Privacy Policy

Kickstand helps motorcycle chapters run ride challenges and chapter tools. This policy explains what we collect to do that, who can see it, and what you can ask us to do with it.

Effective October 12, 2026. Last updated October 12, 2026.

The short version

• We collect what we need to run Kickstand: your account, your profile, your photos, and where your photos were taken.
• The photo files we store have no location data inside them. With your OK, we keep the location as a separate note so a reviewer can check you were at the stop.
• Your chapter's officers can see more than other members can. Other members only see your photos if you turn on photo sharing.
• Your emergency contact is optional. Only chapter officers can look it up, and every lookup is logged.
• We don't sell your personal information. We use Google Analytics to understand how our sites are used, following your cookie choice, and no advertising tags.
• You can ask us for a copy of your data or ask us to delete your account.

Who we are

Kickstand is run by 16Wells LLC, a business based in the United States. In this policy, "we," "us," and "our" mean 16Wells LLC. Questions or requests: hello@getkickstand.app.

Kickstand is an independent product. It is not made, sponsored, or endorsed by Harley-Davidson or the Harley Owners Group (H.O.G.). Harley-Davidson and H.O.G. are trademarks of their owners.

What this policy covers

The Kickstand web app (ride.getkickstand.app), our websites (www.getkickstand.app and www.hogchallenge.com), our phone apps when they launch, and the emails we send. It doesn't cover other companies' sites or apps you open from Kickstand, like Google Maps, Apple Maps, or a sponsor's website.

Two kinds of information

1. Information you give us when you sign up and use the app.
2. Chapter information your chapter's officers put into Kickstand to run the chapter, such as a member roster. H.O.G. membership information belongs to H.O.G., and chapters hold it under H.O.G.'s rules. We handle chapter information for the chapter, and only to run the chapter's tools.

What we collect and why

Your account

• Email address, to sign you in and send account messages like your sign-in code.
• Name, so your chapter knows who you are.
• How you sign in: email code, Google, Microsoft, Apple, or a passkey. From Google, Microsoft, or Apple we get your name, email, and an account number, never your password. A passkey stores a public key with us; your fingerprint or face scan stays on your device.
• Sign-in sessions: a random token in a cookie keeps you signed in for up to 30 days. We store a scrambled (hashed) copy and the browser name your device reports. Sign-in codes are stored scrambled and work for 10 minutes.

Kickstand has no passwords, so there are none for anyone to steal from us.

Your profile (all optional)

• Display name, profile photo, and a short bio
• Phone number, and who can see it: only you, chapter officers (the default), or all chapter members
• Mailing address
• Social media links, and your bikes (year, make, model, nickname, color, photo)
• Who can see your profile: chapter members (the default) or officers only
• How your name shows on leaderboards: full name, first name and last initial (the default), or hidden. Hidden riders still compete
• Whether other members can see your photos (off by default)

Information your chapter adds

Chapter officers can add and update member details to keep the chapter's records: name, email, phone, mailing address, H.O.G. ID, membership dates, and officer notes. They can also import the chapter's member roster. If your chapter added you this way before you signed in, you'll find those details when you sign in with that email address, and you can change your own profile any time.

Your H.O.G. ID

Your H.O.G. ID is how we match you to your National H.O.G. records. Everyone gets a temporary placeholder ID at sign-up, replaced with your real National ID when you or a chapter officer adds it. You never have to give it to sign up or join a chapter. You, your chapter's officers, and our support team can see it. Other members can't.

Your emergency contact (optional)

You can add someone to call if something happens on a ride: their name, relationship to you, phone numbers, and a short note. We don't ask for medical information. Please only add someone who has agreed to be your emergency contact.

• Who can see it: you, and your chapter's officers, one lookup at a time.
• Every lookup is logged with who looked and when. If our support team sees it while helping you, that's logged too. Chapter officers and our support team can review the log.
• Other members can't see it, and it never goes to sponsors or anyone else.

