Privacy Policy

Effective Date: October 11, 2026

Schley Adventures, LLC, doing business as Trail Time Rentals ("Trail Time," "we," "us," or "our"), operates the Trail Time mobile application (the "App"). This Privacy Policy describes how we collect, use, and share your personal information when you use our App.

1. Information We Collect

Information You Provide

  • Account Information: Name, email address, phone number, and password when you create an account.
  • Identity Verification: Driver's license images and a selfie, submitted through Stripe Identity for age and identity verification. Stripe performs the verification, and is the only party that stores these images — we keep no copy. When authorized staff need to check a license, the image is retrieved from Stripe for that viewing and is not saved, and the access is recorded in our audit log. From the verification itself we retain your date of birth, the name and expiry date shown on the license, its issuing country, the type of document, and the last four characters of its number — never the images, and never the full number. Deleting your account instructs Stripe to erase the images.
  • Payment Information: Payment card details processed through Stripe. We do not store card numbers — Stripe handles all payment data in compliance with PCI-DSS.
  • Rental Photos: Photos of vehicles taken during checkout and return for damage documentation purposes.
  • Digital Signatures: Your signature on the safety agreement and rental terms.

Information Collected Automatically

  • Location Data: Precise location, when you grant permission, recorded as part of the record when you sign a rental agreement. Sharing it is optional and signing works without it. Trail Time does not track your location during a ride.
  • Device Information: Device type, operating system version, and push notification tokens for sending rental updates.
  • Crash and Performance Data: Anonymous crash reports and performance metrics collected through Sentry to improve app stability.

2. How We Use Your Information

  • Process and manage ATV rentals, reservations, and payments
  • Verify your identity and age eligibility
  • Document vehicle condition at checkout and return
  • Send rental confirmations, reminders, and status updates via push notifications, email, and SMS
  • Process damage claims and deposit adjustments
  • Improve app stability and performance
  • Comply with legal obligations

3. Third-Party Services

We share information with the following third-party services that help us operate the App:

Service Purpose Data Shared
Stripe Payment processing & identity verification Payment details, driver's license
Twilio Transactional email and SMS notifications Email address, name, phone number, and the content of the emails we send you, including your signed rental agreement
Expo Push notifications Device push token
Sentry Error tracking & performance monitoring Anonymous crash/performance data
Railway / Tigris Encrypted file storage Rental photos

We do not sell your personal information to any third party.

Text Messages (SMS)

If you turn on text messages in the App, the texts we send to your phone number are only about your rentals. Twilio delivers them on our behalf.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

Reply STOP to any text to opt out, or turn text messages off in the App.

4. Data Retention

  • Account data: Retained while your account is active. When you delete your account, your name, email address, phone number, date of birth, password, linked Google or Apple sign-in, and saved payment profile are erased immediately. See Identity verification images below for those.
  • License details: The name, expiry date, issuing country and last four characters we retain from a verification are erased when you delete your account. The type of document is kept, because on its own it identifies nobody.
  • Signed rental agreements: Each agreement you sign is sealed as its own document and kept with the rental record for 3 years. Where the agreement records the license it was signed against, that sealed copy keeps those details for the same period, including after you delete your account — the document is evidence of what was agreed, and altering it afterwards would destroy that.
  • Rental records and photos: Retained for 3 years for legal and insurance purposes.
  • Identity verification images: Held by Stripe, not by us. Stripe removes biometric data (your selfie) within one year and other verification data after three years. Deleting your account instructs Stripe to erase them sooner.
  • Payment records: Retained as required by financial regulations (typically 7 years).
  • Crash/performance data: Retained for 90 days.

5. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Delete your account at any time from the app, under Profile → Delete Account. This immediately erases your name, email address, phone number, date of birth, password, any linked Google or Apple sign-in, and your saved payment profile, and erases the license details retained from your verification. It also instructs Stripe to erase the identity verification images it holds for you, which Stripe may take a few days to complete. Records of past rentals and payments are kept without your personal details, as described in Data Retention above — with one exception: an agreement you signed keeps the license particulars sealed into it. Our audit log keeps a dated record that the deletion happened, including the email address and name held at that time. Stripe keeps its own record of your payments under its retention policy. An account cannot be deleted while a rental or reservation is in progress — return the ATV or cancel the reservation first.
  • Opt-out of communications: Unsubscribe from marketing emails, disable push notifications, or turn off text messages (reply STOP to any text) at any time.

To exercise these rights, contact us at privacy@trailtime.us.

6. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • The right to know what personal information we collect, use, and disclose.
  • The right to request deletion of your personal information.
  • The right to opt-out of the sale of your personal information. We do not sell personal information.
  • The right to non-discrimination for exercising your privacy rights.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encrypted data transmission (TLS/HTTPS)
  • Secure token storage using iOS Keychain
  • JWT authentication with short-lived access tokens
  • PCI-compliant payment processing through Stripe
  • Presigned URLs with 5-minute expiry for photo uploads

8. Children's Privacy

The App is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. ATV rental requires valid identification and age verification.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by email. Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: