Privacy Policy
Last updated: 2026-11-06
MotoDoc is operated by CARDIGITAL - FZCO, a company registered in Dubai, United Arab Emirates (“MotoDoc”, “we”, “us”). Contact: support@motodoc.ai
This policy explains what personal data MotoDoc collects, why we collect it, who we share it with, how long we keep it and how you can control it. The data controller is CARDIGITAL - FZCO, Dubai, United Arab Emirates. If you disagree with this policy, please stop using the app.
Who we are
MotoDoc is an AI assistant for motorcycle service and repair questions, operated by CARDIGITAL - FZCO, a company registered in Dubai, United Arab Emirates. For any privacy question, or to exercise the rights described below, write to [email protected]. We answer within 30 days.
Data we collect
Account data: the identifier and email address provided when you sign in with Apple or Google, including flags indicating whether the email is verified or private, and your language. We verify the sign-in token. Since 23 August 2026, we store the email address and these flags with your account, along with your language. Content you provide: the motorcycles you add to your garage, the questions you ask, photos you attach, and voice input you record for transcription. Technical data: app version, device model, operating system, language, coarse region derived from your IP address, crash reports and aggregate usage events. In the Google Play and App Store apps we also record session replays: a reconstruction of the app screens and your taps while you use the app. A replay can include the text and photos shown on screen, such as your questions, the answers and attached photos. Phone numbers and sign-in codes are masked and are not recorded. Subscription data: which plan you hold and its status, as reported by the app store. We do not collect payment card details — payments are handled entirely by Apple or Google.
Why we use it, and on what legal basis
To provide the service — answering your questions, keeping your garage and chat history, restoring purchases (performance of our contract with you). To keep the service working and safe — diagnosing crashes, preventing abuse and fraud, enforcing rate limits (our legitimate interest). To improve answer quality — aggregate, non-identifying analysis of how features are used (our legitimate interest). To find and fix bugs and broken flows, such as failed purchases — reviewing session replays from the Google Play and App Store apps (our legitimate interest). You can object to this processing at any time by writing to [email protected]. To send service emails about your motorcycle model request, its status and when the model is ready, as well as your account and subscription (performance of our contract). To send MotoDoc product tips and reminders by email, no more than a few times per month (our legitimate interest). We do not sell your personal data. To measure our own advertising, the Google Play and App Store apps share limited data with advertising partners — see “Advertising attribution” below.
AI processing and who else sees your data
Your questions, attached photos and voice transcripts are sent to third-party AI providers so an answer can be generated. Depending on the request these are Anthropic (Claude), Google (Gemini) and models accessed through OpenRouter; voice input is transcribed on-device or by the platform speech service. Other processors we rely on: DigitalOcean (application hosting), Cloudflare (content delivery and protection), Plausible (privacy-friendly, cookie-less website analytics), PostHog (product analytics and session replay), Loops (Loops, Inc., United States; email delivery), RevenueCat (subscription management), and Apple and Google (payments and sign-in). Each processes data on our instructions or, for the stores, as an independent controller under their own terms. The AI assistant is a technical tool — no human reads your chats routinely; we access individual content only when you ask us for support, when we must investigate abuse, or when we review a session replay to fix a bug. We share your email address, internal user identifier, language, motorcycle name and year, and email delivery, open and click statuses with Loops. Motorcycle links in emails lead directly to motodoc.ai and contain a one-time email identifier to open the relevant motorcycle and help us understand whether the email was useful. Emails we send may contain a tiny open-tracking image (a pixel) so we can see whether they are opened and stop sending what is not useful. Our links to motodoc.ai are not routed through the provider’s click-tracking service; the provider’s own unsubscribe and preference links may be.