The app will remind you to add one until it's on file. Nothing is blocked if you don't.

Your photos and where they were taken

This is the heart of the app, so here is exactly what happens.

• On your phone, before upload: the app reads the location and time saved in the photo (if there is one), then shrinks the photo to 2,048 pixels on its longest side, which removes all the hidden data in the file, including location. If you take the photo in the app and allow location access, the app also reads your phone's current location.
• What we store: the shrunk photo, with no location data inside it. As separate records: the photo's location and time, your phone's location when you took it in the app, the distance from the stop, and a match result. We also keep a fingerprint (hash) of the file to spot the same photo submitted twice, and your note to the reviewer if you add one.
• Why: reviewers use the location as a hint that you were at the stop. It's never a hard rule. A photo with no location still goes to a person for review.
• Who sees the location: the challenge's reviewers, chapter officers, and our support team. Other members never do.

We ask first. Before your first photo, the app asks whether it can use your photo's location. If you choose Not now, we don't read the location saved in your photos or your phone's location, and we send neither; your photo still goes to review. You can change this any time on the photo screen.

We only read your phone's location while you're taking a photo in the app, and only if you allow it. Arrival alerts on the web check your location on your phone only, and that location never leaves it. We don't track where you ride.

Chapter photo galleries: photos you add to your chapter's albums are seen only by your chapter's members once an officer or the chapter Photographer approves them, you or an officer can remove them at any time (which deletes them), and we store them resized for the web with no location data.

Challenges, rides, and preferences

Which challenges you join, the stops you've done, your rank and finish date, your daily mileage, the map app you use, your map and appearance choices, and the start point you enter in the route planner.

How the app is used

We keep our own simple log of how Kickstand is used, so we can see what's working: the screen or action, the screen's general address (never the full link), the kind of device, your role (visitor, rider, officer, sponsor, staff), your account number if you're signed in, and a random number for the browser tab. It doesn't record your name, email, IP address, H.O.G. ID, location, photos, or emergency contact, and it uses no cookie. Only our staff can see it. We delete entries after 400 days.

Cookies and analytics

The app sets one cookie of its own: the sign-in cookie above. Your cookie choice and light or dark setting are saved in your browser on this device.

Google Tag Manager and Google Analytics 4. On our websites and the web app we use Google Tag Manager, which loads Google Analytics 4, to count visits, see which pages help, and learn where visitors come from. Google Analytics sets its own cookies and receives your IP address (Google says Analytics doesn't store it), browser and device details, the pages you visit, and the site that sent you. It doesn't receive your name, email, phone, H.O.G. ID, emergency contact, photos, or photo locations. We keep Google Analytics data for 14 months. Google handles it under its own privacy policy.

• Your choice comes first. We use Google Consent Mode. In the United States, analytics is on until you choose otherwise; "Reject all" in the cookie banner turns it off right away. In the EEA, UK, Switzerland and Quebec, analytics stays off until you accept. When analytics is off, Google receives only a basic signal with no cookies or identifiers, which it uses to estimate totals.
• The "Cookie choices" link in every footer of our websites, and Profile in the app, let you change your mind at any time.
• If your browser sends a Global Privacy Control signal, we treat it as opting out of ad tracking.
• We don't use advertising tags today. We'll update this policy before we do.

Separately, we keep our own simple usage log, described above. It never goes to Google.

Payments

• Chapter plans and sponsor invoices are paid through Stripe. We never see or store your full card number. We get back things like the amount, the date, and the last four digits.
• Chapter dues (coming later) go straight to your chapter through the chapter's own Stripe account. The chapter is the seller.
• App Store purchases are handled by Apple.

Messages to us

If you contact us or fill in a form, we keep what you send so we can answer it.

Ask us: questions you send through Ask us in the app are saved with your account. Our support team reads the ones the help articles don't clearly answer and replies in your Inbox. To pick help articles, an AI model on Cloudflare sees a copy of your question with email addresses and phone numbers removed. It only scores how well our articles fit and doesn't write anything. Please leave out passwords and card numbers.

