Cruise

Privacy Policy

Cruise is operated by Pocket Labs LLC ("Cruise," "we," "us," or "our"). This Privacy Policy explains what we collect, why we collect it, how we use and share it, and the choices and rights you have. Cruise is a driving companion that automatically records your drives, maps your routes, scores your driving, lets you share your live location with a convoy of friends, and connect through a social feed. Because the app is built around driving and location, please read this policy carefully.

By creating an account or using Cruise, you agree to this Privacy Policy.

1. Who We Are

Cruise is published by Pocket Labs LLC. In this policy, "Pocket Labs," "Cruise," "we," "us," and "our" refer to the entity operating the Cruise iOS application and the trycruise.app website (together, the "Services"). For the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), Pocket Labs is the business. For the EU and UK General Data Protection Regulations ("GDPR"), Pocket Labs is the controller of personal data processed through the Services.

This policy does not apply to third-party websites, applications, or services we do not operate, even if you reach them through Cruise. Those third parties have their own privacy practices.

2. Categories of Personal Information We Collect

Framed using the categories defined by the California Consumer Privacy Act:

• A. Identifiers. Username, display name, email address, account identifier, sign-in provider identifier (Apple or Google), device identifier, push-notification token, and IP address.
• B. Customer records. Profile, country, avatar, saved trips, garage vehicles, friendships, and convoy membership.
• C. Commercial information. Cruise Pro subscription status, product identifier, and renewal state. Payments are processed by Apple; we never receive your card number.
• D. Internet or network activity. Session timestamps, feature use, crash reports, and diagnostic logs.
• E. Geolocation data (precise). Latitude, longitude, course, speed, horizontal accuracy, altitude where available, and timestamps — collected while a drive is recording or the app is in use with permission granted. We treat precise geolocation as sensitive personal information.
• F. Sensory or audiovisual information. Photos you upload for your profile, vehicles, or posts. We never record audio or video.
• G. Inferences. Driving scores, top-speed and 0–60 records, streaks, and leaderboard standing derived from your drives.
• H. Sensitive personal information. Precise geolocation and account credentials. We use these only to provide the Services and secure your account, and never to infer characteristics about you.

We do not knowingly collect government identifiers, biometric data, health information, financial account numbers, racial or ethnic information, religious beliefs, union membership, sexual orientation, or genetic data.

3. How We Collect It

• Directly from you — when you create an account, complete onboarding, add a vehicle, post a drive, or contact support.
• Automatically from your device — device and diagnostic information, app interactions, and, with your permission, precise location and motion activity.
• From third parties — if you sign in with Apple or Google we receive a limited identifier and the basic profile information you authorise. Apple provides aggregate install attribution and subscription status.

4. Information You Provide

• Account details: your email address, display name, username, country, and profile photo (avatar). If you sign in with Apple or Google, we receive basic profile information (such as your name and email) from that provider — never your password.
• Content you create: posts about your drives, captions, photos, comments, likes, and the friends or convoys you join.
• Communications: messages you send us (for example, support requests).

2. Information We Collect Automatically

• Precise location. With your permission, Cruise collects precise GPS location, including in the background while the app is closed or your screen is off. Background location is essential to core features: automatically detecting when you start and stop driving, recording your route, turn-by-turn navigation, sharing your live location with your convoy, showing nearby drivers, and speed-camera alerts. You can change or revoke this at any time in iOS Settings, though some features will not work without it.
• Trip and driving data. For each drive we record the route (a series of GPS points), distance, duration, average and top speed, a driving score, timestamps, and — where available — elevation, acceleration and braking events, and 0–60 times.
• Live location. While you are in a convoy, your current location and driving/parked status are shared in real time with the other members of that convoy.
• Vehicle data. If you connect a compatible Bluetooth OBD-II reader, we process the diagnostic data your vehicle reports to show it in the app.
• Device and technical data. Device model, operating system version, app version, language, a push-notification token, and diagnostic or crash logs.
• Motion and fitness activity. With your permission, Cruise reads the motion coprocessor's activity classification (for example "automotive" or "walking") to detect automatically when a drive begins and ends. This is processed on your device to start and stop trip recording; we do not use it for health, fitness, or advertising purposes.
• Speed-camera and hazard interactions. When you report a hazard or receive a camera alert, we record the alert type, approximate location, and timestamp so the feature works for other drivers.
• Subscription status. Whether you hold an active Cruise Pro entitlement, the product identifier, and renewal state. This comes from Apple via RevenueCat; we never receive your payment card details.
• Referral information. If you enter a referral code or use a campaign link, we record which channel brought you to the app. This is aggregate attribution supplied by Apple's App Analytics and is not linked to third-party advertising profiles.

