This page is a working draft, not yet reviewed by a qualified lawyer — it is not legal advice and shouldn't be relied on. Some details (company entity, contact address, governing law) are still placeholders. Questions in the meantime: contact Support.
PRIVACY NOTICE
This notice explains what Rovaro does with your data. Short version: your profile lives on your phone, your live location is shared only with your convoy while you're in one, and we don't sell data or run ads.
1. Data stored on your device
Your profile (driver name, colours, vehicle, car name), drive memories, map pins and photos you take are stored locally on your phone. You can erase all of it at any time with "Clear local data" in Settings. If you turn on "Back up profile", a copy of your profile is stored on our server, retrievable only with your friend code plus the recovery code shown once at backup time (we store only a hash of it).
2. Live location
While you are in a live convoy, your position, heading, speed and ETA are sent to our convoy server about once per second and shared with the members of that convoy only. When you leave the convoy (or close the app), sharing stops. Recent positions are kept only as long as needed to run the convoy session. Separately, if you use Friends, your approximate position and last-seen time are shared with the friends you added (by exchanging codes) while the app is open — turn this off any time with "Share presence with friends" in Settings.
3. Content you share
Convoy chat messages, hazard pins (including SOS), and photos you share are visible to your convoy and stored on our server for the session. Direct messages with friends are stored on our server and visible only to the two of you; removing a friend ends both message access and map presence in both directions. Routes you publish to the public library (name, stops, your driver name) and lap times you set at approved tracks (lap time, driver name, car) are public to other users until you delete them (routes) or until removed.
4. Voice
Push-to-talk audio is relayed live to your convoy via our voice provider and is not recorded or stored.
5. Track mode and geofences
The app checks your position against a built-in list of approved venues on your device. Nothing is sent anywhere for that check; only completed lap times are uploaded, and only while you are at an approved venue.
6. Third parties we rely on
Mapbox (map tiles, search, routing — receives map queries and route coordinates), LiveKit (live voice relay), and our hosting provider (runs the convoy server and database). We do not sell your data and we do not show ads. AI features (car identification, drive planning) send only the photo or text you submit, to generate the result.
7. Your choices
Location permission is optional but required for live convoy and track features. You can leave a convoy at any time, delete routes you published, clear all local data in Settings, and revoke permissions in your phone's settings.
8. Reporting and blocking
If someone's behaviour in a convoy — voice, chat or otherwise — is a problem, you can report or block them directly from their profile card in the app. Blocking immediately hides their position, messages and voice from you; reports go to the Rovaro team for review.
9. Age requirement
Rovaro is for drivers aged 17 and over. This is enforced at signup, and the data above is collected on that basis — we do not knowingly collect data from anyone under 17.
10. Your rights (UK GDPR)
For anyone in the UK/EEA, we process your data as described above under GDPR. You have the right to access the data we hold about you, receive a copy of it in a portable format, ask us to correct or erase it, and object to or restrict certain processing. Most of this you can already do yourself in Settings (export isn't yet self-serve — request it via Contact below); for server-side content such as lap times or a backed-up profile, contact us and we'll action the request. You can also complain to the ICO (ico.org.uk) if you think we've got something wrong.
11. Contact
Data controller: [COMPANY]. Questions or requests (including access, portability, correction, or deletion of server-side content such as lap times): [CONTACT EMAIL].