Legal

Privacy Policy

Last updated: October 2026

OffRaid is an offline-first navigation app for adventure riders, with OffRaid Studio, a route planner on our website. We built them to respect your privacy: the app works without an account, there is no advertising, and we do not sell your data. An OffRaid account is optional and only keeps the routes you choose to save. OffRaid is free to use; an optional yearly Pro subscription is sold through Google Play on Android and through the App Store on iPhone. This policy explains what information we use, why, and who it is shared with.

The short version

• Your routes, recordings and settings stay on your device.
• Your location is used to navigate, center the map and record rides.
• Routes are calculated on your device — your destinations are not sent to any routing server.
• Some features send data to third-party services only when you use them (address search, points of interest, weather, group riding).
• An optional Pro purchase is handled by Google Play or Apple — we never see your payment details.
• No account needed, no ads, no sale of personal data.
• An OffRaid account is optional. If you make one, we keep your email and the routes you save, until you delete it. We send you news only if you tick the newsletter box.

Information the app uses

Location

With your permission, OffRaid uses your device's GPS location to show where you are on the map, provide turn-by-turn navigation, follow GPX routes, and record rides. During navigation and recording the app keeps the screen on. Your location is processed on your device and is only sent off the device for the specific features described below.

Address search

When you search for an address or place, the app sends your search text and approximate map position to the Photon geocoding service, built on OpenStreetMap data, to return matching results. These requests require an internet connection.

Routing

Turn-by-turn routes are calculated on your device by the built-in BRouter engine, using routing data you download per country or region. Your start point, destination and stops are not sent to any routing server.

Points of interest

When you search for nearby places (such as fuel, food or water), your approximate location is sent to the OpenStreetMap Overpass service to find results near you.

Weather

When you open the weather feature, the app sends your location (or route coordinates) to Open-Meteo to retrieve the forecast and rain information for your route.

Anonymous app statistics

When you open the Pro screen, the app sends a small anonymous event to our own server (for example: screen opened, purchase started, purchase completed or failed) together with the app version, your device language and a random identifier the app generates for itself. We use this only to see how many people reach the Pro screen and where the purchase goes wrong. It contains no name, no location and no payment details, it is never used for advertising, and it is not shared with anyone.

Group riding

If you choose to use group riding (a Pro feature), the app sends a device identifier, the display name you enter, and your position, bearing and speed to OffRaid's group server, so that riders in the same channel can see each other live on the map. These positions are temporary and are automatically deleted shortly after they stop updating. Group riding is entirely optional and only active while you turn it on.

While you are registered in an organised event, a possible fall detected by your device is reported to that event's organizers as an SOS with your position, regardless of your personal alarm settings. The app tells you this once when you join the event.

Maps

The map is based on data from OpenStreetMap contributors. Map packages (map tiles together with offline routing data) are downloaded from our hosting on Cloudflare, so you can keep whole countries or regions for offline use.

Who is responsible

OffRaid and OffRaid Studio are developed and run by Apostolis Panagiotou, based in Greece, who is the controller of the personal data described in this policy. For anything about your data write to support@offraid.com.

OffRaid Studio (offraid.com/studio)

Files you open in OffRaid Studio are read by your browser. They are not sent to us. To keep them there the next time you visit, Studio stores them in your browser's own storage on your computer; removing a file from the list removes it from there too.

• Planning a route — the points you place are sent to BRouter (brouter.de) to find the road between them.
• Place search — your search text goes to Photon (komoot).
• Fuel stations, water crossings and roadbook details — fuel stations and most roadbook details come from our own map files; for water crossings, and for roadbook details that our map files do not have (such as gates, cattle grids and road surface), points of the route are sent to an OpenStreetMap Overpass server (overpass-api.de, overpass.kumi.systems or overpass.private.coffee).
• Street photos in the roadbook editor — only when you press “Show street photos nearby”, the position of that box is sent to Mapillary (Meta) to show photos taken nearby.
• Maps and elevation — map images and elevation data load from the map you pick (our own maps on Cloudflare, or Esri, EOX, OpenTopoMap, CyclOSM, OpenStreetMap, IGN, swisstopo, USGS) and from Terrain Tiles on Amazon Web Services. Like any website, these services see your IP address.
• Send to phone — when you press “Get QR code”, that one route is stored on our server for 30 days so your phone can download it, then deleted.

OffRaid account (optional)

You can create a free OffRaid account in OffRaid Studio to keep your routes and open them from any computer. Everything else works without one.

What we keep

• Your email address and your password, which we store only as a one-way hash: nobody, including us, can read it.
• The language you use, when the account was created and confirmed, your last sign-in and your last password change.
• Your choices and a record of your consents: what you accepted (Terms, Privacy policy, newsletter), which version, when, and from which IP address.
• Sign-in sessions: a random key kept in a cookie on your browser (we store only a hash of it) and the type of browser, so you can see and end them.
• The routes you save, with their name, distance and climb.