Who can see what

• You: everything about your own account.
• Chapter members: your profile (unless you set it to officers only), your phone (only if you chose members), your leaderboard name and progress, and your approved photos (only if you turned on photo sharing).
• Chapter officers: your name, email, phone (unless you set it to only you), mailing address, H.O.G. ID, membership details, when you were last active, your challenge progress, and the photos you submit to their challenges with their location details. They can look up your emergency contact; every lookup is logged. Officers use member information only for chapter business.
• The public: nothing, unless a chapter turns on a public challenge page. Public pages follow your leaderboard name setting.
• Our support team: what's needed to run the service and help chapters, including a "view as" mode that shows the app the way a member sees it. Every "view as" session is logged. If you use Ask us, they read the questions the help articles don't clearly answer.
• Sponsors: no personal information. They get totals of how often their ad was seen and clicked.

Companies that help us run Kickstand

These service providers get only what they need to do their job for us:

• Cloudflare: hosts the app, database, and photo storage; delivers our websites; blocks attacks; runs our AI image tool and the AI model that matches Ask us questions to help articles.
• Google: Sign in with Google; maps, place lookups, and drive times between stops; Google Tag Manager and Google Analytics 4; an optional AI image tool.
• Microsoft and Apple: sign-in, and Apple's App Store.
• Resend: sends our emails, like sign-in codes and invitations.
• Stripe: payments.
• OpenFreeMap: map tiles for our free map style. Your browser loads tiles from them directly, so they see your IP address.

AI images: chapter officers can create challenge banner images with AI. The AI tool gets only the officer's written description and style. We never send member photos to an AI tool.

Map links: when you open a route in Google Maps or Apple Maps, or download a GPX file, that company's own privacy policy covers what happens there.

We don't sell member data

We don't sell your personal information. We never use chapter rosters or H.O.G. membership information for advertising or for anything other than running your chapter's tools.

How long we keep things

• Your account and profile: until you delete your account.
• Sign-in codes: 10 minutes. Sign-in sessions: up to 30 days.
• Usage log: 400 days. Google Analytics: 14 months.
• Payment records: as long as tax and accounting rules require.

Deleting your account

Email hello@getkickstand.app to delete your account. We'll remove your profile, photos, emergency contact, bikes, passkeys, Ask us questions, and sign-in details. Usage log entries stay without your account number, so they're just counts. Some records stay as the law requires, like payment records.

Children

Kickstand is for adults 18 and older. We don't knowingly collect information from anyone under 18. If you think a child has signed up, contact us and we'll delete the account.

Your choices and rights

Wherever you live, you can ask us to give you a copy of your information, fix information that's wrong (you can change most of it yourself in your profile), or delete your account. We'll answer within 45 days. We may need to confirm it's really you, usually with a code sent to the email on your account. Someone else can ask for you with your written permission. We won't treat you differently for asking. If we turn down a request, reply to our answer and we'll look at it again.

Some states, including California, give residents specific privacy rights. We offer these choices to everyone, wherever you live. If you visit from outside the United States, Kickstand is built for US chapters, and your information is handled in the United States and wherever our service providers operate.

How we protect your information

• No passwords, so there are none to leak.
• Sign-in tokens and codes are stored scrambled (hashed), and every connection is encrypted.
• Photos are stored privately and only shown after the app checks who is asking.
• What you can see depends on your role in each chapter.
• Emergency contact lookups and staff "view as" sessions are logged.
• We limit how often sign-in codes can be requested, using your IP address for about an hour. We don't save IP addresses in our database.

No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

Changes to this policy

When we change this policy, the app shows you the new version and asks you to accept it. The date at the top shows when it last changed.

Contact us

16Wells LLC, doing business as Kickstand. Email hello@getkickstand.app, or write to 16Wells LLC, 3250 Bonita Beach Road, Unit 205-309, Bonita Springs, FL 34134-4190.