Convoy — Privacy Policy

Last updated: 23 August 2026

Convoy is a game for drivers. You record a drive, and the roads you covered decide which map zones you claim. That means the app necessarily handles location data, and this page explains exactly what it keeps, why, and how to get rid of it.

Who we are

Convoy is operated by Ali Guliyev. For anything in this policy, contact hi.bassied@gmail.com.

What we collect

Data	When	Why
Precise location — a series of GPS coordinates with timestamps, recorded while a drive is running, including when the app is in the background	Only between you starting and ending a drive	It is the game. The path decides which zones you claimed and how far you drove. It is also re-checked on our servers to detect faked drives.
Email address	If you create an account with email and password	Signing in, and password resets. Guest accounts have no email.
Display name, and a profile photo URL if you set one	At sign-up	Shown to other players on leaderboards and on zones you own.
Car details — make, model, year, and optionally a nickname, colour and description	Only if you add a car	Shown on your profile, and to others according to the visibility you choose.
Game data — zones, coin balance, transactions, friends, challenge progress	As you play	Running the game and its leaderboards.
Reports and blocks — who you reported or blocked, the reason you picked, and any note you wrote	Only if you report or block another player	Reviewing reports and keeping blocked players out of your leaderboards. A report names another person, so it is kept even after you delete your account — otherwise anyone could erase a report by leaving. Your block list is deleted with your account.
Account identifier	At sign-up	Ties the above to you.

What we deliberately do not collect

Speed. Nothing in Convoy records, stores, scores or displays how fast you drove. Speed is derived momentarily on our servers to reject physically impossible drives, and on your device to lock the screen while the car is moving; it is never written to your account and never shown to anyone. The app is built so that driving faster cannot win you anything.
Vehicle registration or number plates. There is no field for one anywhere, and our database rejects any attempt to store one.
Advertising and tracking data. No advertising SDKs, no data brokers, no cross-app or cross-site tracking, no profiles sold or shared.
Contacts, photos, microphone or health data.

Sharing a Route Card

You can generate an image of a finished drive and share it. Two things are true of that image by design: it never shows any speed, and the first and last 250 metres of your route are cut off it, so a card cannot point at where you set off or finished. The image is created on your device and goes nowhere until you choose an app to send it to.

Who else processes your data

We use Google Firebase — Authentication, Cloud Firestore and Cloud Functions — to store data and run the game. Data is held in Google's europe-west1 region. Google acts as our processor; see Firebase privacy.

Maps are rendered by the Google Maps SDK, which receives the coordinates needed to draw the map you are looking at. See Google's privacy policy.

We do not sell your data, and we do not share it for advertising.

Why we are allowed to hold it

We process the data above to give you the game you asked for — you cannot claim a zone without the app knowing where you drove. Where the law calls that a legal basis, ours is the performance of our agreement with you. Reports and the anti-cheat checks rest instead on our legitimate interest in keeping the game usable and fair for other players.

Data is stored in the EU, but Google may process it elsewhere as our provider under its own safeguards; see the Firebase link above.

How long we keep it

Your drives, profile and game data are kept while your account exists, because zone ownership decays over time and is recalculated from your recent driving. When you delete your account they are removed as described below.

Deleting your account

In the app: Profile → Delete my account. It is immediate and cannot be undone. It deletes:

every drive you have recorded, including the full GPS path;
your profile, your car, your challenge progress and your coin balance;
your friends list, your pending friend requests, and your entry on other players' friends lists;
your sign-in credentials.

Zones you owned are released so other players can claim them. Entries in the coin ledger that involve another player are kept, because they are that player's record of coins they earned — but your name is removed from them.

Your rights

You can access and correct your profile and car in the app, and delete everything as above. Depending on where you live you may have further rights over your personal data, including a copy of it or a restriction on its use. Write to hi.bassied@gmail.com and we will respond within one month. You do not have to pay, and you do not have to give a reason.

If you are unhappy with how we handled it, you can complain to your national data protection authority.

Children

Convoy is intended for licensed drivers and is not directed at children. We do not knowingly collect data from children.

Changes

If this policy changes we will update the date at the top of this page. If the change is a material one — new data collected, or an existing use widened — we will say so here rather than quietly editing the text.