Consumer Health Data Privacy Notice (United States)
Riding Places, operated by Biomotion LLC
Effective Date: August 4, 2026
1. About this Notice
This Consumer Health Data Privacy Notice is separate from, and in addition to, our general Privacy Policy. It describes specifically how we collect, use, share, and protect your consumer health data, meaning the ride and location information Washington's My Health My Data Act and Nevada's SB 370 treat as consumer health data. This Notice applies to all United States users of the Platform, regardless of which state you live in. We have chosen to apply these protections uniformly rather than attempt to identify your state of residence, since we cannot do that reliably. If you are a Washington or Nevada resident, the rights described here are the rights those statutes give you directly. If you live elsewhere, we are extending the same protections to you as a matter of policy.
This Notice is linked from our general Privacy Policy and from the screen in the app where we ask for your authorization before collecting this data. Please read it before you authorize collection.
2. What Consumer Health Data We Collect
We collect precise GPS location data recorded while you use the ride-recording features of the app, including the route you travel, your start and end locations, and the timing of your movement along that route. We also collect ride metrics calculated from that location data, including distance, duration, elevation, and pace. We use this information together with your participation in Rambles and GeoZones to determine completion of those challenges and to calculate points and rewards.
We treat this combination of precise geolocation and physical activity data as consumer health data because it can reveal patterns of exercise and physical activity that Washington and Nevada law protect, regardless of whether you consider your own riding to be health-related.
3. Why We Collect It
We collect and use your consumer health data to record your rides, determine whether you have completed a Ramble or GeoZone challenge, calculate the points and rewards you earn, and calculate estimated CO2 avoided from your ride activity.
We show your ride activity and your estimated CO2 avoided to you and to the Groups you join. We do not use your consumer health data for advertising, and we do not sell it.
4. Your Authorization
Before we collect any ride or location data from you, we present a distinct authorization request, separate from your acceptance of our general Terms of Service and Privacy Policy. This authorization is affirmative, meaning you must take a specific action to grant it, and it is recorded and revocable at any time through your account settings.
If you join a Group that runs Rambles involving consumer health data, your initial authorization covers your general participation, but we require an additional affirmative confirmation at the time a Group you have already joined publishes a new Ramble that involves consumer health data. A passive notice is not enough; we ask you to take an affirmative action, such as a single confirmation tap, before that new Ramble's data collection applies to you.
You may withdraw your authorization at any time. Withdrawing disables the ride-recording features of the app that depend on this data. It does not disable or restrict any other part of your account or the Platform that does not depend on consumer health data.
5. How We Share Consumer Health Data
We share your consumer health data with the Groups you join, in the form and to the extent each Group's settings allow, so that the Group can run its Rambles and GeoZones and display aggregate activity to its members. We do not share your route geometry or your ride start locations with any Group or its administrators, including an employer Group. Groups see your participation, your totals and your standings, not the paths you rode or where you set off from.
We also share consumer health data with the service providers who host and operate the Platform on our behalf. Those providers are contractually restricted to using your data only to provide the Platform to us, and not for their own independent purposes.
We do not sell your consumer health data, and we do not share it with any other category of recipient not described in this Notice.
6. Retention
We retain your consumer health data until you delete your account, or until you ask us to delete it sooner, consistent with Part 8 of our general Privacy Policy. If you withdraw your authorization or request deletion, we will delete your consumer health data, including from any Group or service provider we shared it with, except where a Group has already exported a copy before your request, in which case we will cooperate with your deletion request as described in our general Privacy Policy.
As with other personal information described in our Privacy Policy, residual copies of your consumer health data may remain in our routine encrypted backups for up to 30 days before they are overwritten.
7. Your Rights
You have the right to withdraw your consumer health data authorization at any time. You have the right to request deletion of consumer health data we have already collected, including data shared with Groups or service providers. To exercise either right, use the settings within the app or contact us using the information in Part 9 below. We will honor your request without requiring you to state a reason.
8. Geofencing
We do not use your consumer health data, or GeoZone placement generally, to identify or track you near a health care facility, to collect additional consumer health data based on your presence near such a facility, or to send you health-related notifications or advertising based on that presence. We screen new GeoZone placements against a broad set of healthcare and social-assistance facility locations and block or flag placements that fall within the buffer Washington and Nevada law require.
9. How to Submit a Complaint
If you believe we have not honored this Notice or your rights under it, you may contact us at support@riding-places.com. Washington residents may also submit a complaint to the Washington State Attorney General. Nevada residents may also submit a complaint to the Nevada Attorney General.
10. Changes to This Notice
We may update this Notice from time to time. If we make a material change to how we collect, use, or share your consumer health data, we will provide notice through the app before the change takes effect and, where required by law, seek your renewed authorization.
11. Contact Us
Biomotion LLC, 25 W Main St Ste 800, Madison, WI 53703, support@riding-places.com.