Roaden

Privacy Policy

Last updated: 22 October 2026

Roaden (“Roaden”, “we”, “us”) is an app for recording your drives, driving together with friends in real time and sharing routes, photos and videos with other drivers. This policy explains what personal data we process when you use the Roaden app and its services, why we process it, who we share it with and the choices you have.

1. Who is responsible

Roaden is responsible for the personal data described in this policy. For any question or request about your data, write to roadenapp@gmail.com.

2. What we collect

Your account

• Your email address, your username and the date you joined.
• Your password, which we store only as a salted one-way hash (Argon2). We never see or keep the password itself.
• If you sign in with Apple or Google: an identifier for your account with that provider and the email address it shares with us. With Apple this can be a private relay address. We never receive your Apple or Google password.
• One-time codes we email you to confirm your address or change your password. They are stored only as a keyed hash and expire 15 minutes after they are sent.

Your profile and garage

• The profile picture you upload, and the cars you add to your garage, with the details and photos you enter.

Location and drives

• When you record a drive or take part in a trip, the app collects your device’s precise location: coordinates, time, speed, heading and accuracy.
• Recording continues in the background, for example when your screen locks, but only while a drive is being recorded. We do not collect your location when you are not recording or sharing a drive.
• From these points we calculate your drive statistics, such as distance, duration, speeds and acceleration times (for example 0–100 km/h).
• During a trip, your live position is shared with the other people on that trip.

What you share

• Hub posts, stories, photos and videos (with sound, if you record it), captions, comments, likes, saved posts, follows, clubs, events and replies to events, and the routes you publish.
• When you publish a route, the first and last part of it are hidden, so it does not show where you started or finished — usually your home.
• Reports you send us about content or people, and the people you block.

Messages

• Chat messages and the photos and videos you send in them, the messages you reply to, and the emoji reactions you add to messages. Messages are encrypted at rest on our servers. They are not end-to-end encrypted.
• When you last read each chat, so we can show unread counts and, if read receipts are on, show others in a direct chat that you have read their messages.
• Which chats you muted, and the chat settings you choose in Settings → Chats: whether notifications show message text, who can message you (everyone, people you follow or friends), read receipts and muting club and trip chats.

Notifications

• If you allow notifications, your iPhone gives the app a push token, an address Apple uses to reach that phone. We store it with the sign-in session it belongs to, together with your app version, and stop using it when you sign out on that phone, sign out everywhere or delete your account. If you turn notifications off in your iPhone’s settings, your phone stops showing them.
• Your notifications inbox: new followers, likes, comments, club and meetup activity, trips and results, and new sign-ins to your account. Each item stores who did it and what it is about, such as a post’s caption, a trip’s or meetup’s name, or the words of a comment.
• To show a notification, we send its title and text to the Apple Push Notification service, which delivers it to your phone. For a chat message this is the sender’s username, the chat’s name for club and trip chats, and the start of the message (up to 180 characters). If you turn off Settings → Chats → Show message text, notifications about messages only say who wrote, not what.

Device and technical data

• Your device platform and app version, your push token if you allow notifications, and your sign-in sessions (when each was created and last used).
• Like every internet service, our servers and hosting providers process technical information sent with each request, such as your IP address, to deliver the service and protect it from abuse (for example, rate limiting).

Camera, microphone and photos

• The app uses the camera, microphone or photo library only when you choose to take or pick a photo or video, and uploads only the items you choose. It asks for permission to add images to your photo library only to save the share cards you create.

Kept only on your phone

• Some choices never leave your phone: how chats look and behave (text size, background, gestures, data saver), your quick reaction emoji, your navigator and unit settings, whether the app tour has been shown, and your 0–100 km/h run history. Voice tips during a drive are spoken by your phone itself. Deleting the app removes these.
• Photos and videos in chats are loaded from our servers. Your phone may keep a temporary copy so they open faster; they are not added to your photo library unless you save them yourself.

