Privacy Policy
This policy explains what data the Roadz iOS app (“the App”) processes, why, who we share it with and what rights you have. We follow the EU GDPR and Polish data protection law.
1. Controller
The data controller is Hubert Brzozowski (an individual), contact: support@getroadz.app.
2. What the App does
Roadz records your car drives (automatically or manually), shows their stats, the map you have uncovered and the route, lets you search for a destination and guides you there, and lets you compare distance driven with friends. Leaderboards contain no speed metrics.
3. Data we process
- Account: your Apple account identifier (Sign in with Apple), the email address provided by Apple (possibly a private relay address), first name, chosen username, invite code, version and date of accepting the safety rules.
- Drives (on your phone): the full GPS track, speed and motion sensor readings (acceleration, g-forces) of every drive and the map areas you have uncovered. This stays on your phone and is not sent to our servers.
- Drives (on our servers): a summary of each drive (start and end time, distance, duration, top and average speed, g-forces, 0–100 km/h time, recording source) and a simplified route (up to 500 points), used for backup, stats and leaderboards.
- Friends: the people in your crew and pending invites, plus who joined with your code (for referral rewards).
- Live position: during a recorded drive, your approximate position and heading, visible to people in your crew (no speed). We don’t publish the first 500 m from where the drive started, the position disappears when the drive ends, and the server keeps only the latest one. Ghost Mode turns this off completely.
- Garage: cars you add (make, model, year) and which car each drive was in.
- Places: saved home, work and favourite destinations (a copy so they survive reinstalling). Recent searches stay on your phone only.
- Subscription: subscription status, plan and transaction identifiers (processed by Apple and RevenueCat). We never see your card details.
- Technical data: usage events (e.g. onboarding step completed, drive finished) with a pseudonymous account ID, device model, OS and app version, IP address; crash reports.
We do not collect the advertising identifier, do not track you across other apps and do not sell data.
4. Phone permissions
- Location: “While Using” is enough for manual recording, the map and navigation. “Always” is needed only to detect and record drives automatically in the background. You can turn it off in iOS Settings; the App keeps working in manual mode.
- Motion & Fitness: recognises that you are in a car and improves acceleration measurements.
- Notifications: drive start and end alerts.
- Contacts: the App does not read your contacts. You invite friends with a code or a link.
5. Purposes and legal bases
- Providing the service (Art. 6(1)(b) GDPR): account, recording and storing drives, stats, friends and leaderboards, navigation, saved places, subscription.
- Legitimate interests (Art. 6(1)(f) GDPR): finding and fixing bugs, security, abuse prevention, usage statistics to improve the App.
- Legal obligation (Art. 6(1)(c) GDPR): accounting and complaints, where they concern us.
6. What other users see
People in your crew see your username, first name and leaderboard totals (distance, driving time, number of drives, longest drive) for the selected week or month. During a drive they also see your approximate position on the map (beyond 500 m from the start), unless you turn on Ghost Mode (Account → Privacy). They do not see saved routes, speeds or places. Anyone who knows your username can send you a crew invite.
7. Who we share data with
We use providers that process data on our behalf:
- Clerk (sign-in and accounts), USA.
- Convex (database), servers in Ireland (EU), company in the USA.
- RevenueCat (subscriptions), USA.
- Apple (Sign in with Apple, App Store payments).
- PostHog (usage analytics), EU servers.
- Sentry (crash reports), EU servers.
- Stadia Maps (address search and routing): receives the text you type, your current position and the destination.
- Geoapify (nearby places such as fuel stations and parking): receives your approximate position.
- OpenFreeMap (base map): receives map tile requests and your IP address.
Transfers outside the European Economic Area (USA) rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
8. Retention
- Account, drive, friend, car and place data: until you delete your account.
- Live position: only the latest one, until the drive ends; positions without updates are deleted automatically after 30 minutes.
- Crash reports: up to 90 days.
- Usage statistics: up to 12 months, or earlier on request after account deletion.
- Data on your phone: until you delete the drive, your account or the App.
9. Deleting your account
Delete your account in the App: Account → Delete account. We then delete your profile, drives, friends, places and cars from our database, your sign-in account, your RevenueCat data and the data on your phone, and revoke the Sign in with Apple link. Cancel an App Store subscription separately in iOS Settings. Without the App: getroadz.app/en/delete-account.
10. Your rights
You have the right to access, rectify and erase your data, restrict processing, data portability and to object to processing based on legitimate interests. Email support@getroadz.app; we reply within 30 days. You may also lodge a complaint with a supervisory authority, in Poland the President of the Personal Data Protection Office (uodo.gov.pl).
11. Children
The App is intended for people aged 16 and over. We do not knowingly collect data from younger children.
12. Security
Connections are encrypted (HTTPS/TLS), sign-in credentials are kept in the iOS secure storage, and database access requires signing in.
13. Changes
We will announce material changes in the App and update the date at the top of this page.