Legal

Privacy Policy

Last updated: 14 October 2026 · Effective: 23 September 2026

CONVOY is a navigation and group-coordination app for riders. This policy explains what we collect, why, who we share it with, and the choices you have. The short version: we use account, ride and location data to provide the features you choose. Our map tiles and routing are self-hosted; we do not sell personal data or run advertising trackers.

Contents

Who we are
What we collect
Location data
How we use it
How it's shared
Website and local storage
What we don't do
Retention
Security
Your rights
Children
Changes
Contact

1. Who we are

CONVOY (“we”, “us”, or “our”) is operated by SHARED VECTOR TECHNOLOGIES PTE. LTD., a Singapore company. The company is responsible for personal data handled by the service under Singapore's Personal Data Protection Act 2012 (PDPA). For privacy questions and requests, contact our Data Protection Officer (DPO) at admin@convoy.com.sg.

2. Information we collect

We collect the following, and only for the purposes described in this policy:

Account information

Your email address, a password (stored as a salted hash), your display name, and a default vehicle type. You provide these when you create an account.

For email verification and recovery, we process your email address, verification status, one-time code hashes, request times and delivery attempts. Verification codes expire after 15 minutes. The app remembers on your device whether you have signed in before so it can choose the initial account screen; this does not identify you across other apps or devices.

Ride and crew activity

The rides you create or join, ride join codes, who is in a ride with you, the messages you send in a ride's chat, crew signals you send or receive (regroup, slow down, SOS), the road reports you make (what you reported, where and when, and the direction you were travelling in), and the summary of a completed ride (distance travelled, duration, date, and crew). This data exists so a convoy can coordinate and so you can see your ride history.

Location data

Precise device location for map and navigation features and while you are in a ride. See Section 3 for the detail, because it is the most sensitive thing we handle.

When you search or plan a route, we process your search terms, chosen places, route points and coordinates used to centre or bias results. Recent destinations and places you save as Home or Work are stored on your device for your convenience.

Voice audio (only if you enable voice)

When voice is available and you enable it, your microphone audio is streamed to other members of your ride through the voice server while your microphone is unmuted. Voice recording is not enabled in the application. Joining a crew call starts with your microphone muted. Calls can remain connected while you use another screen or lock your phone, until you leave the call or ride, sign out, or the connection ends.

Device and technical information

Basic technical data needed to run and secure the service: app version, device model and operating system, and your IP address (seen by our servers in standard connection logs). If you turn on push notifications, we store a push token so we can deliver ride alerts to your device.

If you choose to scan a crew QR code, the app uses your camera to read the code. We do not upload the camera image for that feature.

3. Location data in detail

CONVOY uses your precise GPS location to place you on the live crew map, draw your heading, follow your route, and measure how far you rode.

Foreground and background. So your crew can still see you when your screen is off or another app is open during a ride, CONVOY collects location in the background while a ride is active. Android shows a foreground-service notification and iOS shows its system location indicator when background location is active.
During a ride, with permission. Sharing starts after you open a ride and grant location permission. Leaving the ride or signing out stops sharing. When the service marks a ride ended or expired, it rejects new location updates. Opening navigation or search can also use your position on your device to centre the map and find nearby destinations.
Shared with your crew. Your live position, heading, and vehicle are visible to the current members of the ride you are in. A road report you make is shown to them too, with its place and the direction you were travelling in. Nearby discovery shows other signed-in riders an approximate presence rounded to a grid of about half a kilometre, without your name or account ID. Authorised operators can access live ride information for support and moderation.
You're in control. You can revoke location permission at any time in your device settings. Without it, live tracking and navigation will not work, but the rest of the app still runs.

4. How we use your information

To provide the service: accounts, live crew tracking, routing and navigation, ride chat, and crew signals.
To show route previews, parking, weather and road reports, and search for destinations you type (see geocoding in Section 5).
To deliver safety and camera alerts along your route.
To keep the service secure, for example by rate-limiting sign-in and write requests to prevent abuse.
To respond to your support requests.
To meet legal obligations or respond to lawful requests.

We explain our purposes when collecting personal data and obtain consent where required by the PDPA, or rely on a permitted exception. Optional location, microphone and notification features have separate device controls. You can contact us to withdraw consent; we will explain how this affects the features you use (see Your rights).