Spotify

• If you connect Spotify to control music while you drive, the connection is stored only on your device, in its secure keychain, and the app talks to Spotify directly. We do not receive your Spotify credentials or listening history on our servers.

What we do not do

• We do not sell or rent your personal data.
• We do not show advertising, and we do not use third-party analytics or advertising tools.
• We do not track you across apps and websites owned by other companies.

3. Why we use it

• To provide Roaden — your account, recording drives, statistics, trips with live location, the Hub, chats and notifications. This is necessary to perform our agreement with you (the Terms of Use).
• To keep Roaden safe — confirming email addresses, preventing abuse and spam, reviewing reports and enforcing our Terms of Use. This is our legitimate interest in a safe service.
• To contact you — sending confirmation and password codes, telling you about new sign-ins to your account, and answering your support requests.
• To meet legal obligations — where the law requires us to keep or disclose information.

Location, camera, microphone, photo and notification access are only ever used with the permission you give in your device settings. You can withdraw it at any time; the features that need it will stop working until you allow it again.

4. Who can see what

• Other Roaden users can see your username, profile picture and main car, and what you publish in the Hub: posts, stories, comments, clubs, events and published routes.
• People on a trip with you can see your live location and the statistics of that trip.
• People in a chat with you can see the messages in that chat and how many people reacted with each emoji, but not who reacted. In a direct chat, the other person sees when you have read their messages, unless either of you turns read receipts off.
• Services you share to. When you share a card or a post through your phone’s share sheet or to Instagram Stories, it goes to that service and is handled under its own privacy policy.

5. Service providers

We use a small number of providers who process data on our behalf, only to run Roaden:

• Railway — hosting of our servers and database, in the European Union (the Netherlands).
• Cloudflare — our domain and network protection, and storage of photos and videos.
• Resend — sending our emails, such as confirmation codes.
• Apple and Google — sign-in, if you choose Sign in with Apple or Google.
• Apple Push Notification service — delivering notifications to your iPhone, if you allow them. Apple receives your push token and the notification’s title and text, as described above.
• Spotify — only if you connect it.
• Map provider — the map images in the app are loaded from a map provider (currently OpenFreeMap, using OpenStreetMap data). To draw the map, your device requests the area on screen from that provider, which receives your IP address and that area.

Some of these providers may process data outside your country, including in the United States. Where the law requires it, these transfers are protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

We may also disclose information when the law requires it, or when it is necessary to protect someone’s safety or rights.

6. How long we keep it

• We keep your data for as long as you have an account.
• Notifications in your inbox are deleted automatically 90 days after they were raised. We do not keep a copy of the pushes we send; Apple handles them under its own privacy policy.
• You can delete your account at any time in Settings → Delete account. Deletion is immediate and permanent. Your profile, sign-in details, sessions and push tokens, garage, posts, stories, comments, likes, reactions, chat settings, notifications, the messages you sent and every drive only you were on are deleted. Notifications about you in other people’s inboxes are deleted too.
• Trips you drove together with other people stay available to them, so their history is not rewritten. You appear there as “Deleted user”, with no link to your account. Reports you sent are kept without your name, so we can still act on them.
• Copies in our backups and logs are removed as they expire in the normal cycle.

7. Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, receive it in a portable format, object to or restrict how we use it, and withdraw consent you have given. You can edit your profile and delete your account directly in the app. For anything else, email roadenapp@gmail.com from the address on your account. We answer within one month.

If you are in the European Economic Area, the United Kingdom or Switzerland, you can also complain to your local data protection authority.

8. Security

All traffic between the app and our servers is encrypted (HTTPS), and so is the connection we use to send notifications to Apple. Passwords are hashed, chat messages are encrypted at rest, and your sign-in credentials are kept in your device’s secure storage. Notification text is shown on your lock screen, so turn off Show message text if other people can see your phone. No system is perfectly secure, but we work to protect your data and to limit what we collect.

9. Children

Roaden is not for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact roadenapp@gmail.com and we will delete it.

10. Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

11. Contact

Questions or requests about your privacy: roadenapp@gmail.com.