Legal

Privacy Policy

Last updated: 11 September 2026 · Effective: 11 September 2026

CONVOY is a navigation and group-coordination app for riders. This policy explains what we collect, why, who we share it with, and the choices you have. The short version: we collect only what the app needs to put your crew on one map, our tiles and routing are self-hosted, and we never sell your data or load advertising trackers.

Contents

Who we are
What we collect
Location data
How we use it
How it's shared
What we don't do
Retention
Security
Your rights
Children
Changes
Contact

1. Who we are

CONVOY (“CONVOY”, “we”, “us”, or “our”) is operated by CONVOY, based in Singapore. We are the data controller responsible for your information under Singapore's Personal Data Protection Act (PDPA) and, where it applies to you, comparable data-protection laws. For any privacy question or request, contact us at admin@convoy.com.sg.

2. Information we collect

We collect the following, and only for the purposes described in this policy:

Account information

Your email address, a password (stored as a salted hash), your display name, and a default vehicle type. You provide these when you create an account.

Ride and crew activity

The rides you create or join, ride join codes, who is in a ride with you, the messages you send in a ride's chat, crew signals you send or receive (regroup, slow down, SOS), and the summary of a completed ride (distance travelled, duration, date, and crew). This data exists so a convoy can coordinate and so you can see your ride history.

Location data

Precise device location while you are in a ride — see Section 3 for the detail, because it is the most sensitive thing we handle.

Voice audio (only if you enable voice)

When voice is available and you enable it, your microphone audio is streamed to other members of your ride through the voice server while your microphone is unmuted. Voice recording is not enabled in the application. Joining a crew call starts with your microphone muted. Calls can remain connected while you use another screen or lock your phone, until you leave the call or ride, sign out, or the connection ends.

Device and technical information

Basic technical data needed to run and secure the service: app version, device model and operating system, and your IP address (seen by our servers in standard connection logs). If you turn on push notifications, we store a push token so we can deliver ride alerts to your device.

3. Location data — the detail

CONVOY uses your precise GPS location to place you on the live crew map, draw your heading, follow your route, and measure how far you rode.

Foreground and background. So your crew can still see you when your screen is off or another app is open during a ride, CONVOY collects location in the background while a ride is active. Your device shows a persistent indicator when this is happening.
During a ride, with permission. Sharing starts after you open a ride and grant location permission. Leaving the ride or signing out stops sharing. When the service marks a ride ended or expired, it rejects new location updates. Opening navigation or search can also use your position on your device to centre the map and find nearby destinations.
Shared with your crew. Your live position, heading, and vehicle are visible to the current members of the ride you are in. Nearby discovery shows other signed-in riders an approximate presence rounded to a grid of about half a kilometre, without your name or account ID. Authorised operators can access live ride information for support and moderation.
You're in control. You can revoke location permission at any time in your device settings. Without it, live tracking and navigation will not work, but the rest of the app still runs.

4. How we use your information

To provide the service: accounts, live crew tracking, routing and navigation, ride chat, and crew signals.
To show route previews and search for destinations you type (see geocoding in Section 5).
To deliver safety and camera alerts along your route.
To keep the service secure — for example, rate-limiting sign-in and write requests to prevent abuse.
To respond to your support requests.
To meet legal obligations or respond to lawful requests.

Our legal basis under the PDPA is your consent, which you give by creating an account and using the app; where other laws apply, we also rely on the necessity of processing to deliver a service you asked for. You can withdraw consent at any time (see Your rights).

We do not sell or rent your personal data. We share it only as follows:

Other members of your ride see your display name, vehicle, live location, crew signals, and chat messages, as described above.
Hosting (DigitalOcean). Our backend, database, and map stack run on a server hosted by DigitalOcean in the Singapore region. They process data on our behalf as a sub-processor.
Maps and routing. Map tiles, styling, and route calculation run on infrastructure managed for CONVOY. Search has a separate fallback described below.
Destination search (geocoding). Searching for a place is normally handled by our own self-hosted geocoder and a locally hosted business catalogue. Overture receives no live search queries from this catalogue. If a public Photon fallback is configured and the primary is unavailable, your search text, search boundary, and the coordinates used to bias the search can be sent to that third-party service. Reverse lookups send the selected coordinates. Account credentials and your ride roster are not included in those requests.
Push notifications (when enabled). If you opt in to notifications, delivery uses Expo's push service, followed by Apple Push Notification service on iOS or Firebase Cloud Messaging on Android. Your push token and the notification payload pass through these providers to reach your device.
Crew calls (LiveKit). When you join a call, LiveKit transports microphone audio and call connection information for the members of that ride. CONVOY does not enable call recording. Microphone audio is sent only while you are unmuted.
Diagnostics (when enabled). Builds configured with Sentry can send crash reports, performance traces and technical device information to Sentry to help diagnose faults. This is not advertising tracking. The exact store build's diagnostics configuration is included in its privacy disclosures.
Legal and safety. We may disclose information where required by law, to enforce our Terms, or to protect the rights, safety, and property of our users or the public.

6. What we don't do

We don't sell or rent your personal data.
We don't run advertising networks or ad-tracking SDKs.
We don't load third-party analytics that profile you across apps.
We don't use your location for anything other than the ride features described here.
Our maps carry zero third-party trackers — tiles and routing are our own.

7. How long we keep it

Account and ride records remain available for history and recaps while your account is active. The service keeps each rider's latest location, rather than a complete GPS trail. An hourly cleanup removes precise location records after a ride has been ended for 24 hours, preserving aggregate distance. Transient realtime messages are removed after one hour; account email and notification delivery records are removed after seven days. Account deletion removes your profile, credentials, messages, location records, and membership records from the active database. Shared ride summaries may remain without your account. Backups and infrastructure logs have separate retention schedules that must be finalised before public launch.

8. How we protect it

All traffic between the app and our servers is encrypted in transit (HTTPS/WSS). Passwords are stored as salted hashes. Access to our infrastructure is restricted. No system is perfectly secure, and CONVOY is an evolving product — we work to protect your data but cannot guarantee absolute security. If we become aware of a breach affecting your data, we will act in line with our legal obligations.

9. Your rights and choices

Subject to applicable law, you can:

Access the personal data we hold about you.
Correct inaccurate data — much of it is editable in the app's settings.
Delete your account and associated personal data.
Withdraw consent to processing, including by revoking location permission or deleting your account.

Delete your account from Settings, Account in the app or the account page. Password confirmation is required. For other requests, email admin@convoy.com.sg. We may need to verify your identity before acting on a request. You also have the right to complain to Singapore's Personal Data Protection Commission (PDPC) or your local data-protection authority.

10. Children

CONVOY is intended for licensed riders and is not directed at children. We do not knowingly collect personal data from anyone under the age required to hold a valid riding licence in their jurisdiction (and in no case under 13). If you believe a child has provided us data, contact us and we will remove it.

11. Changes to this policy

We may update this policy as the app evolves. When we make a material change, we will update the date at the top and, where appropriate, notify you in the app. Continuing to use CONVOY after a change means you accept the updated policy.

12. Contact us

Questions, requests, or complaints about privacy: admin@convoy.com.sg, operated by CONVOY, Singapore.