Privacy Policy

The controller is Bowtie. Send questions about your data to [email protected].

Account

Name, email address, mobile number, language, and the identifier Apple or Google gives us if you sign in with them. If you hide your email with Apple, we only receive a relay address.

Age and terms

That you confirmed you are at least 18, and which version of the terms and this policy you accepted, and when.

Device and sign-in

Your phone's model name (such as "iPhone 15"), an identifier created when the app is installed, app version, notification token and IP address. We never read your phone's name or hardware identifiers.

Location

Your precise location while the app is open and you have allowed it. See the section on location.

Rides

Start and end time, duration, pauses, distance, route, which scooter you rode, where the ride ended and the parking photo.

Payments

Card brand, last four digits and expiry, purchases, receipts, wallet balance, passes, promotions and invitations. Card numbers are only handled by Stripe.

Support

What you write to us, reports of damage, accidents and bad parking with photos and location, and cases about rides or charges.

Notifications and consents

Which notifications you want, and your marketing consent per channel, with its history.

To provide the service

Account, sign-in, unlocking, rides, parking, payment, receipts and support. Legal basis: our contract with you (Art. 6(1)(b) GDPR).

To comply with the law

Receipts and transactions are kept under the Swedish Bookkeeping Act. Legal basis: legal obligation (Art. 6(1)(c)).

For safety and to stop misuse

Checking parking, handling damage and accidents, preventing fraud and SMS abuse, protecting accounts and making the service safer. Legal basis: our legitimate interest (Art. 6(1)(f)), which we have weighed against your interest in privacy.

For offers and news

Only if you have said yes, and you can change your mind any time in the app. Legal basis: consent (Art. 6(1)(a)).

If a payment fails, new rides are blocked automatically until the amount is paid. The app shows why, and you can always contact us if you think it is a mistake.

The app contains no advertising or tracking tools, and we never sell or rent out your data.

The app uses your location only while it is open, and only if you have allowed it. We never ask for background access.

• On the map: to show scooters and zones near you.
• When you end a ride: to check that you may park there and whether a fee or a bonus applies.
• During a ride: the route is recorded at intervals while the app is open, so you can see it in your history and so we can resolve questions about the ride.
• When you report a problem: so we can find the place.

The scooter has its own GPS that reports its position to us, also between rides. It is linked to you only during your ride.

The map is shown by Apple Maps on iPhone and Google Maps on Android, under their own terms.

When you end a ride, you take a photo of your parking. Photos you attach to reports are sent only when you choose. We remove all embedded information, such as location and camera details, before a photo is stored. The app asks for camera access only when it needs it, and you choose which photos from your library to share.

We use providers who process data on our behalf, under contract and only to deliver the service:

• Stripe: card and Apple Pay or Google Pay payments, 3D Secure and fraud prevention.
• Our hosting and database providers, where the app's server and database run.
• Expo: delivery of push notifications to your phone.
• An SMS provider: one-time codes for signing in with your mobile number.
• An email provider: receipts and account messages.

If you sign in with Apple or Google, they learn that you use Bowtie, under their terms. Authorities receive data only when the law requires it, for example the police in an investigation. Municipalities we work with receive only aggregated statistics about the vehicles, never data about you.

We aim to process your data within the EU/EEA. Where a provider processes data outside the EU/EEA, we rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework, with any additional safeguards needed.

Ride routes

12 months after the ride.

Parking photos

180 days after the ride.

Receipts and transactions

7 years under the Swedish Bookkeeping Act, also if you delete your account.

One-time codes

30 days.

Signed-out sessions and sent notifications

90 days.

Account and ride history

As long as you have your account. When you delete it, we delete your personal data and de-identify your rides.

Support cases and reports

While the case is open, then as long as needed to handle claims related to it.

• Get a copy of your data and take it with you: Account, Settings, Privacy and data, Download my data.
• Delete your account: Account, Settings, Privacy and data, Delete account. You can do it right in the app, except during a ride or while money is owed.
• Correct inaccurate data: under Personal details in the app, or by contacting us.
• Object to processing based on our legitimate interest, and ask for it to be restricted.
• Withdraw consent, for example to offers: under Notifications in the app.

Contact us at [email protected] to use a right that isn't in the app. You can also complain to the Swedish Authority for Privacy Protection (imy.se).

All traffic between the app and our servers is encrypted. Sign-ins are stored as hashes, sensitive keys are encrypted, and access to data is limited to the roles that need it. The app's systems are kept separate from our other services.

Bowtie is for people aged 18 or older. We do not knowingly collect data about children.

If we change this policy in a way that affects you, we tell you in the app before the change takes effect, and you accept the new version before your next ride.