1. Data controller
2M2C APPS SL — Tax ID (CIF): B26790071
Registered address: Lugar Conjunto Luz 25, 03170 Rojales, Alicante — Spain
Contact: info@motoflap.com
Last updated: 02/07/2026
Under EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), 2M2C APPS SL informs MotoFlap users about the processing of their personal data.
2. Processed data
MotoFlap collects the following categories of data: • Registration data: name, surname, email address, encrypted password, motorcycle model and profile photo. • Location data: real-time GPS position during routes and when the user activates group location sharing. • Sensor data: device acceleration, lean angle and speed, recorded to calculate trip statistics and detect falls. • Usage data: created routes, attended events, communities and trip statistics. • Payment data: managed entirely by Stripe Payments Europe Ltd.; MotoFlap does not store card details. • Push notification token: device identifier for notifications via Firebase Cloud Messaging (Google LLC).
3. Purpose of processing
Personal data is processed to: manage user registration and account; provide the shared routes, events and motorcycle community service; share real-time location within groups when the user voluntarily enables it; calculate trip statistics (speed, maximum lean angle, distance, altitude); activate the SOS emergency alert system (PEMEA) in case of a potential fall or accident; manage Pro subscriptions via Stripe; send service-related push notifications; and comply with applicable legal obligations.
4. Legal basis
The legal basis for processing is: (a) performance of the service contract for processing necessary to provide MotoFlap; (b) the user's explicit consent for real-time location sharing, device sensor access, fall detection and commercial communications; (c) legitimate interest in platform security and service improvement; (d) compliance with legal obligations.
5. Data retention
Data is retained while the account remains active. After account deletion, data is erased within 30 days, except data that must be retained by law (e.g., invoicing data retained for 5 years under Spanish tax regulations).
6. Recipients
MotoFlap may share data with: Google LLC / Firebase (push notifications and crash analytics, with transfers to the US under Standard Contractual Clauses approved by the European Commission); Stripe Payments Europe Ltd. (payment processing, EU-based); cloud infrastructure providers with servers in the European Union. No data is shared with third parties for advertising purposes.
7. User rights
Under the GDPR you may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw consent without affecting the lawfulness of prior processing. To do so, send a request proving your identity to info@motoflap.com, stating the right you wish to exercise. If you believe processing does not comply with the GDPR, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
8. Security measures
2M2C APPS SL applies appropriate technical and organisational measures: in-transit encryption (TLS/HTTPS), bcrypt password hashing, restricted access to production data and periodic security reviews. In the event of a security breach posing a risk to users, the AEPD and, where applicable, affected users will be notified within the statutory time limits.
9. Cookies
The MotoFlap website uses only technical cookies that are strictly necessary for the service to function. The mobile application does not use cookies. If analytical or advertising cookies are introduced in the future, users will be informed and their prior consent will be requested.
10. Policy changes
2M2C APPS SL reserves the right to update this Privacy Policy to reflect legislative changes or changes in services. Users will be notified of significant changes via the application or by email at least 15 days in advance.