RideLab

Privacy Policy

Last updated: September 6, 2026

This Privacy Policy explains what Capped Out Media, LLC ("RideLab," "we," "us") collects through RideLab, why, who we share it with, and the choices you have. It applies to the website, the web app, and the iOS and Android apps.

1. What we collect

  • Account information: name, email, date of birth (for age verification), phone, timezone, and, for a guardian-managed teen account, the guardian's contact information.
  • Trainer profile information: bio, disciplines, credentials, location, prices, availability, and photos or an intro video you choose to upload.
  • Content you create: ride videos, critique audio and drawings, live session recordings, chat messages, support tickets, and ratings.
  • Payment information: handled by Stripe and by the Apple App Store or Google Play; we receive confirmation of payment and limited billing metadata, never your full card number.
  • Device and usage information: device type, operating system, app version, push notification token, IP address, and how you use the app, for security and product improvement.

2. How we use it

  • To run the marketplace: match riders and trainers, process critiques and live sessions, and handle payments and payouts.
  • To generate the AI synopsis of a critique or session transcript.
  • To send transactional notifications (booking confirmations, delivery alerts, receipts) and, if you opt in, marketing messages.
  • To keep the platform safe: fraud prevention, abuse investigation, and enforcing our Terms.
  • To meet legal, tax, and accounting obligations.

3. Who we share it with

We do not sell your personal information. We share it only with the service providers that help us run RideLab, and only for that purpose:

  • Supabase: our database, authentication, and file storage, hosted in AWS us-west-1.
  • Vercel: hosting for the website and web app.
  • Stripe: payment processing, trainer payouts through Stripe Connect, and identity verification for trainers.
  • Apple App Store and Google Play: processing for in-app purchases made on those platforms.
  • LiveKit: real-time video and audio for live sessions.
  • Anthropic: generates the AI written synopsis from a session or critique transcript.
  • Google Firebase Cloud Messaging and Apple Push Notification service: delivering push notifications to your device.
  • Resend: delivering transactional and, if you opt in, marketing email.
  • Error monitoring: an automated error-logging service that helps us find and fix bugs, which may capture technical details about a crash or failed request.

We may also share information if required by law, to protect the rights and safety of our users, or as part of a merger, acquisition, or sale of assets (with notice to you).

4. Recordings

Ride videos, critique audio, live session video and audio, and their transcripts are stored so you and the trainer can access them. By using RideLab you consent to that recording and to the automated transcription used to build the AI synopsis, as described in the Terms of Service.

5. How long we keep it

  • Videos, critiques, and their transcripts: kept while your account is active, and for 90 days after you request deletion, in case you change your mind or need to resolve a dispute.
  • Financial records (purchases, payouts, invoices): kept for 7 years to meet tax and accounting obligations.
  • Audit logs of account and admin activity: kept for 7 years for security and compliance.

6. Your rights

Depending on where you live, you may have rights under the GDPR, the UK GDPR, or the California Consumer Privacy Act (CCPA) to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can export or delete your data yourself from Settings in the app, or email privacy@ridelab.ai. We respond to privacy requests within 30 days.

California "Do Not Sell or Share"

We do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of.

Guardian access for teen accounts

A parent or guardian who set up or verified consent for a 13-17 year old's account can review, correct, or request deletion of that account's data at any time by contacting privacy@ridelab.ai.

7. Children

RideLab is not for children under 13; we do not knowingly collect their information. Users 13 to 17 may use RideLab only with verified parent or guardian consent, and cannot purchase credits or apply as a trainer without an adult on the account. If we learn a child under 13 has an account, we will delete it.

8. Security

We use encryption in transit and at rest, role-based access controls, and row-level security on our database so users can only reach the data they are authorized to see. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you as required by law.

9. Data export and deletion

You can export a copy of your data or delete your account at any time from Settings in the app. Deletion removes your profile and access immediately; underlying videos, critiques, and transcripts are retained for 90 days per Section 5 and then permanently deleted, except where we must keep financial or audit records longer as described above.

10. International transfers

Our infrastructure runs in the United States. If you use RideLab from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country.

11. Changes to this policy

We will post the updated date at the top of this page when this policy changes, and notify you in the app for material changes.

12. Contact

Questions or requests about your privacy: privacy@ridelab.ai.