Privacy Policy

This Privacy Policy explains what information JoyR1der collects, how we use and share it, how long we keep it, and — importantly — the technical measures we take to verify age and keep minors off the Service (JoyR1der's 18+ account requirement). Please read it alongside our Terms & Conditions.

Contents

1. Information we collect

We collect only what we need to run the Service, keep it safe, and meet our legal obligations. The main categories are:

We do not knowingly collect more sensitive categories of data except where you provide it for age/identity verification. This includes facial images (biometric data) from the selfie, from camera frames and — once that check is switched on — from images and videos hosts upload as content, used to estimate age; they are not kept — except a frame flagged as possibly showing a child, which is kept privately as safety evidence (section 7) — and are never used for advertising, profiling or identification. The selfie is optional — you can always choose a government-ID check instead, anywhere; the camera checks apply to whoever is on camera while broadcasting.

2. How we use your information

• To provide the Service — create and secure your account, run live streams and events, process Clicks, tips, purchases, host payouts and refunds.
• To keep people safe — verify age and keep minors off the Service, detect and act on abuse, and review reports (sections 7–8).
• To communicate with you — service, transaction, safety and (if you opt in) update emails and push notifications. Every marketing email has an unsubscribe link.
• To meet legal obligations — tax and financial record-keeping, responding to lawful requests, and mandatory child-safety reporting.
• To improve reliability — diagnose faults and prevent fraud and abuse of our systems.
• To prevent fraud and financial crime — monitor transaction activity; enforce daily buying and spending limits that rise as you complete age and identity verification; check a host’s identity with a government-ID check before a payout; and screen payout recipients (and advertisers) against sanctions lists, including the US OFAC sanctions lists and embargoed countries, using our own copy of those lists. To keep JoyR1der out of the countries and regions where it isn't offered (see the Terms), we also check the country you tell us and, where we can detect it, the country your connection comes from, when you sign up, buy or cash out. We may hold, refuse or reverse a payment or payout we reasonably believe is unlawful, fraudulent or in breach of sanctions. This uses purchase, spend and payout amounts, the name and country on your account and, if you receive payouts, the legal name held for your payout account by Stripe or Trolley, which we keep so we can re-screen it when the sanctions lists change. It does not use your messages or biometric data.

Personalisation and ads

We build an interest profile for you: content categories you pick, plus categories we infer from the events you join and from what you browse, how long you watch, what you save or search for, and what you dismiss, with older activity counting for less over time. We use it to choose what is recommended to you and the order of people and posts, to match you with ads and research studies, and to count interest audiences for advertisers and researchers (who see only totals, never for fewer than 25 people). Ads can also be aimed at age group, at gender if you gave one, and at an area of at least 3 km around a point, using your approximate location only if you share it. We never use your identity documents, biometric data or messages for ads. You can turn all of this off with the “Personalise what I see” switch in your Profile settings: we then stop using anything we have inferred about your interests, and you only get ads and research invites that are not aimed at an interest.

3. Our lawful bases

Under the New Zealand Privacy Act 2020 we collect, use and disclose personal information in accordance with the Information Privacy Principles. If you are in the EU/UK, we rely on: performance of our contract with you (to provide the Service); your consent (e.g. optional location sharing, marketing); our legitimate interests (safety, fraud prevention, running our business); and legal obligation (financial records, child-safety reporting). Where we rely on consent you may withdraw it at any time.

4. How we share information

We share personal information only with the service providers (“sub-processors”) that help us run JoyR1der, and only as needed. Our current sub-processors are:

We may also disclose information: (a) to law enforcement, regulators or child-safety bodies (how we handle their requests is set out in our Law Enforcement Guide) (including New Zealand’s Department of Internal Affairs and, where a report has a US nexus, the US National Center for Missing & Exploited Children) where we are required to or where it is necessary to protect a child or prevent serious harm; (b) to professional advisors; and (c) as part of a business sale or reorganisation, subject to this policy. We require our sub-processors to protect your information and use it only for the purposes above.

Advertisers

Advertisers on JoyR1der never see who viewed or tapped their ads. Audience sizes they see are totals, and never for groups of fewer than 25 people. Two things are shared with an advertiser only when you choose to:

• Lead forms. If you send an advertiser’s form (“Get in touch”), the name, email address and note you type are given to that advertiser so they can contact you. From then on the advertiser also handles them under its own privacy policy.
• Offer codes. If you tap “Get offer”, you get a code to use with that advertiser. The advertiser sees the code, not who you are, unless you tell them when you use it. Your codes are listed in your profile until they expire.

When you delete your account, we remove your name, email and note from every lead you sent and remove your account from every offer code you hold; the advertiser keeps only the fact that a lead or code existed and what it was charged. Copies an advertiser already saved outside JoyR1der are theirs to manage — ask them directly.

