Privacy Policy.

1. Information We Collect

Account Information

• Display Name — chosen by you when creating an account or joining as a guest.
• Email Address — collected if you sign in with Google OAuth. Used solely for account identification.
• Google Profile Information — your name and avatar URL from your Google account, if you sign in with Google.

Location Data

When you participate in a drive, the App collects your real-time GPS location. This location data is shared with other participants in the same active drive so that convoy members can see each other on the map. Location collection occurs only while you are actively participating in a drive and the App is running. We do not track your location outside of active drives.

Device Tokens

If you use the Android app and grant notification permissions, we collect your Firebase Cloud Messaging (FCM) device token to send push notifications about drive events (e.g., drive started, leader broadcasts, regroup requests).

Usage Data

We may collect general usage information such as drive participation history, drive routes, and event attendance to provide features like drive history and event management.

2. How We Use Your Information

We use the information we collect to:

• Provide real-time convoy navigation and location sharing during active drives
• Display participant positions on the shared convoy map
• Send push notifications about drive and event updates
• Enable voice communication between convoy members
• Provide turn-by-turn navigation and route calculations
• Maintain drive history and summaries
• Authenticate your identity and manage your account
• Improve and maintain the App

3. Location Data Sharing

Your real-time location is shared only with other participants in the same active drive. Once a drive ends, real-time location sharing stops immediately. Location data may be retained as part of drive history for your reference, but is not shared with other users after the drive concludes.

4. Third-Party Services

The App integrates with the following third-party services:

• Google OAuth — for account authentication. Subject to Google's Privacy Policy.
• Mapbox — for maps, route calculation, and geocoding. Subject to Mapbox's Privacy Policy.
• Cloudflare — for application hosting, database storage (Cloudflare D1), file storage (Cloudflare R2), and real-time communication (Durable Objects). Subject to Cloudflare's Privacy Policy.
• Firebase Cloud Messaging (FCM) — for push notifications on Android devices. Subject to Firebase's Privacy Policy.

5. Data Storage and Retention

Your data is stored on Cloudflare's infrastructure, including Cloudflare D1 (SQLite database) for structured data and Cloudflare R2 for file storage (such as event cover images and debug logs). Data is retained for as long as your account is active or as needed to provide the services. Drive history and participation records are retained to support drive summary and history features.

6. Push Notifications

If you enable push notifications, we will send you alerts about drive events such as when a drive starts, ends, or when the leader sends a broadcast message. You can disable push notifications at any time through your device settings or by unregistering your device token within the App.

7. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With other drive participants during an active drive (location and display name only)
• With third-party service providers as described in Section 4, solely to operate the App
• If required by law, legal process, or governmental request
• To protect our rights, privacy, safety, or property

8. Data Security

We implement reasonable security measures to protect your information, including encrypted connections (HTTPS/WSS), JWT-based authentication, and secure storage on Cloudflare's infrastructure. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights and Data Deletion

You may request deletion of your account and associated data by contacting us at the email address below. Upon receiving a verified deletion request, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes. Guest accounts and their associated data are automatically ephemeral and not linked to a persistent identity.

10. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the App with an updated effective date. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: