Privacy Policy

What Visor collects, why, who else sees it, and how to delete it.

Effective 19 August 2026

Visor is a motorcycle navigation app made by Visor Inc., a Texas corporation. This policy covers the Visor mobile app and the servers behind it. It says what Visor collects, why, who else sees it, and how to get rid of it. I'm Areg, I run the company, and I've written this in the first person because there is one person here. If something is unclear, write to ask@visor.cc and I'll answer.

The short version

• Visor records your location. That is the product — a map that doesn't know where you are is useless.
• Your position is visible to riders you have added, and only while you are sharing it.
• You can use Visor without an account. Without one, your rides never leave your phone.
• No ads, no advertising identifiers, no third-party analytics.
• You can delete your account and everything on the server from inside the app, or by email. See deleting your account.

What Visor collects

Location

Precise GPS location, which Visor uses to draw you on the map, follow a route, show your speed and heading, record your ride, and — if you are riding with people — show your position to them.

• While using the app: location is read while Visor is open and you have granted permission.
• In the background ("Always"): optional, and asked for separately. It exists so recording and crew sharing keep working when the phone is pocketed or the screen is off. You can grant "While Using" only, or deny location entirely — the app still opens and works, it just can't follow you.
• Where it goes: your ride track is stored on your phone. If you are signed in, position fixes (time, latitude, longitude, speed, heading) are also sent to the Visor server about once a second while you are tracking, so your rides survive a lost phone and your crew can see where you are.

Account

Only if you create one:

• A passkey (its public key and credential id); the private key stays in the operating system's keychain and is never sent to me.
• A display name, if you set one. It is optional.
• Identifiers for each install, so your devices can be told apart.

Sign-in tokens are stored as hashes, not as usable credentials.

People you ride with

• Your contact list: the identifiers of riders you have connected with, and any note you write about them.
• The riding group you are in, and invitations waiting for you.

Riders you have connected with can see your display name, and your position while you are sharing it. Visor does not upload your phone's address book.

Diagnostics

Crash reports and error diagnostics, through Sentry, tied to your account identifier so I can tell one rider's crash loop from everyone else's. Before anything leaves the phone, Visor strips email addresses, precise coordinates and API keys out of the report. Reports also carry ordinary technical detail: device model, operating system version, and app version.

Files you import

If you import a GPX file, Visor reads it on your phone. It is not uploaded anywhere.

What Visor does not collect

No advertising identifiers and no ad networks. No third-party analytics or attribution SDKs. No address book, no photos, no camera, no microphone, no health or fitness data from other apps, no purchase history, no browsing activity in other apps.

Who else receives data

• Mapbox, for place search and — unless you change the routing provider in Settings — directions. Your phone requests these from Mapbox directly, so Mapbox receives your IP address and the coordinates involved.
• The map tile hosts — OpenFreeMap by default, or Esri, OpenStreetMap, OpenTopoMap and USGS depending on the style you pick. Your phone requests tiles directly, so the host sees your IP address and the area of map you're looking at.
• GraphHopper, only if you select it as the routing provider in Settings. It then receives the start and end points of routes you plan.
• Sentry, for the crash and error diagnostics described above.
• Cloudflare, which sits in front of the Visor servers and sees connection metadata, including your IP address.
• Apple and Google, which distribute the app and store your passkey in the operating system's keychain. What they collect is governed by their own policies, not this one.

If a government or court demands data, I will comply with valid legal process, and will tell you unless I am legally barred from doing so.

Where your data is kept

On servers in the United States. If you ride outside the US, your data is transferred to and stored there.

How long it is kept

• Rides on the server: until you delete your account or ask me to delete them. Keeping them is the point — it's what lets a new phone recover the rides of a lost one.
• Rides on your phone: until you delete them in the app, or uninstall Visor.
• Account records: until you delete your account.
• Diagnostics: up to 90 days, then Sentry discards them.

Your choices

• Location: grant, downgrade, or revoke it any time in your phone's system settings. Visor asks for background location only when it needs it, and explains why first.
• Sharing: your position goes to riders you have added, and only while you are tracking.
• No account: Visor is usable without signing in. Nothing is sent to the server in that state.
• Deletion: see deleting your account.

Your rights

Wherever you live, you can ask me for a copy of what I hold about you, ask me to correct it, or ask me to delete it. Email ask@visor.cc and I will answer within 30 days.

If you are in the EEA, the UK, or Switzerland: the legal basis for handling your location and diagnostics is your consent, which you can withdraw at any time; for your account, contacts, and rides it is performance of the agreement between us. You have the rights of access, rectification, erasure, restriction, portability, and objection, and you can complain to your local data protection authority.

If you are in California: you have the right to know, delete, and correct, and I will not treat you differently for asking.

Children

Visor is not directed at children under 13, and I do not knowingly collect their information. If you believe a child has given me data, write to tell@visor.cc and I will delete it.

Security

Traffic between the app and the server is encrypted with TLS. Session tokens are stored as hashes. A passkey's private key is never sent to my server.

Changes to this policy

If this policy changes, the date at the top changes with it, and for anything material I will say so in the app before it takes effect.

Contact

Visor Inc., Texas, USA — ask@visor.cc. Visor Inc. is the controller of the data described here.