Privacy should be visible from the driver’s seat.

This policy explains how Roadsy handles information on this website and in the Roadsy Android app. Roadsy is in pre-release testing, so this policy will be reviewed before public distribution and whenever data practices materially change.

The short version

• Roadsy records exact route and motion data only to provide trip tracking, driving insights, sync, and features you choose to use.
• Exact trip data is written to encrypted local storage first.
• Signed-in users can sync private trip data to cloud services. Those records are restricted to the account owner.
• Public progress posts do not include exact route points or raw sensor samples.
• Family location, destination, ETA, and route sharing are off until you choose otherwise.
• Roadsy does not sell location data and does not use it for advertising.

Information the Android app may handle

Account information

If you create an account, Roadsy handles your email address, display name, handle, authentication state, and profile settings. Authentication is provided through Firebase Authentication. Roadsy does not receive or store your password.

Trip and sensor information

While a drive is being recorded, Roadsy may process precise location, timestamps, speed, bearing, altitude, location accuracy, GNSS quality, acceleration, gyroscope, orientation, phone-stability indicators, detected driving events, trip aggregates, and destination labels you enter. Some fields depend on what your device and Android version provide.

Community and family information

If you use social features, Roadsy handles profiles, friend and follow relationships, posts, selected statistics, kudos, comments, reports, challenges, achievements, and family-circle membership. Each family member controls their own sharing mode.

Diagnostics

Roadsy can create private, rotating, redacted diagnostic logs to help investigate failures. You control whether logs are shared and can clear them from the app. Passwords and identity tokens are not intentionally logged.

How information is used

Roadsy uses information to record and restore trips, calculate score breakdowns and confidence, show trip history and reports, award eligible progress, sync private records, operate community features, enforce sharing choices, protect accounts, diagnose failures, and meet legal obligations.

Passenger trips do not qualify for competitive systems. Unknown speed limits do not create scoring penalties. Roadsy does not reward top speed, speeding, fastest travel time, racing, or aggressive behavior.

Storage and service providers

Exact GPS and motion samples are stored in an encrypted local database. For signed-in users, private records may also be delivered in resumable chunks to Google Firebase and a Supabase tracking mirror. Firebase is the identity authority. Cloud providers process information under their own infrastructure and security terms.

The website is served through Cloudflare. Cloudflare may process ordinary network and security information such as IP address, request time, requested path, user agent, and abuse signals to deliver and protect the site. Article content will be provided by a dedicated Hygraph project once configured. The website does not currently run advertising or behavioral analytics scripts.

Sharing and disclosure

Roadsy shares information with service providers only as needed to operate the features described here, comply with law, protect users and the service, or complete a business transition with appropriate notice and safeguards. Roadsy does not sell precise location or driving behavior data.

Information you deliberately publish, such as a progress post or comment, may be visible to the audience you select. Do not include sensitive route details in free-form public text.

Your choices

You can use core local recording without creating a cloud account. Android permission settings control location and activity access. In Roadsy, you can correct passenger trips, choose route visibility, choose family sharing modes, clear diagnostics, export available records, sign out, leave a circle, block or report people, and request account deletion.

Account deletion is designed to remove the Roadsy account and associated cloud data. Some limited records may be retained when required for security, legal compliance, dispute handling, or reliable deletion processing. Local data can also remain on a device until the app data is cleared or the app is uninstalled.

Retention and security

Roadsy aims to retain information only as long as needed for the requested features, security, and legal obligations. Exact retention periods will be finalized before public launch. Security measures include encrypted local storage, Android Keystore protection for session material, owner-restricted cloud records, resumable chunk delivery, and server-side verification for the Supabase mirror. No system can guarantee absolute security.

Children

Roadsy is not directed to children under the minimum age required to consent to digital services in their jurisdiction. Family-circle features do not replace parental supervision or legal consent requirements.

International use and privacy rights

Service providers may process information in countries other than yours. Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing. Roadsy will respond to verified requests as required by applicable law.

Changes and contact

Material changes will be reflected by a new effective date and, when appropriate, an in-app or website notice. Questions, privacy requests, and concerns can be sent to privacy@roadsy.app. Security reports can be sent to security@roadsy.app.