Privacy Policy
Konvoyage ("we," "us," or "our") operates the Konvoyage mobile application and the website at konvoyage.com. This Privacy Policy explains what information we collect, how we use it, and what choices you have.
By using Konvoyage, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.
1. Information We Collect
Information You Provide
- Google Account Information — When you sign in with Google, we receive and store your Google account ID, email address, and display name from Firebase Authentication.
- Display Name — When you join a trip, you enter a display name so other participants can identify you on the map. We do not require a real name.
- Email Address — Collected via Google Sign-In and/or if you sign up for early access or contact us.
- Trip Codes — When you create or join a trip, a 6-character code is generated and shared between participants.
Information Collected Automatically
- Precise Location Data — With your permission, we collect your device's precise GPS location while you are actively participating in a trip. This includes location data collected while the app is in the foreground and via a foreground service when your screen is off or the app is in the background. See Section 3 for full details.
- Device Identifier — We generate and store a unique device ID (UUID) to associate your device with your account and trip memberships.
- Push Notification Token — If you allow notifications, we collect your Firebase Cloud Messaging (FCM) token so we can send you push notifications (e.g., when someone joins your trip or sends a message).
- Device and Usage Information — We may collect basic device information (device type, operating system version) and usage data (trip duration, connection events) to maintain and improve the service.
Information Collected on Our Website
- Analytics Data — Our website (konvoyage.com) uses analytics tools that may collect standard web analytics data such as page views, referral sources, browser type, and IP address. See our Cookie Policy for details. The mobile app itself does not include analytics SDKs.
2. How We Use Your Information
We use the information we collect to:
- Provide real-time group navigation — Your location is shared with other participants in your trip so everyone can see each other on the map during navigation.
- Operate and maintain the service — Display names, trip codes, and location data are used to connect the right people to the right trip. Authorized Konvoyage personnel may access trip and location data through internal tools to monitor service health, troubleshoot issues, and provide support.
- Send push notifications — We use your FCM token to notify you when someone joins your trip or sends a chat message.
- Communicate with you — If you provide your email address, we may use it to send product updates, respond to inquiries, or notify you about the app launch.
- Improve the service — Aggregated, non-identifying usage data helps us understand how the app is used and where to focus improvements.
3. Location Data
Location data is central to how Konvoyage works. Here is exactly what we collect and why:
What We Collect
Precise GPS location (latitude and longitude) from your device, updated approximately every 2-3 seconds while you are moving, and less frequently when you are stationary.
When We Collect It
Location data is collected only while you are actively participating in a trip. This includes:
- While the app is open and visible (foreground)
- While the app is in the background or your screen is off, via an Android foreground service with a persistent notification. This is necessary so your trip companions can continue to see your location while you are driving and your screen turns off.
How It Is Used
Your location is transmitted in real time via WebSocket connection to our server, which relays it to other participants in the same trip. This is the core functionality of the app — letting friends see each other on the map during group navigation.
How Long It Is Stored
Real-time GPS coordinates (latitude, longitude, heading, speed) are broadcast to other trip participants in real time via our server. In addition, sampled location points (approximately every 10 seconds) are stored in our database to provide trip history and replay features. This stored location history is automatically deleted after 30 days.
Trip metadata (trip name, destination, who joined, when they joined or left, arrival times) and trip events (joins, departures, messages, arrivals) are stored in our database. See Section 5 for retention periods.
How to Stop Collection
You can stop location collection at any time by:
- Leaving the trip within the app
- Closing the app (which ends the foreground service)
- Revoking location permissions in your Android device settings
4. How We Share Your Information
With Trip Participants
Your display name and real-time location are shared with other people in the same trip. Only people who have the trip code can join a trip and see your location.
We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties. Period.
We Do Not Share with Advertisers
There are no ads in Konvoyage. We do not share your data with advertising networks or data brokers.
Service Providers
We use third-party service providers to help operate our service, including cloud hosting, analytics, and infrastructure providers. These providers may process data on our behalf in accordance with their own privacy policies. We only share what is necessary for them to perform their services.
