Convoy Support

Only the crew in the convoy you started or joined, and only while that convoy is running. Your position reaches them through Convoy's own real-time server, which holds each member's latest position for five minutes and keeps no location history; a convoy record itself expires after 24 hours. Sharing stops when the trip ends, when you leave, or when the convoy is ended for everyone.

No. Location is session-scoped by construction: there is no standing tracker to forget about. Convoy uses the system's background activity session, so iOS's own indicator stays honest about when tracking is running, and it stops with the trip.

Your profile, your trips and their members and stops, your own route for each trip, and your garage: vehicles, service records, line items and odometer readings, plus the photos of any service invoice you scanned. Convoy stores your own track only: it never saves anyone else's route to your account.

The reading does not. A scanned invoice or a dashboard warning light is recognised on your device by Apple's text recognition and on-device foundation models; Convoy has no Private Cloud Compute entitlement, so no part of that reading can leave the device. The service record it produces, and the invoice image itself, are then stored in your account like any other garage record.

There is no third-party analytics SDK, no advertising identifier and no cross-app tracking. Convoy does report anonymous diagnostics to FCT, crash and performance data, a trail of screen and action names (never content), and feature-use counts, keyed to a random install identifier that is joined to no account and carries nothing you typed, viewed or stored.