International transfers
We operate from the United Arab Emirates and our providers are located in the United States and the European Union, so your data is transferred outside your country. Where the GDPR or UK GDPR applies, those transfers rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
How long we keep it
Account data, garage and chat history: until you delete the item or your account. After account deletion, live data is removed immediately and encrypted backups are purged within 30 days. Crash and analytics data: up to 14 months, in aggregate form. Session replays: 30 days. Invoices and tax records: for as long as tax law requires us to retain them, regardless of account deletion. Your email address is retained with your account until you delete the account. Email sending, delivery, open and click logs are retained for 14 months, as with analytics. Your product-email opt-out is retained for as long as your account exists. The 14-month limit above applies to our product analytics; advertising attribution data held by AppsFlyer is kept for the periods described in “Advertising attribution”.
Your rights
You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent where processing is based on it. Deletion is available in the app: Settings → Delete account, and takes effect immediately (see our account deletion page). You may also write to [email protected]. If you are in the EEA, the UK or Switzerland you have the right to lodge a complaint with your local data protection authority; if you are a California resident you have the rights granted by the CCPA/CPRA, including the right not to be discriminated against for exercising them. You can opt out of marketing emails with MotoDoc product tips and reminders at any time, in one click via the link in every product email, which leads to the provider’s subscription management page. Opting out does not affect service messages.
Children
MotoDoc is not directed at children. We do not knowingly collect personal data from anyone under 13 (or under the minimum age required in your country). If you believe a child has provided us with personal data, contact us and we will delete it.
Cookies and similar technologies
The web app does not use advertising cookies or tracking identifiers. The Google Play and App Store apps use the AppsFlyer SDK for advertising attribution: on Android it reads the advertising ID, while on iOS we do not ask for tracking permission and do not collect the IDFA — see “Advertising attribution”. This website uses only what is necessary to serve pages and remember your language choice; our website analytics (Plausible) is cookie-less and does not track you across sites. The referral page stores the referral code you arrived with so the bonus can be applied.
Security and changes to this policy
Data is transmitted over TLS and stored on access-controlled infrastructure; credentials are stored hashed and session tokens are kept in the platform's secure storage. No system is perfectly secure, so we cannot guarantee absolute security. If we change this policy materially we will update the date at the top of this page and, where the change is significant, notify you in the app before it takes effect.
Using MotoDoc without an account
On iPhone and iPad you can use MotoDoc as a guest, without creating an account. The app then generates a random identifier for your device, keeps it in the system keychain and sends it to us, so that your garage, chat history and any subscription stay attached to that device. It is not an advertising identifier and is never used to track you across apps or websites. If you sign in later, that data moves to your account and nothing is lost. To erase it instead, use Settings → Account → Reset guest session: the device is detached from the guest data and a new, empty session starts. Deleting the app does not clear this identifier, because the keychain survives reinstallation.
Advertising attribution
To learn which of our ads bring people to MotoDoc, the Google Play and App Store versions of the app include the AppsFlyer SDK (AppsFlyer Ltd., Israel), acting as our processor. It receives: the advertising ID on Android (on iOS we do not ask for tracking permission and do not collect the IDFA; Apple’s privacy-preserving SKAdNetwork and AdServices attribution are used instead), install and app-open events, IP address, device model, operating system, language and app version, our internal user identifier, and two in-app events: sign-in completed and first question asked. We never send your email, phone number or the content of your chats. Subscription purchases, renewals and refunds are reported to AppsFlyer by RevenueCat from our servers. AppsFlyer matches this data with ad clicks and views and shares the results with the advertising platforms we use — Google, Meta and TikTok — so they can measure and optimise our campaigns; they process it under their own terms. In the EEA, the UK and Switzerland we rely on your consent: the app asks before the SDK starts, and if you decline nothing is collected or sent. Elsewhere we rely on our legitimate interest in measuring our advertising. Everyone can switch this off at any time in Settings → Ad measurement. AppsFlyer keeps user-level data for no longer than 24 months (shorter where an integration or ad partner requires it) and aggregated reports for up to 25 months. Israel has an EU adequacy decision; Google, Meta and TikTok may process data in the United States and other countries. The web app at app.motodoc.ai does not include this SDK.
Contact
Questions about this document? Reach us at support@motodoc.ai