This Privacy Policy explains how MOBY Bikes Ltd (“MOBY”, “we”, “us”, “our”) collects, uses, and protects your personal data when you use the MOBY Move mobile application and rent a bike in Ireland.
This policy applies to any bike rented within the MOBY Move app in Ireland, including public and private schemes operated by MOBY.
1. Data Controller
The data controller responsible for your personal data is:
MOBY Bikes Ltd
C/O Buckley Kiely & Co
Heritage Business Park
Bessboro Road
Blackrock
Co. Cork
Ireland
If you have questions about this policy or how we handle your data, you can contact us at:
📧 support@mobymove.com
2. Our data protection principles
We process personal data in accordance with GDPR and commit to the following principles:
We process personal data lawfully, fairly, and transparently
We only collect data that is relevant and necessary
We do not collect excessive personal data
We keep personal data accurate and up to date
We retain personal data only for as long as needed
We protect personal data using appropriate technical and organisational measures
We never sell personal data to third parties
3. What personal data we collect
Information you provide to us
Name
Email address
Phone number
Address (where provided)
Account and ride history
Communications with our support team
Automatically collected information
Trip data (start location, end location, duration)
Location data during rides (recorded approximately every 20 minutes)
Device information (IP address, device type, operating system, app version)
App usage data and diagnostics
Payments
Payments are processed by Stripe. MOBY does not store full card details. Stripe processes payment data in accordance with its own privacy policy.
Photos and camera access
A parking photo is mandatory to end a ride
Photos are processed and stored by our technology provider ATOM Mobility (SIA ATOM Tech)
MOBY accesses these photos only for operational, compliance, and dispute-resolution purposes
4. How we use your personal data and legal bases
We process personal data for the following purposes and legal bases under Article 6 GDPR:
To provide the service (contractual necessity)
Create and manage your user account
Enable bike rentals and ride management
Process payments and issue receipts
Record trip and location data to operate the service
To operate, secure, and improve the service (legitimate interests)
Fleet management and bike recovery
Parking compliance and misuse prevention
Troubleshooting, diagnostics, and error resolution
Service analytics and performance monitoring
For safety, compliance, and dispute handling (legitimate interests / legal obligations)
Review parking photos and trip data
Investigate incidents, complaints, or suspected misuse
Apply penalties or account actions (always reviewed by a human)
Marketing and communications (consent)
Send marketing emails or push notifications only if you opt in
You can manage your marketing preferences at any time in the app
Customer research and service improvement (legitimate interests)
Conduct surveys and collect feedback
Improve existing services and develop new features
5. Location data
We collect location data:
At ride start
At ride end
Approximately every 20 minutes during a ride
Location data is used to operate the service, manage the fleet, ensure compliance, and improve reliability.
Historical trip data remains linked to your account for up to 36 months, after which it is anonymised or deleted unless required for legal or accounting purposes.
6. Data retention
We retain personal data only for as long as necessary:
Account and profile data: retained while you are an active user
Inactive accounts: deleted after a period of inactivity
Trip history: retained for up to 36 months
Parking photos: retained for up to 36 months
Accounting and transaction records: retained in line with Irish legal requirements
7. Sharing of personal data
We may share personal data with trusted service providers acting as data processors, including:
SIA ATOM Tech (bike-sharing technology platform)
Stripe (payment processing)
Intercom (customer support)
Google Cloud (hosting and infrastructure)
These providers process data only on our instructions and under strict contractual obligations.
We may also disclose data:
To public authorities where legally required
In connection with suspected fraud or unlawful activity
We do not sell personal data to third parties.
8. International data transfers
Some of our service providers may process data outside Ireland or the EU/EEA. Where this occurs, we rely on appropriate safeguards, including Standard Contractual Clauses or equivalent lawful mechanisms, to protect your data.
9. Cookies and analytics
We use:
Essential cookies to operate our services
Analytics tools (such as Google Analytics and Firebase)
In-app performance and crash reporting
These help us understand usage patterns and improve reliability. You can manage certain preferences through your device or app settings.
10. Your rights under GDPR
You have the right to:
Access your personal data
Correct inaccurate data
Request deletion of your data
Restrict or object to processing
Withdraw consent at any time
Receive your data in a portable format
You can manage much of your data directly in the MOBY Move app or by contacting us at support@mobymove.com.
You also have the right to lodge a complaint with the Data Protection Commission (Ireland):
https://forms.dataprotection.ie/contact
11. Changes to this policy
We may update this Privacy Policy from time to time. The most recent version will always be available in the app and on our website.