Privacy Policy

This Privacy Policy explains what information JoyR1der collects, how we use and share it, how long we keep it, and — importantly — the technical measures we take to verify age and keep minors off the Service (JoyR1der's 18+ account requirement). Please read it alongside our Terms & Conditions.

Contents

1. Information we collect

We collect only what we need to run the Service, keep it safe, and meet our legal obligations. The main categories are:

We do not knowingly collect more sensitive categories of data except where you provide it for age/identity verification. This may include a facial image (biometric data) used to estimate your age; that image is deleted immediately after processing and is never used for advertising, profiling or identification (see section 7). The face scan is optional — you can always choose a government-ID check instead, anywhere.

2. How we use your information

• To provide the Service — create and secure your account, run live streams and events, process Clicks, tips, purchases, host payouts and refunds.
• To keep people safe — verify age and keep minors off the Service, detect and act on abuse, and review reports (sections 7–8).
• To communicate with you — service, transaction, safety and (if you opt in) update emails and push notifications. Every marketing email has an unsubscribe link.
• To meet legal obligations — tax and financial record-keeping, responding to lawful requests, and mandatory child-safety reporting.
• To improve reliability — diagnose faults and prevent fraud and abuse of our systems.

Advertisements are targeted using content categories, interests and coarse location you provide — never using your identity documents, biometric data or messages.

3. Our lawful bases

Under the New Zealand Privacy Act 2020 we collect, use and disclose personal information in accordance with the Information Privacy Principles. If you are in the EU/UK, we rely on: performance of our contract with you (to provide the Service); your consent (e.g. optional location sharing, marketing); our legitimate interests (safety, fraud prevention, running our business); and legal obligation (financial records, child-safety reporting). Where we rely on consent you may withdraw it at any time.

4. How we share information

We share personal information only with the service providers (“sub-processors”) that help us run JoyR1der, and only as needed. Our current sub-processors are:

We may also disclose information: (a) to law enforcement, regulators or child-safety bodies (including New Zealand’s Department of Internal Affairs and, where a report has a US nexus, the US National Center for Missing & Exploited Children) where we are required to or where it is necessary to protect a child or prevent serious harm; (b) to professional advisors; and (c) as part of a business sale or reorganisation, subject to this policy. We require our sub-processors to protect your information and use it only for the purposes above.

5. We do not sell your data

We do not sell your personal information, and we do not share it with data brokers or third-party advertising networks for their own use. JoyR1der contains no third-party analytics, telemetry or ad-tracking SDKs. We earn money from Click purchases, platform fees and advertisers who buy space on our own system — not from selling your data.

6. Where your data is held

JoyR1der runs on Google Cloud infrastructure located in the United States, and several of our providers (Stripe, LiveKit, SendGrid, Apple) are US-based. By using the Service you understand that your information is transferred to and processed in the United States and other countries, which may have different data-protection laws than your own. We take reasonable steps, and use providers with recognised safeguards, to protect information that is transferred internationally.

7. Age assurance — the 18+ account requirement

Minimum age

You must be at least 18 years old to create an account or use the Service. Our sign-up screens will not accept a date of birth under 18, and there is no mechanism for anyone under 18 to hold or be given an account.

How we verify age

Age is not taken on trust. Verification is layered:

• Face liveness + age estimation (baseline). Browsing, following, watching public streams, chatting in public spaces and a short free Test-Drive ride are open to everyone; before you spend, message privately, upload media, or join a group audio call you complete a short liveness selfie (free — we absorb the cost), which is analysed by an automated facial age-estimation provider (e.g. AWS Rekognition) to estimate your age.
• Government-ID check (higher assurance). If the estimate cannot confirm you are an adult, or you want to go on camera as a driving rider, take part in a one-to-one or group video experience, host, co-host, promote, sell content, receive a payout, or become a Community Guardian, you must complete a government-ID identity check through Stripe Identity.
• Outcome. When a check confirms you are an adult, your account is marked verified. If a check confirms you are under 18, your account is removed (see “Reports that someone is under 18”, below).

