MxMap is a mobile and web application for motocross and off-road riders. It lets you find riding tracks, record your rides with GPS and sensors, analyse race telemetry (lap times, jumps, heart rate), and share content with other riders (posts, comments, photos, videos, races).
This Privacy Policy explains what personal data MxMap collects, why we collect it, who it is shared with, and what rights you have.
The data controller responsible for your personal data is Kostiantyn Halaniuk. You can contact us at kostya.galanyuk@gmail.com.
By creating an account or using MxMap, you agree to this Privacy Policy. If you do not agree, please do not use the app.
When you sign in with Google or Apple, we receive and store your name and e-mail address, your account identifier (a unique user ID), and your profile photo, if you have one.
You may add further profile information yourself, such as your motorcycle(s) and their photos, and contact details you choose to share (phone number, website, e-mail).
With your permission, MxMap collects precise GPS location to show motocross tracks near you, and to record your ride trail, position and lap times during a ride. Ride recording continues in the background, including while the screen is locked, so that your trail and lap times keep recording during the ride. Location is collected only while you are using the relevant features.
To analyse rides, MxMap collects:
If you grant permission, MxMap can:
Data obtained from Apple Health is used only to provide these features. We never use Health data for advertising or marketing, we do not sell it, and we do not store it in iCloud.
We store the content you create in the app: posts, comments and photos; videos you upload; recorded races and their telemetry (GPS trail, lap times, jumps, speed, heart rate); and tracks and track configurations you create.
We collect basic technical data needed to operate the app, including device model, operating-system version, app version, language, and a push notification token (used to deliver notifications).
To keep the app stable, we collect crash reports and diagnostic information when the app encounters an error (for example, the type of error and the state of the device at that moment).
MxMap does not currently use advertising or third-party advertising tracking, and does not request permission to track you across other apps and websites.
We use your data to:
Legal bases (EU/EEA and UK GDPR). We process your data to perform our contract with you (providing the app), on the basis of your consent (for location, motion/health data, Apple Health access and notifications — which you can withdraw at any time in your device settings), to pursue our legitimate interest in keeping the app secure and stable, and to comply with the law.
MxMap is a social app. The following content is public and visible to other users of MxMap by default:
Race privacy. Every recorded race has a privacy switch. You can mark a race as private at the moment you save it, or change it later, using the lock control on the race screen. A private race and its data (including heart rate) are visible only to you.
Please be aware that publishing a race makes its telemetry — including your heart rate — visible to other users. Only publish rides you are comfortable sharing.
We do not sell your personal data. We share data only with service providers ("processors") that help us operate MxMap, and only as needed to provide the app:
| Service | Provider | Purpose |
|---|---|---|
| Firebase (Authentication, Firestore, Realtime Database, Storage, Cloud Functions, Cloud Messaging, Crashlytics) | Google LLC | Account, data storage, backend, notifications, crash reporting |
| Bunny Stream | BunnyWay d.o.o. | Hosting and delivery of videos you upload |
| Sign in with Apple, Apple Push Notification service, HealthKit | Apple Inc. | Sign-in, notifications, Apple Health integration |
| Google Maps / Apple Maps | Google LLC / Apple Inc. | Displaying maps |
These providers process data on our behalf under their own security and privacy terms. We may also disclose data if required by law, or to protect the rights, safety and security of our users and the service.
MxMap's providers (in particular Google and Bunny) operate servers located outside your country, including in the United States. This means your data may be transferred to and processed outside the European Economic Area. Where this happens, the transfer relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We keep your personal data for as long as your account exists. Crash and diagnostic data is kept for a limited period needed to diagnose problems. When you delete your account, we delete or anonymise your personal data as described in Section 9, except where we must keep certain data to comply with the law.
We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and access controls on our backend. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Depending on where you live, you have rights over your personal data, including the right to access, correct, delete, export (data portability), restrict or object to processing, and to withdraw consent. Users in the European Economic Area and the UK have these rights under the GDPR; users in California have comparable rights under the CCPA/CPRA — and we do not sell or "share" personal data for cross-context behavioural advertising.
Deleting your account. You can delete your MxMap account directly in the app (Profile → Settings → Delete account). Deleting your account removes your profile, races and uploaded media. Posts and comments you wrote remain visible but are anonymised (shown as authored by a "deleted user"). For full details, see our Account & Data Deletion page. You may also contact us at kostya.galanyuk@gmail.com to request deletion or to exercise any other right.
You can also control permissions at any time in your device settings (location, motion & fitness, Apple Health, notifications, camera, photos).
MxMap is not directed at children. You must be at least 16 years old (or the minimum age of digital consent in your country) to create an account and use MxMap. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Continued use of MxMap after an update means you accept the revised policy.
If you have any questions about this Privacy Policy or your personal data, contact Kostiantyn Halaniuk at kostya.galanyuk@gmail.com.