Some kinds of ad, such as alcohol or political ads, are allowed in some countries and not others. To decide which ads may be shown to you, we work out which countries you are likely to be in from the country in your profile, your shared location if you share it, your time zone, and your IP address. The IP address is looked up in DB-IP’s country database, which runs on our own servers, so your IP address is not sent to DB-IP (IP geolocation by DB-IP, licensed under CC BY 4.0). We work this out each time an ad is chosen and don’t keep the result. An ad of that kind is shown to you only if it is allowed in every one of those countries; if we can’t tell where you are, you see only general ads.

5. We do not sell your data

We do not sell your personal information, and we do not share it with data brokers or third-party advertising networks for their own use. JoyR1der contains no third-party analytics, telemetry or ad-tracking SDKs. We earn money from Click purchases, platform fees and advertisers who buy space on our own system — not from selling your data.

6. Where your data is held

JoyR1der runs on Google Cloud infrastructure located in the United States, and several of our providers (Stripe, LiveKit, SendGrid, Apple, Amazon Web Services, TypeSafe, Anthropic) are US-based. By using the Service you understand that your information is transferred to and processed in the United States and other countries, which may have different data-protection laws than your own. We take reasonable steps, and use providers with recognised safeguards, to protect information that is transferred internationally.

7. Age assurance — the 18+ account requirement

Minimum age

You must be at least 18 years old to create an account or use the Service. Our sign-up screens will not accept a date of birth under 18, and there is no mechanism for anyone under 18 to hold or be given an account.

How we verify age

Age is not taken on trust. Verification is layered:

• Face liveness + age estimation (baseline). Browsing, following, watching public streams and chatting in public spaces are open to everyone; before you ride (including a free Test-Drive ride), spend, message privately, upload media, join a group audio or video call, go on camera, host, co-host, promote, sell content, or moderate an event you complete a short liveness selfie (free — we absorb the cost): three photos taken while you follow on-screen prompts, analysed by Amazon Rekognition to estimate your age and confirm you are a live person. A selfie that confirms you are an adult is all these activities require. Separately, we check the age of whoever is on camera — see “Age checks on camera” below.
• Government-ID check (higher assurance). If the estimate cannot confirm you are an adult, or you want to receive a payout, create an organisation, become an advertiser or researcher, or become a moderator of any tier (community, senior or official), you complete a government-ID identity check through Stripe Identity. You may also choose one to get the verified badge (blue check) — free while you hold a Plus (or higher) membership; subscribing never requires it.
• Outcome. When a check confirms you are an adult, your account counts as age-verified. The visible verified badge comes only from a passed government-ID check (or from our staff verifying a public figure or brand); if we require a fresh government-ID check, the badge is hidden until it is done (a selfie re-check never removes it, and someone who has passed a government-ID check is never locked into a selfie re-check — our staff review them instead). If a check confirms you are under 18, your account is removed (see “Reports that someone is under 18”, below).

Age checks on camera

Because a different person can sit in front of a verified account’s camera, we also check the age of whoever is on camera:

• Each time you go live, one frame from your camera preview, before anything is broadcast. If you go live with your camera off, or without a camera, that frame is taken instead the first time you turn your camera on in your own stream. Someone who passed a government-ID check and chose not to use face scans when they signed up skips this frame.
• When anyone else turns their camera on in an event (a co-host, moderator or rider), one frame, and a second one about 10 seconds later if the first reads under 18. People who have passed a government-ID check skip this one.
• A staff or moderator on-camera check of whoever is broadcasting: three frames while they follow on-screen prompts.
• The live safety check, when we switch it on: the stream’s live preview image is scanned for explicit content and for apparent minors.
• Staff age checks on event recordings: our staff can estimate the age of people in a few frames of an event recording (see Minors depicted in content below).

Frames go to Amazon Rekognition and are not kept. We keep what a check led to: after an under-18 read, the required government-ID check; for a staff or moderator check, its outcome and the estimated age range, which only our staff can see and which we delete 30 days after the event ends (or when the account is deleted, if sooner). An under-18 read can stop the broadcast or the camera and require a government-ID check. Someone who has already passed a government-ID check is not scanned when they turn a camera on in someone else’s event; on their own stream — at go-live, or at their first camera-on if they went live without one — an under-18 read blocks the stream or turns the camera back off and goes to our staff for review instead (and if that check can’t run on a camera frame, the go-live waits, or the camera stays off, and you can try again). The selfie and the checks on you rely on your consent to the biometric release below (how and when it is required is explained there). The age part of the live safety check looks at every face in the preview image of a live stream — whoever is on camera. Once we enforce the release, nobody can go live or turn a camera on in an event without having accepted it, so everyone it looks at has. Private calls with friends and research sessions are not broadcasts: they don’t ask for the release and are never age-scanned; its explicit-content part is not a face scan and runs on every stream. A staff age check on an event recording looks at everyone in the sampled frames and, once we enforce the release, runs only when everyone who could appear on camera in that event — the host, co-hosts, the event’s moderators and every rider allowed on camera or in a private call — has accepted it. The one exception to “not kept”: a frame flagged as possibly showing a child is kept privately as safety evidence (up to 6 per stream; for a suspected child-abuse incident, the frame that triggered it) until staff close the review.

