Privacy Policy

Effective July 3, 2026

This Privacy Policy describes how Roadpulse ("we", "us") collects, uses, and shares information when you use our application and related services (the "Service"). Questions? Email privacy@roadpulse.app.

1. Information we collect

Account information: email address, password (stored as a salted hash), display name, optional username, avatar, and home state.
Location data: when you enable GPS or "Go live", we collect your approximate or precise location to show nearby cameras, hazards, and posts. Live location is only shared while you are broadcasting.
Content you post: photos, videos, comments, likes, follows, hazard reports, saved routes, and favorites.
Payment information: processed by our payment provider (Stripe). We store subscription status and the last four digits of your card, never full card numbers.
Device and usage data: browser type, IP address, referral source, pages viewed, and in-app events (for analytics and reliability).
Push tokens: if you enable route alerts, we store your browser's push subscription so we can notify you about hazards on your commute.

2. How we use information

Provide and improve the Service (maps, feed, alerts, live sessions).
Process subscriptions and referral payouts.
Send transactional emails (receipts, password resets, security alerts).
Detect abuse, enforce our Terms, and comply with legal obligations.
Understand how the Service is used to prioritize improvements.

3. Sharing

We do not sell personal information. We share limited data with:

Service providers — hosting (Cloudflare), database & auth (Supabase), payments (Stripe), maps (Google), email (Resend/Lovable), and analytics.
Other users — content you post publicly (feed posts, comments, profile) is visible to other users of the Service.
Legal requests — when required by law, subpoena, or to protect the safety of users.

4. Location precision

Free accounts see cameras and hazards within a 5-mile radius. Paid accounts unlock larger radii. Location is used for search and matching only; we do not build a persistent history of your movements beyond what you explicitly save (routes, favorites) or broadcast (live sessions).

5. Retention and account deletion

You can permanently delete your account at any time from Account → Danger zone → Delete my account. Deletion removes your profile, hazards, saved lanes, subscription record, media posts, comments, and follows immediately from the live Service. Encrypted backups are purged within 30 days.

Account data: kept until you delete your account (then purged from backups within 30 days).
Hazard reports: expire and are hidden after 2 hours; deleted from the active feed.
Live sessions: end automatically after 90 seconds of inactivity; ended sessions are retained for analytics for 30 days.
Payment records: retained as required by tax and financial regulations (typically 7 years) even after account deletion.
Moderation records (reports you submit or receive, block relationships): retained up to 12 months to enforce our Terms.

6. User-generated content, reports, and blocks

Hazards, media posts, comments, and public profiles are user-generated. You can report objectionable content or block abusive users from any card in the app; our moderation team reviews reports within 24 hours and removes content that violates our Terms. Manage blocked users at Account → Danger zone → Blocked users.

7. Your rights

Depending on where you live (including under GDPR and CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict processing of your personal data. To exercise these rights, email privacy@roadpulse.app. You can delete your account at any time from the Account page.

8. Children

Roadpulse is not directed to children under 13, and we do not knowingly collect data from them. If you believe we have collected data from a child, email privacy@roadpulse.app and we will delete it.

9. Security

We use industry-standard measures — TLS in transit, encryption at rest, row-level security in our database, and short-lived session tokens. No online service is 100% secure; report vulnerabilities to privacy@roadpulse.app.

10. International transfers

Our infrastructure is primarily hosted in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US.

11. Changes to this policy

We may update this policy. Material changes will be announced in-app or by email at least 7 days before they take effect.

12. Contact

Privacy questions or requests: privacy@roadpulse.app.

This page is maintained by the Roadpulse team and describes our current practices. It is not legal advice.