Why, and on what legal basis

• To run your account and keep your routes — to provide the service you asked for (GDPR article 6(1)(b)).
• To keep accounts safe — confirming your email, limiting sign-in attempts and telling you about security changes such as a new password (our legitimate interest, article 6(1)(f)).
• To be able to show that you gave consent (article 6(1)(c) and 7(1)).

We send account emails (codes and security notices) from our own mail server at offraid.com. They are not advertising. We never sell or rent your email address and never share your routes with anyone.

How long

For as long as you keep the account. Accounts whose email is not confirmed are deleted after 7 days. A sign-in ends after 180 days without use. When you delete your account, your email, consents, sessions and saved routes are deleted from our database and server straight away; copies in our hosting provider's backups are overwritten in the normal backup cycle.

Our server and database are hosted in the European Union.

Signing in with Google or Apple

Instead of a password you can sign in with your Google or Apple account. From them we receive a confirmation that it is you, with a fixed account ID and your email address. With Apple you can choose to hide your email; we then get a private relay address that forwards our emails to you. The confirmation may also include your name and profile picture; we do not store them. We never get your Google or Apple password. We keep the account ID and email linked to your OffRaid account so that you can sign in again, until you disconnect it or delete your account. The Google and Apple buttons load from Google and Apple only when you open the sign-in window, and their own privacy policies apply to the sign-in itself (Google, Apple).

Community (offraid.com/routes)

If you publish a route, it becomes public together with your community name, the title, the description, the country and the difficulty and road surface we calculate. The same goes for your reviews and your road reports. Public pages also appear in search engines. Your email is never shown. Your saves and any abuse reports you send are seen only by you and by us.

The routes in your account stay private: only what you choose to publish, with the box ticked, becomes public.

We count views and downloads with a code (hash) made from the IP address and the day. We delete it after 3 days and we do not keep the IP address itself.

Legal basis: we publish only when you ask us to (article 6(1)(b) GDPR). Checking for abuse is based on our legitimate interest (6(1)(f)).

You can unpublish a route at any time. Road reports expire after 30 days. If you delete your account, everything is deleted: routes, reviews, reports, saves and your community name.

Newsletter (only if you ask for it)

When you create an account you can tick a separate box to get OffRaid news and offers by email, a few times a year. The box is never ticked for you, and the account works the same without it. We record when and how you gave this consent (article 6(1)(a)). You can stop it at any time with the link in every newsletter or from OffRaid Studio → My account; it takes effect at once. If we use an email service to send the newsletter, it will handle your email address only on our behalf, and we will name it here before the first newsletter is sent.

Your rights

You can see and download your data (OffRaid Studio → My account → My data), correct your email, delete your account and all its routes, withdraw any consent, object to or restrict processing, and take your routes with you as GPX. You can also write to us at support@offraid.com; we answer within one month. If you think we handle your data wrongly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the authority of the country where you live.

Purchases

OffRaid Pro is an optional yearly subscription (auto-renewing, cancel anytime in Google Play or in your Apple account settings) sold through Google Play Billing on Android and Apple In-App Purchase on iPhone. Payment is processed entirely by Google or Apple — we do not receive or store your card or payment details. Your Pro status is kept on your device so it works offline.

Permissions

• Location (precise/approximate) — navigation, map position, recording, group riding.
• Camera — only to scan a QR code when you import a GPX route.
• Notifications — so your phone can show a status notification for navigation and recording.

You can change or revoke these permissions at any time in your device settings (Android or iOS).

Data stored on your device

GPX routes, recorded rides and your preferences (such as language, brand colour, surface type and fuel settings) are stored locally on your device. You can delete them at any time from within the app or by clearing the app's data.

Data retention

Group-riding positions are temporary and auto-expire on the server shortly after they stop updating. Data stored on your device remains until you delete it or uninstall the app. Address search, points-of-interest, weather and purchase requests are processed by the third-party services named above under their own policies.

Website cookies & analytics

On this website (offraid.com) we use Google Analytics for anonymous visit statistics — and only if you accept the cookie notice. If you decline, no analytics cookies are set and nothing is tracked. The app itself contains no third-party analytics or advertising trackers; the only statistics it sends are the anonymous Pro-screen events described above.

OffRaid Studio sets one strictly necessary cookie, offraid_st, only when you sign in, to keep you signed in. It is not used for tracking or statistics. Studio also keeps your open files and map settings in your browser's storage on your computer. When you sign in with Google or Apple, a second strictly necessary cookie, offraid_on, keeps a one-time security code for up to 20 minutes.

Children

OffRaid is intended for motorcycle and off-road riders and is not directed at children.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new "last updated" date.

Contact

Questions about privacy? Email support@offraid.com.