How we handle your face data — Biometric Data Policy

Reports that someone is under 18

Any user can report another user who appears to be under 18. We review the report and may require the reported user to complete a government-ID check (which is free to them). A user who is confirmed to be under 18, or who refuses or fails the required check within the time we specify, is removed from the Service. Verification checks you start for yourself carry a fee, described in our Terms; a fee owed for an ID check can be paid either by buying Clicks or as a one-time card payment through Stripe, and Stripe (not JoyR1der) handles the card details.

Minors depicted in content

Even though every account holder is an adult, a real child could appear on camera (for example, a bystander). Child sexual abuse material and any sexualisation of a minor are strictly prohibited and are removed. We also run automated age-estimation across event recordings to help detect a suspected minor appearing in content. Where we become aware of child sexual abuse material we preserve the relevant evidence and escalate to the appropriate authorities, including New Zealand’s Department of Internal Affairs and, for reports with a US nexus, the US National Center for Missing & Exploited Children (NCMEC).

8. Safety & our moderation model

Keeping the community safe is central to how the Service works:

• Human-led moderation. Content moderation is performed by people, not automated content-scanning AI. We operate a three-tier moderator model — community, senior and official moderators. Moderators must be adults, must accept a binding moderator agreement (including confidentiality and a duty to escalate illegal or child-safety material without investigating it themselves), and are trusted, designated users — not the general public.
• Reporting & cases. Any user can report content or another user. Reports about the same item are grouped into a single case. Low-severity cases go to community moderators; severe categories — anything involving minors, violence, self-harm, weapons, trafficking or threats, and all copyright claims — are routed only to our official/staff moderators and never to volunteers.
• Fair process. A reported user is told the category and shown the evidence (the reporter stays anonymous) so they can appeal. Penalties only take effect after an appeal window, and a successful appeal reverses them.
• Enforcement. Depending on severity we may warn, limit reach, suspend, or permanently close an account, hold or forfeit funds pending review, require re-verification of age, and refer serious matters to authorities.

9. How we protect your information

• In transit: all traffic is encrypted with TLS.
• At rest: your data is encrypted at rest by our cloud provider. In addition, your date of birth is encrypted at the field level with a key held separately from the database, and any two-factor-authentication secrets are encrypted with AES-256-GCM.
• Access controls: sensitive contact details and verification documents are held in restricted stores; ID documents are shown to staff only through short-lived, signed links. Staff and advertiser accounts require multi-factor authentication.
• Abuse protection: we use Google App Check / reCAPTCHA Enterprise to keep automated abuse off the platform, and privileged roles (moderators, staff) can only be granted by us, never self-assigned.
• Payment isolation: we never see or store your full card number — Stripe handles it.

No system is perfectly secure, but we work continuously to protect your information and to fix issues we find.

10. How long we keep information

11. Your rights & choices

You can, at any time:

• Access, correct or delete your personal information — email legal@joyr1der.com and we will respond within the time required by law.
• Delete your account from Profile settings. This removes your profile and sign-in credentials. Some records — for example financial/ledger entries and moderation records — are retained where we are legally required to keep them or need them to resolve disputes. If you want a full erasure request handled, email us.
• Control your privacy — hide your real name, control who can find you, and turn location sharing off (which deletes any stored location).
• Opt out of marketing — every marketing email has an unsubscribe link; service and safety messages are essential and continue.

If you are in the EU/UK you also have rights to portability, restriction and objection, and to lodge a complaint with your data-protection authority. If you are in California you have rights under the CCPA/CPRA, including to know and to delete — and note that we do not sell or “share” your data as those terms are defined. If you are in New Zealand and are not satisfied with our response, you can contact the Office of the Privacy Commissioner (privacy.org.nz).

12. Cookies & local storage

Our web app uses only the local storage and cookies needed to keep you signed in, remember your preferences, and run our bot-abuse protection (App Check / reCAPTCHA). We do not use advertising or cross-site tracking cookies.

13. Changes to this policy

We may update this policy from time to time. If we make a material change we will update the “Effective” date above and, where appropriate, notify you in the app or by email. Continuing to use the Service after a change means you accept the updated policy.

14. How to contact us

Conesworth Limited (trading as JoyR1der)
Privacy Officer: Tim Schliebs
16 Rautawhiri Road, Helensville 0800, New Zealand
NZ company number 1862936
Email: legal@joyr1der.com