Privacy Policy
Last updated: August 2026
What we collect
- Location. Your GPS position while the app is open, and — only while you are recording a drive or are in an active convoy — while the app is in the background. Recording a drive saves the full route you drove.
- Your profile. Display name, vehicle make and model, profile photo, and an optional Instagram handle.
- Your activity in the app. Spots you claim, drives you record, points and badges you earn, friends and convoys, and articles you read.
- Technical data. Crash reports and anonymous usage events (which screens are opened, which features are used).
We do not collect your contacts, your calendar, or any health data.
How we use it
- To show you on the map and, if you join a convoy, to share your live position with the other members of that convoy — and with nobody else.
- To save your drives so you can view, re-live and share them.
- To run the app's features: claiming spots, points, leaderboards, friends.
- To fix crashes and improve the app, using anonymous technical data.
We never sell your data, and we never use your location for advertising.
Where it's stored, and for how long
Your data is stored with Supabase, on servers in the European Union. We are based in the UAE, so your information is transferred outside the UAE for storage — we rely on the contractual protections in our agreement with Supabase to keep it safe.
- Live convoy positions are kept only while the convoy is active and are deleted shortly after it ends.
- Recorded drives are kept until you delete them or delete your account.
- Profile and activity data are kept until you delete your account.
- Crash and usage data are kept for up to 12 months.
Sharing
- Other users see your display name, profile photo, vehicle, points and tier, and — inside a convoy — your live position. You can block any user, which makes you mutually invisible.
- Service providers who process data on our behalf: Supabase (accounts, database, files), Mapbox (maps — it may collect anonymised telemetry under its own policy), Sentry (crash reports), PostHog (anonymous usage analytics). Crash and analytics data carry a random user id and never your name, email, or GPS coordinates.
- Legal requests where we are required by UAE law to comply.
Your choices and your rights
Under the UAE Personal Data Protection Law you can access, correct, or delete your data, object to how we use it, and withdraw consent at any time.
- Delete everything: Profile → Delete account. This permanently erases your account, drives, claims, points and photos. It cannot be undone.
- Turn off location: in your device Settings. The app keeps working; live convoy sharing and drive recording stop.
- Turn off notifications: Settings → Off-road reminders, or in your device Settings.
- Ask us anything: support@offroadpal.app — we reply within 30 days.
Children
OffroadPal is not intended for anyone under 16 and we do not knowingly collect their data.
Safety
OffroadPal helps you plan and record off-road driving. It is not a substitute for your own judgement, local rules, or proper preparation. Emergency numbers shown in the app (999 / 998 / 997) connect you to UAE emergency services — the app does not contact them for you.
Changes
If we change this policy we will update the date above and, for significant changes, tell you in the app.
Contact
support@offroadpal.app · OffroadPal, Dubai, United Arab Emirates