- Cloud Hosting — Our backend server runs on a cloud hosting platform. Data passes through their infrastructure in transit and is stored in our database as described in Section 5.
- Mapping & Navigation — The app uses Google Maps and Navigation SDKs to render maps and provide turn-by-turn directions. Google may collect data as described in Google's Privacy Policy.
- Website Analytics — Our website uses analytics tools to understand how visitors interact with our site. These tools are not present in the mobile app. See our Cookie Policy for details.
Legal Requirements
We may disclose your information if required to do so by law or if we believe in good faith that such action is necessary to comply with a legal obligation, protect our rights or safety, or investigate potential violations.
5. Data Retention
- Location history (sampled GPS coordinates) — Stored in our database at approximately 10-second intervals during active trips. Automatically deleted 30 days after recording. Used for trip replay and history features.
- Trip metadata and events (name, code, destination, timestamps, member list, join/leave/arrival events, messages) — Stored in our database. Automatically deleted 30 days after the trip ends.
- Device records (device ID, display name, Google account ID, email) — Retained until you request account deletion.
- FCM push notification tokens — Retained until replaced by a new token from your device or until account deletion.
- Email addresses (early access signups) — Retained until you unsubscribe or request deletion.
- Website analytics — Retained according to the respective providers' data retention policies. See our Cookie Policy.
6. Third-Party Services
Konvoyage relies on third-party services to operate. Each has its own privacy policy governing data they collect:
- Google Maps & Navigation SDK — Provides map rendering, geocoding, and turn-by-turn navigation in the app. The Navigation SDK may automatically collect device metadata, IP address, crash diagnostics, and navigation usage data to maintain and improve Google services. Google Privacy Policy
- Firebase Authentication — Handles Google Sign-In and user authentication. Your Google account ID and email are processed through Firebase. Firebase Privacy Information
- Firebase Cloud Messaging — Delivers push notifications to your device. Your FCM token is processed through Firebase.
- Cloud Infrastructure — We use a cloud platform to host our backend server, API, and PostgreSQL database.
- Website Analytics — Our website uses analytics and tag management tools for visitor insights. These are not present in the mobile app. See our Cookie Policy for more information.
7. Children's Privacy
Konvoyage is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will promptly delete it.
8. Security
We take reasonable measures to protect your information, including:
- Authenticating users via Firebase Authentication with server-side ID token verification on every API request
- Transmitting location data over encrypted WebSocket connections (WSS/TLS)
- Using HTTPS for all web and API communication
- Minimizing data retention — location history and trip metadata are automatically deleted after 30 days
- Limiting access to trip data to authenticated trip participants via trip codes
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access — Request a copy of the personal information we hold about you.
- Deletion — You can delete your account and all associated data by using the account deletion feature in the app, or by contacting us at [email protected]. When you delete your account, we permanently remove your device records, Google account linkage, trip membership history, and associated location history.
- Opt Out — You can stop sharing your location at any time by leaving a trip or revoking location permissions. You can unsubscribe from emails at any time.
- Correction — Request correction of inaccurate personal information.
- Data Portability — Request your data in a portable format, where applicable.
For EU Residents (GDPR)
If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to access, rectification, erasure, data portability, restriction of processing, and the right to object to processing. Our legal basis for processing your data is your consent (for location data) and legitimate interest (for operating the service). To exercise these rights, contact us at [email protected].
For California Residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your personal information. We do not sell your personal information to anyone. To exercise these rights, contact us at [email protected].
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
10. Data Breach Notification
In the unlikely event of a data breach affecting your personal information, we will notify affected users within 72 hours via email (where available) and/or in-app notification.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. If we make material changes, we will make reasonable efforts to notify you (for example, via in-app notice or email if you have provided one).
Your continued use of Konvoyage after changes are posted constitutes your acceptance of the updated policy.
Please also review our Terms of Service and Cookie Policy, which govern your use of Konvoyage.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:
Email: [email protected]
Website: konvoyage.com