Last updated: 4 March 2026
In short: Limitless Miles is a brand owned and operated by Exposure OÜ. When you use the Limitless Miles platform, your personal data is collected and processed by Exposure OÜ, registry code 17450262, registered at Ahtri tn 12, 15551 Tallinn, Estonia. This policy explains what we collect, why, and the rights you have over it.
The Limitless Miles platform, including this website, the Limitless Miles mobile app, and all associated services (Garage, Community, Social Hub, Live Maps, Marketplace, and Merch Studio), is operated by:
Exposure OÜ
Registry code: 17450262
Registered address: Ahtri tn 12, Kesklinna linnaosa, Tallinn, Harju maakond, 15551, Estonia
Email: privacy@limitlessmiles.cc
Exposure OÜ is the Data Controller for the purposes of the EU General Data Protection Regulation (GDPR) and Estonia's Personal Data Protection Act. Limitless Miles is our consumer-facing brand name. This policy uses "we", "us", and "Limitless Miles" to refer to Exposure OÜ acting in that capacity.
We collect data in three ways: information you give us directly, information generated by your use of the platform, and information from third parties you choose to connect.
If you choose to connect a third-party account (for example, signing in through a social login provider), we receive the profile information that provider shares with us under its own permissions settings.
We use the data described above to:
Under GDPR, we rely on the following legal bases depending on the activity:
| Activity | Legal basis |
|---|---|
| Creating and operating your account | Performance of a contract with you |
| Processing orders and payments | Performance of a contract with you |
| Live location sharing during rides | Your explicit consent |
| Marketing communications | Your consent, withdrawable at any time |
| Fraud prevention and platform security | Our legitimate interest in keeping the platform safe |
| Accounting and tax records | Compliance with a legal obligation |
We do not sell your personal data. We share data only with service providers who help us operate the platform, each bound by contractual data protection obligations:
Content you choose to make public, such as Social Hub posts, community activity, and leaderboard rankings, is visible to other users of the platform by design.
Exposure OÜ is established in Estonia, within the European Union. Where any of our service providers process data outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, before any transfer takes place.
We keep your personal data for as long as your account is active, plus a reasonable period afterward to comply with legal, accounting, and tax obligations under Estonian law, typically up to seven years for financial records. Ride history and XP are retained as part of your account unless you request deletion. If you delete your account, we remove or anonymise personal data that is no longer required, subject to our legal retention obligations.
As a data subject under GDPR, you have the right to:
To exercise any of these rights, contact us at privacy@limitlessmiles.cc. We will respond within one month, as required by GDPR. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.
We use essential cookies to keep you signed in and to remember basic preferences, such as your distance unit and display theme. We may use analytics cookies to understand how the platform is used, so we can improve it. Where analytics or marketing cookies are not strictly necessary, we will ask for your consent before setting them.
Live location sharing is a mobile-app feature that is off by default. If you switch it on for a ride, your location is visible only to your crew for the duration of that ride, as described in the app's privacy settings. Endurance Challenge tracking uses continuous location data only while a challenge is active, so your result can be verified, and this also requires your explicit opt-in. You can turn either setting off at any time in your account settings.
Limitless Miles is intended for users who are at least 16 years old, or the applicable age of digital consent in their country of residence. We do not knowingly collect personal data from children below this age. If we become aware that we have done so, we will delete that data promptly.
We apply technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level security on our databases so that riders can only access data they are authorised to see. No system is completely secure, and we encourage you to use a strong, unique password for your account.
We may update this policy from time to time, for example to reflect new features or changes in the law. If we make material changes, we will notify you through the platform or by email before the changes take effect. The date at the top of this page shows when it was last updated.
If you have questions about this policy or how your data is handled, reach out to us directly.
Registry code: 17450262
Ahtri tn 12, Kesklinna linnaosa, Tallinn, Harju maakond, 15551, Estonia
Email: privacy@limitlessmiles.cc