Privacy Policy

Tales on 2 Wheels (T2W), formerly the Bangalore Motorcycle Club (BMC), is a volunteer-run motorcycle riding club based in Bengaluru, Karnataka, India. This policy covers taleson2wheels.com and the club's own communications. Questions and requests go to Info@taleson2wheels.com.

• Your account: name, email, phone number, a password (stored only as a hash), city, riding experience, the motorcycle you ride, your birthday (the year is optional) and your address.
• Ride registrations:what a ride needs to run safely — your contact details, an emergency contact's name and phone, blood group, food preference, riding type (solo or pillion), vehicle model and registration number, T-shirt size where offered, accommodation choice, and proof of payment (a screenshot or a UPI transaction ID).
• Your profile and content: the motorcycles in your garage, blog posts, ride tales, photos and comments you publish.
• Live rides:if you join a ride's live tracking, your GPS position while the session runs, and any SOS alert you raise.
• Technical data: IP address and browser details in server logs and error reports, and anonymous usage statistics (see Cookies below).

• To run rides: registration, confirmation, bed and slot allocation, waitlists.
• For safety on the road: your emergency contact and blood group are available to the core team running the ride.
• To verify ride fees you have paid.
• To keep in touch: ride announcements and reminders, confirmations, a birthday wish, and account emails such as verification codes. Ride emails can be turned off from your profile; account and safety emails cannot.
• For the community features you see on the site: the leaderboard, badges, ride history and rider profiles.
• To keep the site secure and to prevent abuse.

We do not sell personal data and we do not show advertising.

• Everyone: your name, avatar, role, rides completed, distance ridden and badges on the Arena leaderboard; the posts and tales you publish; and your name on the homepage on your birthday.
• Signed-in members:your rider profile page (garage, ride history, badges — never your contact details). Riders confirmed on the same ride see each other's names and accommodation choice once the team opens the ride's details.
• The core team (club admins): your contact details, emergency contact, blood group and payment proof, to run the ride and its accounts.

Registration details are never shown publicly, and the payment handles you pay into are shown only to signed-in members who are registering.

The site runs on Vercel (hosting, image storage and performance measurement) with a managed PostgreSQL database. We use Google Analytics for aggregate usage statistics, Google Maps and Mapbox to show routes and live rides, Gmail to send our emails, Sentry to collect error reports, and Firebase Cloud Messaging for push notifications in the T2W app if you turn them on. Each of these processes only what it needs for that job.

A session cookie keeps you signed in; the site does not work without it. A second cookie, kept for a year, remembers that this browser has signed in to your account (it holds a hash of the email, not the email) so that the sign-in throttle keeps serving you if someone else is guessing at your password. Google Analytics sets its own cookies (_ga) to count visits. You can block those in your browser or with Google's opt-out extension; the site works the same without them.

Account and profile data stay for as long as your account exists. Ride records (who rode which ride) are the club's history and feed the leaderboard, so they are kept. Registration details and payment proof are kept for that ride's accounts; write to us and we will remove payment screenshots once a ride is settled. Live-ride positions are kept with the ride's track.

• See and correct your details on your profile page at any time.
• Turn ride emails off with the notification toggle on your profile.
• Ask us what we hold about you, ask for a correction, or ask us to delete your account and data — email Info@taleson2wheels.com. We reply within 30 days.

We are a community club, not a data business, and we follow the principles of India's Digital Personal Data Protection Act, 2023: we collect only what the club needs, for the purposes above, and you can withdraw consent by closing your account.

The site is for adults who ride. We do not knowingly collect personal data from anyone under 18; if you believe we have, tell us and we will delete it.

When this policy changes we update it here with a new date. The Terms of Service and the Riding Guidelines go with it.