How we handle your face data — Biometric Data Policy

Reports that someone is under 18

Any user can report another user who appears to be under 18. When several independent, established accounts report the same person within 30 days, that person is automatically asked for a fresh selfie, which leads to a government-ID check if needed (for someone already ID-verified, the reports go to our staff instead). Staff may also require a government-ID check (which is free to them). A user who is confirmed to be under 18, or who refuses or fails the required check within the time we specify, is removed from the Service. Verification checks you start for yourself carry a fee, described in our Terms; a fee owed for an ID check can be paid either by buying Clicks or as a one-time card payment through Stripe, and Stripe (not JoyR1der) handles the card details.

Minors depicted in content

Even though every account holder is an adult, a real child could appear on camera (for example, a bystander). Child sexual abuse material and any sexualisation of a minor are strictly prohibited and are removed. Our staff can run an age estimate on a few frames of an event recording; only staff can see those estimates, and they are deleted when the recording is (an estimate that leads to a child-protection review is kept with that review). Once that check is switched on, images and videos hosts upload as content are automatically checked by our own systems — not sent to a third party — for nudity and the apparent age of any face (once we enforce the biometric release, the apparent age is read only for an uploader who has accepted it); the apparent age is never shown to other users. An image that may show a child in explicit content is logged for our staff to review — and, once that step is switched on, also preserved as evidence and escalated. That log entry, which includes the apparent-age reading, is visible only to our staff and is kept as a safety record. Where we become aware of child sexual abuse material we preserve the relevant evidence and escalate to the appropriate authorities, including New Zealand’s Department of Internal Affairs and, for reports with a US nexus, the US National Center for Missing & Exploited Children (NCMEC).

8. Safety & our moderation model

Keeping the community safe is central to how the Service works:

• People decide. Reports are decided by people. Automated tools help find material for review — text checks on posts, comments and messages, the camera age checks, the live safety check and, once switched on, checks on uploaded content — and flag it to our moderators. Some of them also act straight away, and a person then reviews what they did (staff can reverse it):
  • when the live safety check is switched on, an apparent minor together with explicit content on a live stream stops the stream at once, freezes the host’s account and disables its sign-in pending a child-safety review, and preserves the evidence;
  • a camera frame that reads under 18 stops a go-live before anything is broadcast (or, for a host who went live with the camera off, turns their camera back off), and a second under-18 read in a row in an event turns that person’s camera off; either way the person is then asked for a government-ID check (someone who has already passed one isn’t scanned in other people’s events, and on their own stream goes to our staff instead);
  • where we have switched it on, the live safety check also stops a stream when it detects explicit content or an apparent minor;
  • our automated text checks hide a post, comment or chat message that very likely threatens violence or sexualises a minor, and blur a post that very likely contains sexual or graphic content (a post flagged this way may be blurred behind a warning; staff remove it, or it is removed through the report process, when it breaks our rules); once switched on, the same check removes uploaded content whose description very likely shows such material;
  • when two or more different people (or one of our moderators or staff) report an account for the most serious kinds of harm — and the reports don’t look coordinated — the account is placed on a temporary hold that pauses its activity while we review it; bookings it already has are not cancelled;
  • activity that looks like Bonus farming holds the account’s spending, and a government-ID check is required before it can spend again (see our Terms).
  We operate a three-tier moderator model — community, senior and official moderators. Community and senior moderators are unpaid volunteers from the community; official moderators are JoyR1der staff. Moderators must be adults who have passed a government-ID check (their moderator powers pause while an age check we have asked of them is pending), must accept our Volunteer Moderator Terms (including confidentiality and a duty to escalate illegal or child-safety material without investigating it themselves), and are trusted, designated users — not the general public.
• Reporting & cases. Any user can report content or another user. Reports about the same item are grouped into a single case. Low-severity cases go to community moderators; severe categories — anything involving minors, violence, self-harm, weapons, trafficking or threats, and all copyright claims — are routed only to our official/staff moderators and never to volunteers.
• Fair process. A reported user is told the category and shown the evidence (the reporter stays anonymous) so they can appeal. Penalties only take effect after an appeal window, and a successful appeal reverses them.
• Enforcement. Depending on severity we may warn, limit reach, suspend, or permanently close an account, hold or forfeit funds pending review, require re-verification of age, and refer serious matters to authorities.

