Privacy Policy
Last updated: 2026-07-26
MotoDoc is operated by CARDIGITAL - FZCO, a company registered in Dubai, United Arab Emirates (“MotoDoc”, “we”, “us”). Contact: support@motodoc.ai
This policy explains what personal data MotoDoc collects, why we collect it, who we share it with, how long we keep it and how you can control it. The data controller is CARDIGITAL - FZCO, Dubai, United Arab Emirates. If you disagree with this policy, please stop using the app.
Who we are
MotoDoc is an AI assistant for motorcycle service and repair questions, operated by CARDIGITAL - FZCO, a company registered in Dubai, United Arab Emirates. For any privacy question, or to exercise the rights described below, write to [email protected]. We answer within 30 days.
Data we collect
Account data: your email address (and the identifier returned by Sign in with Apple or Google if you use social sign-in). Content you provide: the motorcycles you add to your garage, the questions you ask, photos you attach, and voice input you record for transcription. Technical data: app version, device model, operating system, language, coarse region derived from your IP address, crash reports and aggregate usage events. Subscription data: which plan you hold and its status, as reported by the app store. We do not collect payment card details — payments are handled entirely by Apple or Google.
Why we use it, and on what legal basis
To provide the service — answering your questions, keeping your garage and chat history, restoring purchases (performance of our contract with you). To keep the service working and safe — diagnosing crashes, preventing abuse and fraud, enforcing rate limits (our legitimate interest). To improve answer quality — aggregate, non-identifying analysis of how features are used (our legitimate interest). To send you service messages about your account or subscription (performance of our contract). We do not sell your personal data and we do not use it for third-party advertising.
AI processing and who else sees your data
Your questions, attached photos and voice transcripts are sent to third-party AI providers so an answer can be generated. Depending on the request these are Anthropic (Claude), Google (Gemini) and models accessed through OpenRouter; voice input is transcribed on-device or by the platform speech service. Other processors we rely on: DigitalOcean (application hosting), Cloudflare (content delivery and protection), Plausible (privacy-friendly, cookie-less website analytics), PostHog (product analytics), RevenueCat (subscription management), and Apple and Google (payments and sign-in). Each processes data on our instructions or, for the stores, as an independent controller under their own terms. The AI assistant is a technical tool — no human reads your chats routinely; we access individual content only when you ask us for support or when we must investigate abuse.
International transfers
We operate from the United Arab Emirates and our providers are located in the United States and the European Union, so your data is transferred outside your country. Where the GDPR or UK GDPR applies, those transfers rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision.
How long we keep it
Account data, garage and chat history: until you delete the item or your account. After account deletion, live data is removed immediately and encrypted backups are purged within 30 days. Crash and analytics data: up to 14 months, in aggregate form. Invoices and tax records: for as long as tax law requires us to retain them, regardless of account deletion.
Your rights
You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent where processing is based on it. Deletion is available in the app: Settings → Delete account, and takes effect immediately (see our account deletion page). You may also write to [email protected]. If you are in the EEA, the UK or Switzerland you have the right to lodge a complaint with your local data protection authority; if you are a California resident you have the rights granted by the CCPA/CPRA, including the right not to be discriminated against for exercising them.
Children
MotoDoc is not directed at children. We do not knowingly collect personal data from anyone under 13 (or under the minimum age required in your country). If you believe a child has provided us with personal data, contact us and we will delete it.
Cookies and similar technologies
The app itself does not use advertising cookies or tracking identifiers, and does not access the advertising ID. This website uses only what is necessary to serve pages and remember your language choice; our website analytics (Plausible) is cookie-less and does not track you across sites. The referral page stores the referral code you arrived with so the bonus can be applied.
Security and changes to this policy
Data is transmitted over TLS and stored on access-controlled infrastructure; credentials are stored hashed and session tokens are kept in the platform's secure storage. No system is perfectly secure, so we cannot guarantee absolute security. If we change this policy materially we will update the date at the top of this page and, where the change is significant, notify you in the app before it takes effect.
Contact
Questions about this document? Reach us at support@motodoc.ai