Privacy Policy

The controller of the personal data described in this policy is Roadlet, operated by Nicolás Frugoni ("Roadlet", "we", "us").

For anything related to privacy, contact privacy@roadlet.app.

• Account data. If you continue without an account, Firebase Authentication creates an anonymous account identifier for you, which keeps its data if you later link Apple or Google. When you sign in with Apple or Google, we receive through Google Firebase Authentication a unique account identifier, your name and your email address (or Apple's private relay address if you choose to hide yours). You can add a display name, a profile photo and your saved vehicles.
• Location and route. While a trip is recording, Roadlet uses your iPhone's location — including in the background with the screen off — to draw the route you travel and to detect when you stop. Location is also used while you have Convoy turned on for a trip. Roadlet does not use your location at any other time.
• Trip content. Trips, stops (kind, time, position, linked place, notes, rating and cost), planned stops and routes, expenses, photos you attach, invitations and the roles of each crew member.
• Convoy. While Convoy is on, your live position, vehicle kind and the signals you send (need a break, need fuel, fell behind, all good, emergency).
• Safety settings. The emergency contacts you pick for Crash Check (name and phone number), stored with your account.
• Device data. A push notification token, and the language and app version needed to deliver notifications and keep the app working.
• Crash reports. If the app crashes or hits a serious error, Google Firebase Crashlytics receives a technical report: the stack trace, device model, operating system and app version, a random installation identifier, your Roadlet account identifier and a few technical flags (for example whether a trip was recording). Crash reports never include your location, trips, name or email.
• Purchases. If you subscribe to Roadlet Plus, the App Store purchase receipts and subscription status (product, dates, trial and renewal state). Apple handles the payment: we never see your card or payment details.
• Messages to us. If you write to support, the content of your email and your address.

We do not collect your contacts, your browsing activity or data from other apps. Motion sensor data used by Crash Check is processed only on your device and is never uploaded.

• To provide Roadlet: record and show your trips, sync them across your devices and with your crew, and let you plan, split expenses and create recaps.
• To manage your Roadlet Plus subscription: check whether it is active and unlock its features on your devices.
• To send notifications you've enabled, such as crew activity, Convoy signals and Crash Check alerts.
• To build anonymous Spots and recommendations, as described below.
• To keep the service secure, prevent abuse and fix problems.
• To answer your support requests.

Roadlet shows no ads, does not sell or rent personal data, does not build advertising profiles and does not include third-party analytics, advertising or tracking SDKs. The only diagnostics SDK is Firebase Crashlytics, used solely to find and fix crashes.

• Performance of our contract with you — creating your account, recording, storing and sharing your trips, Convoy, notifications and your Roadlet Plus subscription.
• Your consent — access to location, photos and notifications, which you grant through iOS permission prompts and can withdraw at any time in Settings.
• Legitimate interests — keeping Roadlet secure and building anonymous Spots that help all travelers. You can stop a trip from contributing to Spots in its Spots & privacy settings.
• Legal obligations — when the law requires us to keep or disclose information.

• Your crew. A trip is visible only to the people who are members of it, with the permissions of their role (owner, editor or viewer). Convoy positions and signals are shared only with that trip's crew.
• People with a public link. If an owner creates a public link for a trip, anyone with the link can view that trip's shared page. The link can be turned off at any time.
• Everyone, anonymously. Spots contain aggregated information only and never identify you (see the next section).
• Service providers. Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging and Crashlytics) hosts and processes data on our behalf under Google's data processing terms. Apple provides Sign in with Apple, delivers push notifications and processes Roadlet Plus payments. RevenueCat, Inc. manages Roadlet Plus subscriptions on our behalf: it receives an anonymous app user ID (your Roadlet account identifier) and the App Store purchase receipts, and never receives your location, trips, name or email. When you choose to share a recap to Instagram, the image is handed to the Instagram app on your device.
• Authorities. Only when required by law, and we will push back on requests that are not legally valid.

Recommendations in Roadlet come from Spots: places many trips have stopped at. Spots are built so that they cannot be traced back to you:

• Only stops on trips that contribute to Spots are used, and only verified visits — stops where the recorded route shows the vehicle actually stayed there.
• Stops marked as secret (private) are always excluded.
• No account identifiers, names, notes or photos are copied into a Spot. A Spot only keeps aggregate facts: what people stopped for, how many different trips stopped, how recently, in which vehicle kinds and whether people slept there.
• A Spot only becomes visible once at least two different trips have stopped there.

Crash Check is optional and designed for motorcycle riders. When it is on, your iPhone analyzes motion and location data on the device to spot a hard impact followed by no movement. If that happens, a countdown starts. If you don't cancel it, Roadlet alerts your crew with your last known position and prepares a text message to your emergency contacts, which is only sent if someone taps Send.

Roadlet never calls emergency services on its own, and Crash Check is not an emergency service. Nothing is shared if you cancel the countdown.

Trip and account data is stored in Google Cloud Firestore in the European Union multi-region, photos in Google Cloud Storage, and server functions run in the europe-west1 region. Recorded data is also kept on your device so the app works offline. Some of our providers may process limited data outside the European Economic Area; when they do, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

We keep your data for as long as you have an account. A trip remains available to its crew until an owner deletes it. Live Convoy positions are only kept while needed to show the live map. After deletion, residual copies may remain in backups for a limited time before being overwritten.

• Export. Download any trip as GPX, KML or JSON from the app, whenever you want.
• Delete your account. You can delete your account from your Profile in the app. This deletes your profile; trips where you were the only member are deleted; and you are removed from trips shared with other people. Stops, photos and expenses you added to shared trips remain part of those trips for the rest of the crew, so delete them first if you prefer.
• Permissions. You can turn off location, photos or notifications at any time in iOS Settings.
• Your rights. Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive it in a portable format. Write to privacy@roadlet.app and we will reply within one month.
• Complaints. If you are in the EEA or UK, you can also lodge a complaint with your local data protection authority.

Data is encrypted in transit and at rest by our infrastructure provider. Access rules on our database only let crew members read a trip, and only owners and editors change it. No system is perfectly secure, so please keep your Apple or Google account protected.

Roadlet is not directed to children under 13, or under 16 in the European Economic Area and other places where local law sets a higher age. We do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.

We will update this page when Roadlet changes the way it handles data, and change the date at the top. If a change is significant, we will also tell you in the app before it takes effect.

Questions, requests or concerns: privacy@roadlet.app.