YOUR DATA & YOUR RIDE

Privacy policy

Last updated: 2 October 2026

Sora is a cycling navigation and ride recording app by NightCoders. This policy explains how the Sora app and website handle your information. Contact us at hello@nightcoders.id with privacy questions.

Location and ride information

With your permission, Sora uses precise GPS location to show your position, navigate, and record rides. Ride records can include coordinates, timestamps, speed, distance, altitude, elevation gain, and your chosen route. Location recording continues during an active ride when the app is in the background, if the required permission is granted.

Ride history and downloaded map coverage are stored on your device. When you are signed in and connected, completed rides, including their GPS samples, are backed up to your account so you can retrieve them.

Your account

Sign-in uses Apple or Google. Sora receives a provider identifier and, when supplied by your sign-in provider, your email address. We use these to identify your account, manage sessions, and associate your cloud ride history and Sora Core access with you. We do not receive your Apple or Google password.

Purchases and trial access

Sora uses RevenueCat and the relevant app store to manage purchases and access to Sora Core. RevenueCat receives an app account identifier and information needed to verify purchases and entitlements. Payment information is handled by Apple or Google; Sora does not store your payment card details.

Photos and sharing

You can choose a photo as a background for a ride image, save images to your device, or share them through another app. The chosen photo is used to compose the image on your device. When you share an image, the receiving app's privacy policy applies. Be mindful that a route image may reveal places you visit.

Service providers

We use Cloudflare to serve our API and map services, Neon to store account and cloud ride records, Apple or Google for sign-in and payments, and RevenueCat for purchase verification. These providers process information needed to operate those services. Online requests also expose technical information such as your IP address to the service receiving the request. We do not sell your ride or account information.

This website

This website loads fonts from Google Fonts. Your browser sends technical request information, including your IP address, to Google when fetching them. The beta and contact links open your email app; they do not submit an account registration form on this website.

Retention and deletion

Your account and cloud ride records remain available until you delete your account. Deleting your account removes its records, linked sign-in identities, sessions, and cloud rides from Sora's active database. Local ride records remain on your device; remove local app data separately if you want to erase them. App store transaction records are controlled by Apple or Google and are not removed by deleting a Sora account.

See account deletion instructions for deletion in the app or a request outside the app.

Your choices and security

You can change location and photo permissions in your device settings. Disabling location limits ride recording and navigation. Sign out to stop account-based cloud backup. Network requests to Sora's production services use HTTPS. No system can guarantee absolute security.

Changes

We may update this policy when Sora changes. The date above shows the latest revision. Contact hello@nightcoders.id to ask about your data, request deletion, or raise a privacy concern.