Privacy Notice

1. Who we are

Cruise 25 is operated by Moke America Virginia Beach, 1765 Virginia Beach Blvd, Virginia Beach, VA, USA. We are the data controller for personal data processed through Cruise 25 and decide how and why it is used. Contact: tim@mokevb.com.

2. Data we collect and why

• Account data (email, password credentials, username, account type): to create and secure your account. Legal basis: performance of our contract with you.
• Profile data (avatar photo, golf cart color, favorite place, privacy toggles, business details for business accounts): to personalize your profile and map marker. Legal basis: contract and your consent where you choose to make items public.
• Location data (approximate or precise device location, start and destination addresses, saved places and route drafts): to center the map, plan LSV-legal routes, and suggest nearby attractions. Precise location is used only while you grant device permission. Legal basis: consent and contract.
• Community content (trip photos and selected destinations you post): to display posts in area feeds and on public profiles. Legal basis: contract and consent.
• Support messages and advertising enquiries: to respond to you. Legal basis: legitimate interests.
• Usage, device and log data (IP address, device/browser identifiers, error reports, feature usage): for security, fraud prevention, debugging, and product improvement. Legal basis: legitimate interests.

We do not collect or store your card details. Payment data is collected directly by Paddle.

3. Who we share data with

• Service providers / subprocessors: hosting and database providers, mapping and places services (Google Maps Platform), and error monitoring tools.
• Merchant of Record: Paddle.com, for sale of memberships, subscription management, payments, tax compliance, and invoicing.
• Other users: the profile details and posts you choose to make public.
• Professional advisers (legal, accounting) and authorities where required by law.

4. Retention

We keep account and profile data for as long as your account is active, and community posts until you delete them or your account. After account closure we delete or anonymise personal data within a reasonable period, except where we must retain records for legal, tax, or fraud-prevention purposes.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent (for example by turning off location permissions or making your recent trip private). US residents may also have rights to know about and opt out of certain data sharing; we do not sell personal data. To exercise any right, email tim@mokevb.com. We respond within one month. If you are in the UK/EEA you can also complain to your supervisory authority.

6. International transfers

We operate from the United States, and our providers may process data in the US and other countries. Where data is transferred from the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls on our database, hashed credentials, and restricted administrative access.

8. Cookies and local storage

Cruise 25 uses essential cookies and browser local storage to keep you signed in and to remember preferences such as your saved places, disclaimer acknowledgement, and install prompt state. We do not use advertising cookies. You can clear or block storage in your browser settings, though the app may not function correctly without essential storage.

9. Changes

We may update this notice and will post the revised version here with a new date.