Privacy Policy

1. Introduction

Vamio ("we", "our", "us") operates the Vamio mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

2. Lawful Basis for Processing

We process your personal data based on your consent, which you provide by creating an account and using the App. For location data specifically, you provide consent by granting location permission on your device and joining a drive. You may withdraw consent at any time by revoking location permissions, leaving a drive, or deleting your account.

3. Information We Collect

We collect the following information to provide our service:

• Account Information: Your name, email address, and profile photo provided through Apple Sign-In or Google Sign-In.
• Location Data: Your precise (GPS-level) location is collected when you join a drive to share it with other participants in your group. Background location is collected to maintain location sharing while the app is not in the foreground. Your account identifier is associated with location data to attribute it to the correct participant.
• Messages: Text messages and photos you send in drive group chats are stored to provide the chat feature.
• Device Information: Crash logs, device model, OS version, and app state may be collected to diagnose errors and improve app stability.

4. How We Use Your Information

• Location sharing: To show your real-time location to other participants in your drive group.
• Account management: To identify you within the app and display your profile to other drive participants.
• Chat: To deliver messages between participants in a drive.
• App improvement: Crash reports and diagnostics help us fix bugs and improve performance.
• Notifications: To send you drive invitations, updates, and alerts.

5. Data Sharing

We do not sell your personal information. Your data is shared only in these circumstances:

• With drive participants: Your name, profile photo, and location are visible to other members of drives you join.
• Service providers: We use Firebase (Google) for authentication, database, cloud functions, and push notifications; Google Maps for map display; Sentry for crash and error reporting. These providers process data on our behalf under their respective privacy policies.
• Legal requirements: We may disclose information if required by law or to protect the safety of our users.

6. Content Moderation and Safety

To maintain a safe environment, Vamio provides the following tools:

• Report messages: You can report objectionable messages in drive chats. Reports are reviewed by our team and may result in action against the offending user.
• Block users: You can block other users to hide their messages from your view. Blocked users are not notified. You can unblock users at any time from your profile settings.

We reserve the right to remove content or suspend accounts that violate community standards or applicable laws.

7. Data Storage, Security, and International Transfers

Your data is stored on Firebase (Google Cloud) servers, which may be located outside your country of residence (including in the United States). By using Vamio, you consent to the transfer and processing of your data in these locations. Google Cloud operates under industry-standard data protection practices.

We use industry-standard security measures including encrypted connections (TLS), Firebase Authentication, Firebase App Check, and role-based access controls to protect your data.

8. Data Retention

Location data from completed drives is retained as part of the drive summary for as long as the drive record exists. When you leave a drive, your real-time location is no longer broadcast, but location data already recorded in the drive summary remains as part of that drive's history.

Messages you sent in a drive chat remain visible to other participants after you leave, unless you delete them individually before leaving.

Account deletion initiates removal of your profile, messages, and location data. Deletion is typically completed within 30 days. Residual copies in encrypted backups may persist for up to 90 days before being overwritten.

9. Your Rights

You can:

• Access and update your profile information within the app.
• Stop location sharing at any time by pausing or leaving a drive.
• Revoke location permissions at any time in your device settings.
• Delete your messages in drive chats.
• Report objectionable content and block other users.
• Delete your account directly from the app (Profile → Delete Account). This initiates removal of your profile, messages, location history, and associated data from our servers, typically within 30 days (see Data Retention above).
• Contact us at [email protected] for any data-related requests, including data export or erasure requests.

10. Children's Privacy

Vamio is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

11. Third-Party Services

Our app uses the following third-party services that may collect or process data:

• Firebase (Google) — Authentication, Firestore database, Realtime Database, Cloud Functions, Cloud Messaging. Processes account data, location data, messages, and push notification tokens.
• Sentry — Error and crash reporting. Receives crash logs, device info, and app state. Does not receive location data or message content.
• Google Maps — Map display and geocoding. Receives location coordinates to render the map. Subject to Google's Privacy Policy.
• Apple Sign-In / Google Sign-In — Authentication only. Provides your name, email, and profile photo to create your account.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users via email and/or in-app notification within 72 hours of becoming aware of the breach, in accordance with applicable laws. We will describe the nature of the breach, what data was affected, and what steps we are taking to address it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or by updating the "Last updated" date above.

14. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

[email protected]