Privacy Policy

1. Introduction

MyRide SG ("we", "us", or "our") operates the MyRide SG web application (the "Service"), accessible at myridesg.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password.

User-Generated Data: Information you voluntarily enter into the Service, including motorcycle details (make, model, plate number), maintenance logs, fuel fill-up records, mileage readings, expense records, and document expiry dates (COE, insurance, road tax).

Usage Data: We may collect information about how the Service is accessed and used, including your device type, browser type, pages viewed, and time spent on pages.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To authenticate your identity and manage your account
• To store and display your motorcycle and maintenance data
• To send service reminders and expiry alerts you have opted into
• To calculate and display fuel efficiency, cost per km, and spending analytics
• To operate the XP rewards and gamification system
• To improve and personalise the Service
• To communicate important updates about the Service

4. Google Sign-In

We use Google OAuth 2.0 to authenticate users. When you sign in with Google, we access only your basic profile information (name and email address) as permitted by the scopes you authorise. We do not access your Gmail, Google Drive, Google Contacts, or any other Google service data. Your use of Google Sign-In is also governed by Google's Privacy Policy.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data in the following limited circumstances:

• Service Providers: Third-party vendors who assist us in operating the Service under confidentiality agreements (see Section 5a below).
• Workshops on the platform: When you book a workshop or submit a review, your name, contact details, bike info, and review text are shared with that workshop (and reviews are public).
• Legal Requirements: If required by law, regulation, or valid legal process.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred with appropriate notice.

5a. Third-Party Data Processors

We use the following processors to operate the Service. Each is bound by a data processing agreement and applicable privacy standards:

• Google LLC — authentication via Google Sign-In (OAuth)
• Base44 — application backend, database, and authentication infrastructure
• Web Push Service (browser-native) — delivery of push notifications you opt into; routed through your browser vendor's push service (e.g. Mozilla, Apple, Google)
• Cloud hosting — encrypted storage of your data on cloud infrastructure with industry-standard security

Some processors may store or process data outside of Singapore (e.g. United States, European Union). Where data leaves Singapore, we ensure a comparable standard of protection as required under the PDPA Transfer Limitation Obligation.

5b. Push Notifications

If you enable push notifications, your browser provides us with an anonymous push subscription endpoint. We use this only to deliver alerts you've opted into (service reminders, expiry warnings, booking updates). You can revoke push permission at any time from your browser or device settings, and remove the subscription from Settings → Notifications.

6. Data Retention

We retain your personal data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at hello@myridesg.com. We will process deletion requests within 30 days.

7. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), access controls via row-level security, and secure cloud infrastructure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7a. Data Breach Notification

In the unlikely event of a data breach that is likely to result in significant harm to affected users, we will:

• Notify affected users within 72 hours of becoming aware of the breach
• Notify the Personal Data Protection Commission (PDPC) of Singapore as required under the PDPA Data Breach Notification Obligation
• Provide guidance on protective steps you can take

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time by disconnecting Google Sign-In and deleting your account
• Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore

To exercise any of these rights, contact us at hello@myridesg.com.

9. Cookies and Local Storage

We use browser local storage and session cookies to maintain your login session and application preferences (e.g., theme, settings). We do not use third-party advertising cookies. You may clear cookies and local storage through your browser settings, which will log you out of the Service.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Governing Law

This Privacy Policy is governed by the laws of Singapore, including the Personal Data Protection Act 2012 (PDPA). Any disputes shall be subject to the exclusive jurisdiction of the courts of Singapore.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us: