Privacy Policy
Your rides stay yours
Effective July 13, 2026
Loam Moto is a local-first ride and service tracker for motorcycles and e-motos. It is built so your garage and your rides stay under your control, on your device. This policy explains what the app stores, the purpose of each piece of data, what leaves the device (and what never does), how long anything is kept, and how to delete it. There is no Loam account and no sign-in. If you submit the website launch waitlist, we also collect the limited information described below for that purpose.
Summary
- No account, no sign-in. You do not create a Loam account or give us an email to use the app.
- Local-first. Your garage, your rides, and your GPS tracks are stored on your device.
- No selling, no sharing for advertising. We do not sell personal data and we do not use ad or tracking SDKs.
- Optional backup is encrypted so we cannot read it. Cloud backup is client-side AES-GCM encrypted before it leaves your device.
- You are in control. Uninstalling the app removes its on-device data, and any optional backup can be deleted.
Data we handle, and why
The table below lists every category of data the app touches, why it is used, whether it leaves your device, and how long it is kept. Anything not listed here is not collected. In practice, the app also sends limited metadata for reminders and optional website signup, as described in the table and the sections below.
| Data | Purpose | Leaves device? | Retention |
|---|---|---|---|
| Garage (your bikes, components, setup values, service history, odometer readings) | Track each part's service interval and tell you what is due. | No, unless you turn on encrypted cloud backup. | Until you delete it or uninstall the app. |
| Rides (distance, moving time, hours) | Update each component's service clock from your real usage. | No, unless included in encrypted cloud backup. | Until you delete the ride or uninstall the app. |
| GPS location and tracks | Record a ride's route, distance, and moving time while you are recording. | No. GPS is used only while a ride is recording and is not uploaded. A privacy-zone feature trims your home area from any track you choose to share. | Stored on-device with the ride; removed when you delete the ride or uninstall. |
| Optional cloud backup | Let you restore your garage on a new device. | Yes, but only as an encrypted blob. It is client-side AES-GCM encrypted before upload using a key derived from your recovery code, which never leaves your device. We cannot read it. | Replaced by each new backup; deletable by you; inactive backups are removed automatically. |
| Push token and reminder schedule (platform push token, your reminder times and settings, your device timezone) | Deliver the service reminders you enable, at the right local time, even if the app has been closed. | Yes. The platform push token, your reminder schedule and settings, and your device timezone are sent to the reminders backend on Cloudflare, which delivers the notifications through Google Firebase Cloud Messaging. The reminder text is generic: no bike brand, model, ride content, or other garage data is sent with it. | Removed when you disable notifications or uninstall; stale tokens expire automatically. |
| Photo and parts lookup terms (make, model, year) | Find a matching bike photo or part reference for a component. | Yes, but only the make, model, and year, sent through the Cloudflare backend to an image-search provider (Serper.dev). No personal data, garage data, location, or identity is sent. | Not retained as a search history. |
| Website launch waitlist (email) | Email you once when Loam Moto launches, if you submit the coming-soon form on the website. | Yes. Your email, a timestamp, and the brand (moto) are stored in Cloudflare KV. Nothing else is stored: no IP address and no tracking. Purpose is launch notification only. | Kept until launch or until you ask us to remove it. Email support@loamlog.com to unsubscribe or delete it. |
| Connection IP address (transient) | Prevent abuse of the backend and website endpoints with short-term rate limiting. | Your IP reaches Cloudflare to deliver each request; for rate limiting it is used transiently (in hashed form on the waitlist endpoint) and is not stored as an identity or linked to your garage. | Not retained as identity; used only for short-term rate-limit windows. |
| Purchases (one-time unlock, activation) | Unlock the app after the trial with a one-time purchase. | Handled entirely by Apple and Google. We never receive your card details. | Held by the app store under its own policy, not by us. |
What we store on your device
Your garage, your rides, your recorded GPS tracks, your setup values, and any photos you add are stored in the app's private storage on your phone. There is no readable Loam database of this data. If you never turn on cloud backup, this information never leaves your phone.
What leaves your device, and to whom
This is the complete list of what can leave your device. Everything else described in this policy stays on your phone.
- Encrypted cloud backup (optional). If you enable it, the app encrypts your garage on-device and uploads only the encrypted copy to Loam's infrastructure on Cloudflare (stored in Cloudflare D1). The key is derived from your recovery code, which stays on your device, so the backup is unreadable to us and to Cloudflare.
- Push reminders. To deliver the reminders you enable, the app sends your platform push token, your reminder schedule and settings, and your device timezone to the reminders backend on Cloudflare, which fires the notifications through Google Firebase Cloud Messaging. The reminder text is generic; no bike brand, model, ride content, or other garage data is sent.
- Photo and parts lookup. When you look up a bike photo or part, only the make, model, and year are sent, through the Cloudflare backend to an image-search provider (Serper.dev), to fetch a result. Nothing that identifies you or your garage is included.
- Website launch waitlist (optional). If you submit the coming-soon form on the website, your email, a timestamp, and the brand (moto) are stored in Cloudflare KV so we can email you once at launch. Nothing else is stored, and there is no tracking.
- Connection IP address. Your IP reaches Cloudflare to deliver each request and is used transiently for short-term rate limiting (in hashed form on the waitlist endpoint). It is not stored as an identity and is not linked to your garage.
- Purchases. The one-time unlock and activation are processed by Apple's App Store or Google Play. We do not receive or store your payment card data.
How your data is shared
We do not sell your personal data, and we do not share it for advertising. We do not use analytics SDKs, ad identifiers, or third-party trackers. The data that leaves your device is limited to the items listed above: the encrypted backup (which we cannot read); the push token, reminder schedule, and timezone used to deliver reminders; the minimal, non-identifying photo and parts lookup terms; and, if you use it, your website-waitlist email. We rely on a small set of processors to carry those requests, each acting only on our behalf under its own privacy policy:
- Cloudflare (Workers, D1, and KV) hosts the backend and website, stores the optional encrypted backup and the website-waitlist email, routes reminder registrations, and processes connecting IP addresses to deliver requests and enforce short-term rate limits.
- Google Firebase Cloud Messaging delivers the push notifications for the reminders you enable.
- Serper.dev returns bike-photo and parts results for the make, model, and year you look up.
Purchases are handled by the app stores under their own privacy policies.
No analytics, ads, or tracking
- No analytics: we do not track how you use the app.
- No advertising: we do not use ad identifiers or show ads.
- No data selling: we do not sell personal data or use it for targeted advertising.
- No accounts: you do not create an account or provide an email to use the app.
Data retention and deletion
You can delete bikes, components, service records, rides, and photos in the app at any time. Uninstalling Loam Moto removes its on-device app data, including your ride history, recorded GPS tracks, and motorcycle profiles. If you turned on cloud backup, you can delete it from the app; each new backup replaces the previous one, and a backup that has not been updated for an extended period is deleted automatically. Disabling notifications (or uninstalling) removes the push delivery token from the reminder service.
You can also ask us to delete your cloud backup (and any waitlist email) at any time by writing to support@loamlog.com — a deletion request removes your ride history, GPS tracks, motorcycle profiles, and cloud backup data from our systems. Backups are end-to-end encrypted, so deletion removes the encrypted copies; we could never read them. Any records we are legally required to keep are retained only for the legally required period and then deleted.
Children
Loam Moto is a maintenance tool for riders and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information through an optional feature, contact us at the address below and we will remove it.
Your rights
Because there is no Loam account and your data lives on your device, you control it directly through the app. Depending on where you live, you may have additional rights to access, correct, or delete personal information. To exercise any such right, or to ask a question about this policy, contact us using the details below.
Changes to this policy
If we change how the app handles data, we will update this page and revise the effective date above. Material changes will be reflected here before they take effect.
Contact
Questions about privacy or a deletion request: support@loamlog.com.