protect the site from abuse.
Everything else depends on your choice in the cookie banner:
- Analytics (PostHog). If you accept, PostHog measures which pages are visited and how people move through the site, using a cookie. If you reject, PostHog still counts the visit, but without cookies or any stored identifier, so we can't recognise you on a later visit.
- Marketing (Google Tag Manager). If you accept, we load Google tags that measure whether our adverts lead to visits. If you don't, Google Tag Manager isn't loaded at all.
You can change your choice at any time with the Cookie settings link at the bottom of every page.
Cookies and similar storage
| Name | Set by | What it's for | Kept for |
|---|---|---|---|
| tt-consent | This site (local storage) | Remembers your cookie choice. Necessary. | Until you change it |
| ph_<id>_posthog | PostHog | Tells visits apart. Only if you accept analytics. | 1 year |
| _ga, _ga_<id> | Google Analytics, if run through Tag Manager. Only if you accept marketing. | Up to 2 years | |
| _gcl_au | Measures visits from Google Ads. Only if you accept marketing. | 90 days |
Who else processes data for us
We use a small number of providers to run the app and the site. They process data only on our instructions:
- Apple, for payments and Sign in with Apple
- Clerk, for sign-in
- Convex, our database
- RevenueCat, for subscription status
- Cloudflare, for hosting and for delivering audio and images
- Mapbox, for maps in the app
- PostHog, for website analytics, only as described above
- Google, for advert measurement, only if you accept marketing
Some of these providers process data outside the European Economic Area. Where they do, the transfer relies on the safeguards the GDPR allows, such as the European Commission's standard contractual clauses.
How long we keep it
Account and progress data stay while you have an account. If you ask us to delete your account, we delete them. Purchase records are kept as long as tax law requires.
Your rights
You can ask to see, correct, delete or export your data, and you can object to how we use it. Write to us and we'll answer within a month. If you're not happy with our answer, you can complain to the Portuguese data protection authority, the CNPD, at cnpd.pt.