Privacy policy

Last updated 14 November 2026

ConvoyGo helps groups ride together safely. It needs your location to do that, so this page says exactly what is collected, why, who else handles it, and how to delete it.

What we collect

• Account: your name, and the email address or phone number from the sign-in you choose (Google, Apple or phone number).
• Profile: blood group, whether you ride or walk, and crash-detection settings, if you add them. Your blood group is shown to your group only during an SOS.
• Emergency contacts: up to 5 names and phone numbers you add, used only to alert them when you raise an SOS.
• Location during trips: while you are in a group trip, your position, speed, heading and battery level are sent to the riders in that trip. Positions are stored so the trip summary and track can be shown afterwards.
• Your own rides: tracks you record and routes you plan stay on your phone unless you share them in a group trip.
• Signal coverage (optional): if you leave coverage sharing on, the phone sends signal strength per map cell, without who you are, to build the dead-zone map. You can turn it off in Settings.
• Rider reports: potholes, closed roads and similar reports you choose to post, and your votes on them.
• Device: a push notification token so alerts reach your phone.

Who sees it

• Your group: riders in the same trip see your live position, name and role.
• Family View: if you share a Family View link, anyone with the link sees your last position for that trip. It stops working 24 hours after the trip ends, or when you turn it off.
• No selling and no ads. We do not sell your data or share it for advertising.

Services that process data for us

• Supabase (database), Upstash (short-lived data such as latest positions), Render (server hosting).
• Google Firebase (sign-in), Expo (push notifications).
• OpenRouteService (route planning and search: the points you route between).
• Map files are downloaded from GitHub; map data © OpenStreetMap contributors.

How long we keep it

• Latest live positions: deleted 1 hour after a trip ends.
• Family View links: stop working 24 hours after the trip ends.
• Trip positions and summaries: kept so you can see past trips, until you delete your account.
• Rider reports: expire on their own (hours to weeks, by type).

Your choices

• Location is only shared while you are in a group trip. Leave the trip to stop.
• Turn off coverage sharing, or stop all Family View links, in Settings.
• Delete your account any time in the app: Me → Delete account (at the bottom). This removes your account and profile, and your emergency contacts.

Questions or requests: the support address listed in the app store.