Privacy Policy

Version 2026-08-26 · Effective 26 August 2026

This Privacy Policy explains how Flickwand LLC (“Flickwand,” “we,” “us”), a United States limited liability company that operates SonoRev, handles personal data when you use sonorev.com, the /app/ ride experience, and related services (the “Service”).

It should be read with our Terms of Service.

1. Who is responsible

Controller: Flickwand LLC (USA), operating SonoRev. Contact: [email protected].

If you are in the EU/EEA/UK, you may also have rights under the GDPR / UK GDPR as described below.

2. What we collect

Account: email address (magic-link sign-in via Supabase Auth); account identifiers.
Subscription: Stripe customer and subscription status, payment-related metadata Stripe shares with us (we do not store full card numbers).
Terms acceptance: Terms version, acceptance timestamp, and optionally user-agent (and similar technical signals) to show you agreed.
App preferences: settings stored in your browser (for example volume, profile, trip distance, Demo mode).
Device permissions you grant: location (GPS position and speed for the sound model), motion sensors, Bluetooth (optional battery %), wake lock / media playback APIs. Location and sensor data are processed in your browser, on your device, to drive the ride experience. They are not sent to our servers: we do not collect, store, or upload your GPS position, route, or speed, and no trip history leaves your device. The trip distance shown in the app is computed and saved only in your browser’s local storage.
Cookies and local storage: a sign-in backup cookie, a Cloudflare security cookie, and browser-local app settings — see our Cookie Policy for the full list.
Technical logs: standard hosting/CDN and infrastructure logs (IP, timestamps, error data) as needed to run and secure the Service.

3. Why we process data (purposes & legal bases)

Provide the Service (account, magic link, engine app, subscription entitlement) — contract / steps prior to contract (GDPR Art. 6(1)(b)).
Billing and fraud prevention (Stripe) — contract and legitimate interests in preventing abuse (Art. 6(1)(b), 6(1)(f)).
Record Terms acceptance — contract and legitimate interests in proving agreement (Art. 6(1)(b), 6(1)(f)).
Security, debugging, and service improvement — legitimate interests (Art. 6(1)(f)).
Legal obligations — where tax, accounting, or law-enforcement rules require retention (Art. 6(1)(c)).
Marketing — only if we start it, and then with a separate lawful basis (usually consent). We do not sell your personal data.

4. Processors and transfers

We use service providers that process data on our behalf, including:

Supabase — authentication, database, edge functions;
Stripe — payments and customer portal (checkout runs on Stripe’s own pages under Stripe’s privacy policy);
DigitalOcean App Platform — hosting of the static site;
Cloudflare — content delivery network and security in front of our hosting. Cloudflare processes IP addresses and technical request data to deliver and protect the site, and sets a short-lived security cookie (__cf_bm) — see the Cookie Policy;
Google Fonts — font file delivery when pages load; Google may log technical request data such as IP address (no cookies are set by the Fonts API).

These providers may process data in the United States or other countries. Where GDPR applies, transfers rely on appropriate safeguards such as the provider’s standard contractual clauses or other lawful transfer mechanisms they offer.

5. Cookies and local storage

We use a small set of strictly necessary cookies and browser storage: a first-party sign-in backup cookie (sonorev-rt), a Cloudflare security cookie (__cf_bm), and local storage for app settings, Demo time, and your auth session. We use no advertising cookies and no third-party analytics cookies. The full list, lifetimes, and your choices are in the Cookie Policy.

6. Retention

Account and subscription records: while your account is active and for a reasonable period afterward for billing disputes, abuse prevention, and legal retention.
Terms acceptance records: for the life of the account and a reasonable period after, to evidence agreement.
Browser-local settings: until you clear site data.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. EU/EEA/UK users may lodge a complaint with their local supervisory authority.

To exercise rights: [email protected]. We may need to verify you control the account email.

Deleting your account and data. Self-serve deletion is not yet available in the app. To delete your account and the personal data linked to it, email [email protected] from your account email address. After verifying the request we will delete your account and associated personal data, except records we must keep for legal reasons (for example billing and tax records) — see Retention. Cancel any active subscription first (or ask us to) via the Stripe Customer Portal / “Manage subscription”; see Cancellation & Refunds.

8. Children

The Service is not directed at children under 16 (or the higher digital-consent age where you live). We do not knowingly create accounts for younger children. Using SonoRev while operating a vehicle requires being at least 18 — see the Terms.

9. Safety note

SonoRev uses location and audio while you ride. That is a product feature, not a reason to interact with the phone in traffic. See the Terms for rider responsibility and assumption of risk.

10. Changes

We may update this Privacy Policy. The version and effective date above will change when we do. Material changes may be noted in the app or by email.

11. Contact

Privacy questions: [email protected] (Flickwand LLC / SonoRev).

Mailing address: 1740 Dell Range Blvd Ste H-13-32652, Cheyenne, WY 82009, USA.