We do not sell or rent your personal data. We share it only as follows:

Other members of your ride see your display name, vehicle, live location, crew signals, road reports, and chat messages, as described above.
App infrastructure (DigitalOcean). Our backend, database and map stack run on DigitalOcean infrastructure in the Singapore region. DigitalOcean hosts data for us.
Maps and routing. Map tiles, styling, and route calculation run on infrastructure managed for CONVOY. Search has a separate fallback described below.
Destination search (geocoding). Our own geocoder and locally hosted business catalogue handle searches; Overture does not receive live queries from that catalogue. If OneMap access is configured, we also send expanded search text to Singapore's OneMap service to return address results. If a public Photon fallback is configured and the primary geocoder is unavailable, search text, search boundary and coordinates used to bias results can be sent to that service. Reverse lookups send selected coordinates to the configured geocoder. These requests do not include account credentials or your ride roster.
Push notifications (when enabled). If you opt in to notifications, delivery uses Expo's push service, followed by Apple Push Notification service on iOS or Firebase Cloud Messaging on Android. Your push token and the notification payload pass through these providers to reach your device.
Crew calls (LiveKit). When you join a call, LiveKit transports microphone audio and call connection information for the members of that ride. CONVOY does not enable call recording. Microphone audio is sent only while you are unmuted.
Crash and diagnostic reports. When the CONVOY app from the App Store or Google Play crashes, freezes or stops responding, it sends a crash report to Sentry (sentry.io), our crash reporting service, so we can find and fix the fault. A report holds what went wrong in the app, the app's version and the kind of phone and system it ran on. It does not hold your location, routes, destinations, searches, name, email, phone number, ride codes, crew or account, and it is not linked to you. It is not used for advertising or tracking.
Legal and safety. We may disclose information where required by law, to enforce our Terms, or to protect the rights, safety, and property of our users or the public.

Account email and support (Google Workspace). We use our Google-hosted admin@convoy.com.sg mailbox for support and, when account email is enabled, verification and password recovery. Google processes recipient addresses, email content and delivery metadata. Transactional email is not a marketing subscription. Providers may process information outside Singapore; overseas transfers are subject to the protections required by applicable law.

6. Website and local storage

Vercel hosts convoy.com.sg and may process your IP address, browser information and request logs when you visit. Pages load fonts from Google Fonts, so your browser connects to Google when requesting them. We do not place advertising cookies or load advertising analytics on the website. The account help page lets you request deletion by email if you cannot use the app. It does not ask for your password. Password recovery happens in the app. The app stores session details, preferences, recent destinations and saved Home or Work places on your device. You can remove saved places in the app and remove local app data by uninstalling the app.

7. What we don't do

We don't sell or rent your personal data.
We don't run advertising networks or ad-tracking SDKs.
We don't load third-party analytics that profile you across apps.
We don't use your location for advertising.
Our map tiles and routing are self-hosted and do not include advertising trackers.

8. How long we keep it

Account and ride records remain available for history and recaps while your account is active. The service keeps each rider's latest location, rather than a complete GPS trail. An hourly cleanup removes precise location records after a ride has been ended for 24 hours, preserving aggregate distance. A road report keeps the place it was made at, and the direction you were travelling in, for as long as its ride record is kept. Transient realtime messages are removed after one hour; account email and notification delivery records in the application database are removed after seven days. Expired code hashes are removed after a further day. Copies of transactional and support emails in Google Workspace have a separate mailbox retention policy; contact us for deletion or retention questions. Account deletion removes your profile, credentials, messages, location records and membership records from the active database. Shared ride summaries may remain without your account. Backup copies and infrastructure logs may persist after deletion and may be needed for security, recovery or legal purposes. We must stop retaining personal data when no longer needed for legal or business purposes. Contact us for details of current backup and log retention practices; we are finalising their documented schedules before public launch.

9. How we protect it

All traffic between the app and our servers is encrypted in transit (HTTPS/WSS). Passwords are stored as salted hashes. Access to our infrastructure is restricted. No system is perfectly secure, and CONVOY is an evolving product. We work to protect your data but cannot guarantee absolute security. If we become aware of a breach affecting your data, we will act in line with our legal obligations.

10. Your rights and choices

Subject to applicable law, you can:

Access the personal data we hold about you.
Correct inaccurate data by contacting us; device preferences can be changed in Settings.
Delete your account through our account-deletion service, subject to the retention details above and applicable law.
Withdraw consent to processing, including by revoking location permission or deleting your account.

Delete your account from Settings, Account and security in the app. If you cannot access the app, use the account help page to request deletion by email. The in-app action requires password confirmation. For other requests, email admin@convoy.com.sg. We may need to verify your identity before acting on a request. We will explain any applicable exception and the consequences of withdrawing consent, including features that can no longer operate. You can also complain to Singapore's Personal Data Protection Commission (PDPC) or your local data-protection authority.

11. Children

CONVOY is not directed at children under 13. We do not knowingly allow an account for a child under 13. If you believe a child has provided us personal data, contact us so we can investigate and take appropriate steps, including deletion where required.

12. Changes to this policy

We may update this policy as the app evolves. When we make a material change, we will update the date at the top and, where appropriate, notify you in the app. We will seek additional consent where required before using your information for a new purpose.

13. Contact us

Questions, requests or complaints about privacy: admin@convoy.com.sg, the public DPO contact for SHARED VECTOR TECHNOLOGIES PTE. LTD. Website: convoy.com.sg.