Convoy Privacy Policy

This Privacy Policy explains how Convoy handles information when you use the app.

Overview

Convoy shares your live location with a small crew for the length of one trip, and keeps a garage: your vehicles, their service records, and the invoices behind them.

Convoy requires an FCT account. Your trips and garage are stored on your device and in your own private space on servers FCT Technologies LLC operates, so they follow you to every device you sign in on. We are telling you this plainly because it is the part that matters: Convoy is not a device-only app.

Location, and how long it lasts

This is the part of Convoy worth reading carefully.

• Sharing is trip-scoped by construction. It begins when a convoy starts and ends when the trip ends, when you leave it, or when it is ended for everyone. There is no standing tracker and no setting that makes one.
• Who sees it. Only the members of the convoy you started or joined. Nobody else, including anyone in a different convoy.
• How it reaches them. Through Convoy’s own real-time relay, which holds each member’s latest position for five minutes and keeps no location history. A convoy record itself expires after 24 hours.
• What is kept. Your own route for a trip is saved with that trip’s summary in your account. Convoy stores your own track only: it never saves another rider’s route to your account.
• The system’s own indicator. Convoy uses iOS’s background activity session, so the operating system’s own location indicator stays honest about when tracking is running and stops with the trip.
• Your identity inside a convoy is a per-device pseudonym, and it is deliberately never put on the wire to your account. Neither the real-time relay nor another rider is handed a value that maps back to your FCT account.

What Convoy stores in your account

When you are signed in, the following sync to your own private, access-controlled space and are scoped to your account:

• Your profile: display name, colour, and vehicle type.
• Your trips: name, destination, timings, the crew who took part, the stops broadcast during them, and your own route.
• Anyone you have blocked.
• Your garage: vehicles, service records and their line items, odometer readings, and the photo of any service invoice you scanned.

Access is enforced per account at the database level. FCT Technologies LLC does not sell your data, does not share it with advertisers, and does not use it to train models.

What stays on your device only

• Your app settings, including your fell-behind threshold and appearance choices.
• Live positions of other riders during a convoy, which are shown and discarded rather than stored.
• The Spotlight index that lets you and Siri find a trip or a vehicle on that device.

Reading a scan

Convoy can read a service invoice or a dashboard warning light with the camera. That reading happens entirely on your device, using Apple’s text recognition and on-device foundation models: Convoy holds no Private Cloud Compute entitlement, so no part of that reading can leave the device even in principle. The service record it produces, and the invoice image itself, are then stored in your account like any other garage record.

Analytics and tracking

Convoy contains no third-party analytics SDK, no advertising identifiers, no behavioral profiling, and no cross-app tracking. Nothing about you is shared with another company.

Convoy does report anonymous diagnostics to FCT: crash and performance data, a short trail of screen and action names (never content) leading up to a problem, feature-use counts, and timing measurements such as how long setup took. Screen and action names are fixed values built into the app, so nothing you type, view, or store can appear in them.

Diagnostics are keyed to a random install identifier created on first launch. They are not linked to your account or identity, the diagnostics system has no connection to account data by construction, and reinstalling the app starts a new identifier. We use diagnostics to fix crashes and improve the app, and for nothing else.

Deleting your account erases everything in it (see Deleting your data), but not these: nothing marks which diagnostics are yours, so none can be singled out, not by us, and not on request. They expire on a fixed schedule instead: 180 days for usage metrics and counters, 400 days for crash diagnostics, enforced by a daily job.

Permissions

Each is requested at the moment it becomes useful, never at launch.

• Location, while using the app: to share your position with your crew during an active convoy, on the terms above. Convoy does not ask for always-on location.
• Precise location: asked for the duration of a trip only, because the gaps between riders are the product; a convoy still works without it, less precisely.
• Camera: to scan a service invoice or a warning light. Scans are read on this device and saved to your garage.
• Notifications: for fell-behind alerts, stop broadcasts, and convoy invitations.

Deleting your data

Convoy gives you two separate, clearly labelled options in Settings:

• Delete Convoy’s data: erases everything Convoy holds, trips and garage alike, on our servers and on your devices, and leaves your FCT account and any other FCT apps intact.
• Delete your account: erases your FCT account and all of its data everywhere, across every FCT app.

Signing out clears Convoy’s copy from that device; your account keeps it, and signing back in restores it. The clear runs only once everything on that device has finished syncing.

Children

Convoy is a general-audience travel utility. Its only shared content is live position and stop broadcasts within a convoy you joined, for the length of that trip.

Safety

Convoy has no speed-based gamification anywhere in the product, and that is a deliberate line rather than a missing feature: the app is used while driving, and rewarding speed is not something we are willing to build.

Security

We use reasonable technical and organizational measures designed to protect information. No system is perfectly secure.

If a breach happens, this is what we do. Where a personal-data breach is likely to result in a risk to your rights and freedoms, we notify the relevant supervisory authority within 72 hours of becoming aware of it. Where the risk to you is high, we notify you without undue delay, describing what happened, what data was involved, what we are doing about it, and what you can do. We keep a record of every breach and its handling whether or not it is notifiable.

We hold the whole app fleet to this single deadline deliberately: it is the strictest one that applies to us, so meeting it satisfies the others rather than requiring separate timetables to be tracked and one of them to be missed.

International users

FCT Technologies LLC is based in the United States. If you use Convoy outside the United States, your information may be processed in the United States or in other locations where our service providers operate.

Contact

Questions about this policy:

FCT Technologies LLC
[email protected], and we respond within 5 business days