9. How we protect your information

• In transit: all traffic is encrypted with TLS.
• At rest: your data is encrypted at rest by our cloud provider. In addition, your date of birth is also encrypted at the field level: the app encrypts it before it is stored, so the database never holds it in plain text (the key is built into the app, not kept in the database), and any two-factor-authentication secrets are encrypted with AES-256-GCM.
• Access controls: sensitive contact details and verification documents are held in restricted stores; ID documents are shown to staff only through short-lived, signed links. Staff and advertiser accounts require multi-factor authentication.
• Abuse protection: we use Google App Check / reCAPTCHA Enterprise to keep automated abuse off the platform, and privileged roles (moderators, staff) can only be granted by us, never self-assigned.
• Payment isolation: we never see or store your full card number — Stripe handles it.

No system is perfectly secure, but we work continuously to protect your information and to fix issues we find.

10. How long we keep information

11. Your rights & choices

You can, at any time:

• Access, correct or delete your personal information — email legal@joyr1der.com and we will respond within the time required by law.
• Download your data — you can download a copy of your data from within the app. The export leaves out files you can already download yourself in the app (such as your own uploads and recordings).
• Delete your account from Profile › Settings › Danger zone › Delete account (see how to delete your account; also available while your account is suspended, or if you decline updated terms). This removes your profile and sign-in credentials and hides your posts and content. Messages you sent stay with the people you sent them to, shown as from “Deleted user”. Unspent Clicks and earnings that cannot be paid out are forfeited; the app shows you the amount (or, where part of it is still being settled, the most you could lose) and asks you to confirm first. If you earn on JoyR1der (or have a sale still inside its refund period, a refund request open against you, or one of your own still being decided), your account closes at once — hidden from everyone, and you are signed out — and is deleted after a hold of at least 24 hours (longer if a refund period on your sales ends later, or while such a refund request is still being decided). During the hold we keep your account data and your funds, which are held with no payouts so that refunds can be settled from them; the app tells you the date, and we email you if it moves or if more would be forfeited than you agreed to (nothing more is forfeited without your OK). To cancel the deletion, sign back in before it completes and tap “Cancel the deletion”. Classes, seats, packs and passes you have paid for with other hosts are given up when you delete, and any refund that would reach you after your account is deleted goes to JoyR1der instead. If our team is holding your earnings while it reviews your account (for example after a serious report or a suspected ban evasion), deletion waits until that review is finished. Some records — for example financial/ledger entries and moderation records — are retained where we are legally required to keep them or need them to resolve disputes. If you want a full erasure request handled, email us.
• Control your privacy — hide your real name, control who can find you, and turn location sharing off (which deletes any stored location).
• Choose marketing email — marketing email is off unless you turn it on in your settings; you can turn it off again at any time there, or with the unsubscribe link in every marketing email. Service and safety messages are essential and continue.
• Turn personalisation off — see “Personalisation and ads” in section 2.

If you are in the EU/UK you also have rights to portability, restriction and objection, and to lodge a complaint with your data-protection authority. If you are in California you have rights under the CCPA/CPRA, including to know and to delete — and note that we do not sell or “share” your data as those terms are defined. Sensitive data (US state laws). Where US state privacy laws treat information as sensitive and require your opt-in consent, we use it only with that consent: biometric data (the face scans in section 7) only after you accept our written biometric release, and your location only if you turn location sharing on (you can turn it off at any time, which deletes the stored location). We do not use sensitive data to infer characteristics about you, and we never use biometric data for ads. If you are in New Zealand and are not satisfied with our response, you can contact the Office of the Privacy Commissioner (privacy.org.nz).

12. Cookies & local storage

Our web app uses only the local storage and cookies needed to keep you signed in, remember your preferences, and run our bot-abuse protection (Firebase App Check with Google reCAPTCHA, which Google provides and which sets its own cookies to tell people from bots). Stripe’s script (Stripe.js) also loads on the web app so that Stripe can take payments and help prevent fraud; Stripe may set its own cookies or storage for that, under its own policy. We do not use advertising, analytics or cross-site tracking cookies. The first time you visit, a notice tells you about this storage; you can dismiss it.

13. Changes to this policy

We may update this policy from time to time. If we make a material change we will update the “Effective” date above and, tell you in the app or by email. A material change comes with an updated version of the Terms, which we ask you to accept before you continue using the Service, as the Terms explain; where the law requires your consent to a new use of your information, we ask for it separately. If you do not accept a change, you can delete your account instead.

14. How to contact us

Conesworth Limited (trading as JoyR1der)
Privacy Officer: Tim Schliebs
16 Rautawhiri Road, Helensville 0800, New Zealand
NZ company number 1862936
Email: legal@joyr1der.com