Privacy Policy

Last updated: May 25, 2026

1. What Data We Collect

When you use Endurance Passport, we collect and process the following personal data:

Account Information

• Name, email address, and password (encrypted)
• Profile photo (optional)
• Country of residence

Ride Data

• GPS location data (trackpoints recorded during rides)
• Ride start and end times, duration, and distance
• Odometer photographs used for ride verification
• Additional photos captured during rides

Motorcycle Information

• Motorcycle make, model, year, and license plate (optional)

Transaction Data

• Challenge entry payments and store purchases
• Shipping addresses for physical product orders
• Payment processing is handled by third-party providers (PayPal); we do not store payment card details

2. How We Use Your Data

We process your personal data for the following purposes:

• Service delivery: To provide ride tracking, challenge participation, certificate generation, and video creation
• Ride verification: GPS data and photos are used to validate ride completion
• Account management: To manage your account, preferences, and communication
• Order fulfilment: To process store purchases and shipping
• Service improvement: Aggregated, anonymised data may be used to improve the platform

3. Legal Basis for Processing (GDPR)

We process your data based on the following legal grounds:

• Contract performance: Processing necessary to provide the services you signed up for (ride tracking, challenges, certificates)
• Consent: For optional features such as profile photos and marketing communications
• Legitimate interest: For service improvement, security, and fraud prevention

4. Data Retention

• Account data: Retained for the lifetime of your account and deleted upon account deletion request
• Ride data: Retained for the lifetime of your account to maintain your ride history and certificates
• Transaction records: Retained as required by applicable tax and accounting regulations
• GPS trackpoints: Retained with ride data; deleted when the associated ride or account is deleted

5. Data Sharing

We do not sell your personal data. We may share data with:

• Payment processors: PayPal, for processing payments
• Hosting providers: Server infrastructure providers who process data on our behalf
• Map tile providers: Your GPS coordinates may be sent to map tile services to render ride maps

6. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing of your data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, submit a data subject request or contact us at support@endurancepassport.com.

7. Cookies

Endurance Passport uses essential cookies for session management and authentication. These are strictly necessary for the service to function and do not require consent. We do not use tracking or advertising cookies.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted passwords (bcrypt hashing)
• HTTPS encryption for all data transmission
• JWT token-based authentication for the mobile application
• Access controls limiting data access to authorised personnel

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

10. Contact

If you have questions about this privacy policy or your personal data, please contact us:

• Email: support@endurancepassport.com
• Phone: +45 6021 2550
• Address: 6000 Kolding, Denmark