Privacy Policy Terms of Use Delete account

Roithang — Privacy Policy

Last updated: 2 November 2026

Roithang (รอยทาง) is a motorcycle route-planning, navigation and ride-recording app for riders in Thailand, made by The Lost Way ("we"). This policy says what the app collects, why, who else sees it, how long we keep it, and the rights you have under Thailand's Personal Data Protection Act (PDPA). It covers the iPhone and Android apps and this website.

Who is responsible for your data

The Lost Way, Thailand, is the data controller for Roithang. Contact: thelostwayadventure@gmail.com. We answer requests about your data within 30 days.

What we collect

• Account — your email address, display name, profile photo and bio. Signing in with Apple or Google gives us the identifier and email those services share with us; we never see your password for them.
• Location — your GPS position while you use the map, navigate or record a ride, with your permission. If you switch on automatic recording or share your position with a trip group, location is also collected while the app is in the background or closed, until you switch those off.
• Rides and plans — the lines you record or plan, with speed, height and time along them, the ground under them, and where your photos were taken.
• Content you create — photos, posts, comments, likes, reviews, places you add to the shared map, your bikes and gear.
• Your phone's push token — so we can send the notifications you have turned on.
• How you use the feed — which posts you open and like, used only to order your own feed.
• Guidance diagnostics — only for riders who have agreed to be testers: a log of a ride's guidance, used to find faults.
• AI features, when we offer them — the feature used, credits spent and duration. Voice audio is processed live by OpenAI to answer you and is not stored by us. Payments for subscriptions go through Apple or Google; we never receive your card details.

Why, and on what legal basis

• To provide what you asked for (performance of our agreement with you): maps, directions, recording, syncing across your phones, the feed, trips with friends, notifications.
• With your consent: location, background location, your photo library, the camera, the microphone and notifications. Each is asked for by your phone, and you can withdraw it at any time in the phone's settings or in the app.
• Our legitimate interests: keeping the service safe and working, preventing abuse, and acting on reports.
• Legal obligations, where the law requires it.

We do not sell personal data and we do not use it for third-party advertising.

What other riders see

Only what you post. A ride or plan you post to the feed is visible to signed-in Roithang riders, and its link page on roithang.com shows its photo, name and figures to anyone with the link. Other riders see a posted ride without its start and finish when those look like a home (500 m hidden by default; you can pick the start on the share sheet or switch the hiding off), and never with the clock times you rode. A trip ride starts at the meeting point. Private rides and plans stay private to your account. People without an account see no rides at all.

Who processes data for us, and where

• Supabase — our database, sign-in and push delivery, hosted in Singapore.
• Cloudflare — this website and the storage and delivery of photos you upload, on Cloudflare's global network.
• Mapbox — map display, directions and place search. Your phone sends map requests (coordinates and your IP address) to Mapbox, in the United States.
• Apple and Google — sign-in, push notifications, and subscription payments when offered.
• Resend — the emails we send about your sign-in.
• OpenAI — the voice assistant, when offered, in the United States.
• OpenStreetMap and Wikipedia — public map and place data shown in the app; nothing about you is sent to them.

Some of these providers are outside Thailand, in countries whose data-protection law may differ from Thailand's. We transfer data to them only to provide the app, under their contractual commitments to protect it, and with your consent where the PDPA requires it.

How long we keep it

• Your account, rides, plans and content: for as long as your account exists.
• Live positions shared with a trip group: until the trip's window closes; the trip itself is removed 3 days after it ends.
• Notifications: 60 days.
• Rides the app recorded by itself that you did not keep: on your phone only, deleted after 10 days.
• Service backups: kept by our database provider for a short period, then gone.

Your rights

Under the PDPA you may ask to see or get a copy of your data, correct it, delete it, withdraw a consent, object to or restrict a use, or have it ported. You can edit your profile and delete your account in the app yourself (Settings → Delete Account; see how to delete your account). For anything else write to thelostwayadventure@gmail.com from the email address of your account. You may also complain to Thailand's Personal Data Protection Committee (PDPC).

Security

Data travels encrypted (HTTPS). Each account can read only what the rules allow it to, and your photos can be changed or removed only by you. No system is perfectly secure, so keep your sign-in to yourself.

Children

Roithang is not for children under 13 and we do not knowingly collect their data. If we learn we hold such data, we delete it.

Cookies

This website sets no cookies and runs no analytics.

Changes

If this policy changes, the new version is posted here with a new date.

Contact

thelostwayadventure@gmail.com

รอยทาง (Roithang) — นโยบายความเป็นส่วนตัว

ปรับปรุงล่าสุด: 2 พฤศจิกายน 2026