01 Who we are
Club Superbikers Kerala (CSBK) is an India-based motorcycle community.
The CSBK MyApp Android application ("the app") is built and operated
by a single CSBK administrator on behalf of the club. The backend runs on
csbk.in
servers hosted in India. We do not sell user data and have no third-party
advertisers built into the app.
02 What we collect
👤 Account information
- Mobile number — used as your login identifier.
- Name, email, date of birth, place — provided by you in your member profile.
- Member ID — assigned by the club (e.g. #042).
- PIN / biometric preference — your PIN is stored in our backend (hashed); biometric data never leaves your phone.
- Verification photo, additional profile photos, bike photos — uploaded by you.
- Blood group, emergency contacts — optional, used for SOS and the Blood Donor section.
📍 Location data
- Foreground location — while a ride is open in the RideMap, weather lookups, or check-ins.
- Background location — only while you are actively in a live ride, to record your route, top speed, and arrival at the destination.
- Background location stops the moment a ride ends, you leave the ride, or you toggle Ride Guard off in Settings.
- We do not track your location outside of active rides.
📱 Device & usage data
- Device ID (Expo install identifier), device name, platform (Android/iOS), OS version, app version.
- IP address and approximate city/region (used for the admin device-intelligence dashboard).
- Session counts and total app-usage minutes (for engagement stats).
- App-permission grants are recorded only as needed to drive the UI prompts.
🏍️ Ride data
- GPS coordinates sampled at 1 Hz during the ride only.
- Top speed, average speed, minimum speed, total distance.
- Attendance: when you reach the meetup / start point.
- Arrival: when you reach the destination.
- Optional return-home arrival.
🎤 Audio (Voice Club only)
- Microphone access is requested only when you enter a Voice Club room.
- Voice audio is streamed peer-to-peer through the room. We do not record, store, or transcribe any audio.
- Releasing the microphone stops the stream instantly.
📡 Bluetooth (Mesh Voice only)
- BLE is used to discover nearby CSBK riders for short-range Mesh Voice.
- Only other CSBK members' device IDs are detected; we do not scan or record any other BLE devices in your environment.
📷 Photos & media
- Camera and photo library access are requested only when you tap "Add Photo" in Profile / Bikes / Gallery / Circle.
- Uploaded images are stored on our server and shown to other CSBK members.
🔔 Notifications & push tokens
- We register a Firebase Cloud Messaging (FCM) push token to send ride reminders, SOS alerts, return-status pushes, and admin messages.
- Push tokens are linked to your member ID and are deleted when you log out or delete your account.
📜 Consent signatures
- The Ride Waiver and Blood-Donor Consent forms collect your digital signature (drawn on screen) as an SVG.
- Signatures are stored against your member record and the specific ride / consent version.
- You can download a copy of any signed consent as a PDF from inside the app.
03 Android permissions, explained
The app requests only the permissions it actually uses. Each one below maps to a real feature — if you decline, that one feature won't work, but the rest of the app continues normally.
04 How we use this data
- Run the club app — show your profile, rides, scores, leaderboard, gallery, events.
- Coordinate rides — display every joined rider on the live map; mark attendance and arrival.
- Keep you safe — Ride Guard crash detection; SOS push to nearby members and emergency contacts.
- Notify you — push messages for ride reminders, SOS alerts, club events.
- Improve the app — admin sees aggregate engagement stats (sessions, active devices, platform breakdown). No personally-identifying info is exposed to anyone outside the club admin.
- Process voluntary support payments — see section 08 (Payments) below.
06 Storage & security
- All app data is stored on csbk.in servers hosted in India.
- Connections are protected with TLS (HTTPS).
- Passwords / PINs are stored hashed.
- The app uses an activation key system — each install is bound to a single device. If your phone is lost, contact admin to revoke and reissue.
- Background location uses a foreground service with a permanent notification while a ride is running, so you always know when tracking is active.
- Push tokens, session tokens and your local PIN cache live in your phone's secure storage and are wiped on logout.
07 Your rights
- Access — see all of your data inside the app (Profile, Bikes, Past Rides, etc.) at any time.
- Correction — edit your profile, photos, blood group, emergency contacts in the app's Profile section.
- Withdraw consent — revoke ride waiver / blood-donor consent in Settings → Gear → Consent.
- Delete your account — Settings → My Privacy → Delete Account permanently removes your profile, ride history, photos, push tokens and consent signatures within 7 days. Note: this also removes you from the club roster — contact admin if you want to rejoin.
- Disable specific permissions — Android Settings → Apps → CSBK MyApp → Permissions. Each permission maps to a single feature; revoking it disables only that feature.
- Stop notifications — turn off in the device notification settings, or per-channel inside the app (Settings → Notifications).
To exercise any of these rights, email contactus@csbk.in. We respond within 7 business days.
08 Payments (voluntary Support the Developer)
The app shows a periodic "Support the Developer" popup. The Pay button opens your installed UPI app (GPay / PhonePe / Paytm / any UPI app) pre-filled with the amount and a note containing your CSBK member ID so the developer can match the payment to your account.
- We do not store your card / UPI / bank details.
- We do not charge automatically — every payment is initiated by you, from your UPI app.
- Once the admin confirms the UPI transfer landed, your member ID is marked "paid" in the in-app donation table; future donation popups are suppressed and the Support+ premium section unlocks.
- To remove your paid record, ask the admin or delete your account.
09 SOS & health information
Ride Guard uses your phone's accelerometer to detect potential crashes while a ride is live. If a crash is suspected, the app starts an on-screen countdown that lets you cancel. If you don't cancel:
- An SOS push is sent to your designated emergency contacts and to the club admin.
- Your last known GPS coordinates are included.
- An emergency SMS is sent if internet is unavailable, using the SEND_SMS permission.
Your blood group, emergency contacts, and any medical notes are stored only for SOS use. They are visible only to: (a) the admin, (b) other members designated as your emergency contacts, and (c) members within proximity who receive the SOS broadcast — and only after an SOS fires.
10 Children
CSBK MyApp is intended for adult motorcycle club members (18+). We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, contact us at contactus@csbk.in and we will delete the account.
11 Changes to this policy
We may update this policy occasionally to reflect new features or legal requirements. The "Effective" date at the top of this page reflects the latest version. If we make a material change (new categories of data, new third-party sharing), you'll see a one-time consent prompt inside the app the next time you open it.
12 Contact
Questions, privacy requests, or to delete your data — please email:
contactus@csbk.in
Club Superbikers Kerala · Kochi, Kerala, India