Privacy Policy

Vroov ("we", "our", "the app") is a real-time group rally and road trip companion. This Privacy Policy explains what data we collect, how it is collected, how we use it, and your rights regarding that data. By creating an account or using the app, you consent to the data practices described in this policy.

Account Information — collected when you register and edit your profile:

• Email address and password (for authentication via Firebase Auth)
• First name, last name, and phone number
• Country (optional)
• Profile photo (optional, collected when you upload one via the camera or photo library)

Vehicle Information — collected when you add or edit vehicles in your garage:

• Car make, model, year, and color
• Car photos (optional, collected when you upload one via the camera or photo library)

Saved Route Information — collected when you save routes to your profile:

• Route title, description, and location (country and city, auto-detected from the route)
• Google Maps link and parsed route coordinates
• Route snapshot image (auto-generated map preview)
• Distance and estimated duration

Event Data — collected when administrators create events:

• Event title, location, dates, organizer name, description, and external event link
• Event cover photos (optional, collected when uploaded by an administrator)

Location Data — collected automatically while the app is in use and you have granted location permission:

• Real-time GPS coordinates, speed, heading, and acceleration data
• Background location updates (only if you enable this option in Settings)
• Trail/route data recorded during active group sessions

Group & Communication Data — collected when you create or join groups and interact with other members:

• Group names, invite codes, and membership information
• Chat messages (text), collected when you send a message
• Chat photos and voice notes, collected when you send media via the camera, photo library, or microphone
• Walkie-talkie voice transmissions — streamed live to group members via Agora and not recorded or stored. Only a temporary presence indicator (your display name) is stored while you are connected.
• Memory photos shared within groups, collected when you upload them
• Map alerts (e.g. hazard warnings) and next stop markers, collected when you post them
• Live spectator links — group owners can generate a shareable link that allows anyone (including non-app users) to view group members' real-time locations and trails on a web page. Spectator links are temporary and are automatically invalidated when the tour ends.

Offline Map Data — stored locally on your device:

• Downloaded map tile regions for offline use. This data is stored only on your device and is not transmitted to our servers.

Device Information — collected automatically:

• Push notification token (FCM token) for delivering notifications to your device

Usage Data — collected automatically as you use the app:

• Tour statistics (tours completed, messages sent, photos uploaded) used for achievement badges

Crash & Error Data — collected automatically via Firebase Crashlytics:

• Crash reports, stack traces, and error logs to help us identify and fix bugs
• Device model, operating system version, and app version at the time of the crash
• Your user ID (to correlate crashes with accounts for debugging purposes)

• Provide the service: Share your real-time location with your group members on the map, enable group chat, and deliver push notifications.
• Enhance your experience: Display your profile and vehicle to group members, track tour statistics, and award achievement badges.
• Safety features: Enable map alerts, next stop markers, and location sharing within your group during active tours.
• Live spectator mode: Allow group owners to share a web link so friends and family can follow the tour in real time. Spectator viewers can see member locations and trails but cannot interact with the group.
• Offline access: Allow you to download map regions for use in areas with poor or no network connectivity. Downloaded map data is stored locally on your device only.
• Content moderation: Chat messages are periodically and automatically reviewed using an automated content moderation service (OpenAI Moderation API) to detect violations of our Acceptable Use policy, such as illegal, violent, or harmful content. No messages are read by humans unless flagged by the automated system.

We do not sell, rent, or trade your personal data to third parties. We do not use your data for advertising, profiling, or marketing purposes. Your data is used solely to provide and improve the Vroov service.

Your data is shared only in the following circumstances:

• Your group members: Location, profile, vehicle info, and chat messages are visible to members of groups you voluntarily join.
• Spectator viewers: If a group owner enables live spectator mode, anyone with the spectate link can view group members' approximate locations and trail data on a web page. No authentication is required to view a spectate link. The link expires when the tour ends.
• Firebase (Google): We use Firebase for authentication, database, file storage, push notifications, and crash reporting (Crashlytics). Data is processed according to Google's Privacy Policy.
• Mapbox: We use Mapbox for map rendering and offline map tile downloads. Your approximate location may be processed by Mapbox according to their Privacy Policy.
• Agora: We use Agora for real-time walkie-talkie voice streaming between group members. Audio is transmitted live and is not recorded or stored by Agora or Vroov. Data is processed according to Agora's Privacy Policy.
• OpenAI: We use OpenAI's content moderation API to automatically review chat messages for safety policy violations. Only message text is sent for analysis; no personal identifiers are included. Data is processed according to OpenAI's Privacy Policy.

All third-party service providers we use are contractually required to protect your data with standards equivalent to or exceeding those described in this Privacy Policy and in compliance with applicable data protection regulations. We do not share your data with any other third parties, advertising networks, or analytics providers.

Your data is stored securely using Google Firebase infrastructure, which employs industry-standard encryption both in transit (TLS) and at rest. Authentication credentials are managed by Firebase Auth. Files (photos, voice notes) are stored in Firebase Cloud Storage. Real-time data (locations, chat) is stored in Firebase Realtime Database. We take reasonable technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.

We retain your data for as long as your account is active. Location data from active sessions is ephemeral and replaced each time you start a new session. Chat messages and shared media persist until you or a group admin deletes them. Tour history records are retained until you delete your account. Next stop markers are removed when the group owner clears them or when the group is closed.

Offline map data is stored locally on your device and can be deleted at any time from Settings > Offline Maps. This data is not stored on our servers.

When you delete your account, all your personal data is permanently removed, including your profile, vehicles, saved routes, chat messages, photos, voice notes, location data, trail data, alerts, and your Firebase Auth account. This deletion is immediate and irreversible.

You have the right to:

• Access your data: View your profile, vehicles, tour history, and group information within the app at any time.
• Modify your data: Edit your profile, vehicles, and privacy settings at any time through the app.
• Control visibility: Toggle whether your speed, phone number, country, and saved routes are visible to other users via Settings > Privacy.
• Withdraw consent: You may withdraw consent for data collection at any time by revoking permissions (location, camera, microphone, notifications) in your device settings, or by disabling background location updates within the app. Withdrawing permissions may limit certain features but will not affect the core functionality of your account.
• Request data deletion: You can permanently delete your account and all associated data at any time from Settings > Delete Account. Alternatively, you may contact us at info@vroov.app to request deletion.

Vroov uses your location to share your position with your group members on the map during active tours. Location data is collected only when you have granted permission and is shared only with members of your current group.

You can choose between "While Using the App" or "Always" (for background updates). You can change or revoke location permissions at any time through your device's Settings app. Disabling location access will prevent location sharing but the app will continue to function for chat, group management, and other features.

Camera and photo library access is used for taking and selecting profile photos, car photos, chat photos, and memory photos. Microphone access is used for recording voice messages in group chat and for walkie-talkie push-to-talk voice communication. Walkie-talkie audio is streamed live to your group members and is not recorded or stored by Vroov or Agora. These permissions are requested only when you initiate the relevant action, and you can revoke them at any time through your device's Settings app.

Vroov is not intended for use by children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@vroov.app so we can promptly remove it.

Your data may be processed and stored on servers located outside your country of residence, including in the United States, through our use of Google Firebase, Mapbox, and Agora services. These transfers are governed by the privacy policies of the respective service providers, which include appropriate safeguards for international data transfers.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. If we make material changes, we will notify you through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, your data, or wish to exercise any of your rights, contact us at:

info@vroov.app