2a. We Do Not Track You

Cruise does not track you as Apple defines the term. We do not link data collected in the app with third-party data for advertising purposes, we do not share your data with data brokers, and we do not use the Advertising Identifier (IDFA). The app contains no advertising SDKs and no third-party analytics that build cross-app profiles. Because we do not track, Cruise does not present the App Tracking Transparency prompt.

Campaign attribution for our own marketing links is handled by Apple's App Analytics, which reports installs in aggregate and does not identify individual users to us.

3. How We Use Your Information

We use your information to: provide and operate the app; record and display your trips and statistics; power navigation, convoys, live location, leaderboards, and the social feed; personalize your experience; send push notifications you have enabled; provide customer support; maintain safety and security, detect fraud or abuse, and enforce our Terms; and comply with legal obligations. Where required by law, we rely on your consent (for example, for precise background location), the performance of our contract with you, and our legitimate interests in operating and improving Cruise.

4. How Your Information Is Shared

• With other users. Your profile (name, username, avatar), your public posts and comments, your leaderboard standing, and — while in a convoy — your live location and driving status are visible to other users as designed by the feature you are using.
• With service providers who process data on our behalf, including: Supabase (backend, database, authentication, file storage), Mapbox (maps, search, navigation), Apple and Google (sign-in), Apple Push Notification service, and RevenueCat and Superwall (subscription management). Payments are processed by Apple; we never receive your full card number.
• For legal reasons, if required by law or to protect the rights, safety, and property of Cruise, our users, or the public.
• In a business transfer, such as a merger, acquisition, or sale of assets, subject to this policy.

We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not share your precise location with advertisers.

4a. Service Providers in Detail

Each provider below receives only what it needs to perform its function:

• Supabase — hosts our database, authentication, realtime messaging, and file storage. Holds your account record, trips, posts, friendships, convoy membership, live location rows, and avatars.
• Mapbox — renders maps and provides search and turn-by-turn navigation. Receives location coordinates needed to draw the map and calculate routes.
• Apple — Sign in with Apple, push notification delivery, subscription billing, and crash reporting where you have opted in to share diagnostics with developers.
• Google — Google Sign-In only, if you choose that method. We receive basic profile information, never your password.
• RevenueCat — records and validates subscription receipts and entitlement state.
• Superwall — decides which subscription offer screen to display and measures conversion. It does not receive your location or trip data.

4b. What Other People Can See

• Always visible: your display name, username, avatar, and rank level.
• Visible when you post: the trip you share, including its route map, distance, duration, and speeds, plus any caption or photos you add.
• Visible while driving: your live position appears to nearby drivers only while you are actively driving, and disappears when you park.
• Visible to your convoy: convoy members see your live location for the duration of the convoy, including while parked.
• Never visible to other users: your email address, your precise home or frequent locations as such, your subscription status, and any trip you have not chosen to post.
• Ghost Mode removes you from the map entirely — both nearby drivers and convoy members — while your own drives keep recording privately.

5. Your Choices and Rights

• Location controls. Manage or revoke location access anytime in iOS Settings. Ghost Mode hides your live location from others while still recording your own drives.
• Access, correction, and deletion. You can edit your profile in the app and permanently delete your account and associated data from Settings → Account → Delete Account.
• Regional rights. Depending on where you live (e.g., GDPR in the EU/UK or CCPA/CPRA in California), you may have rights to access, correct, delete, port, or restrict processing of your data. To exercise them, email contact@pocketlabsteam.com.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the app. Specific periods:

• Trips and route data — retained until you delete the individual trip or your account.
• Live location — transient. Your current position is overwritten with each update and removed when you stop driving, enable Ghost Mode, or delete your account. It is not kept as a location history.
• Posts, comments, and likes — retained until you delete them or your account.
• Account record — deleted when you delete your account.
• Reports of other users — retained after account deletion where needed to keep the community safe and to meet our legal obligations.
• Backups — residual copies may persist in encrypted backups for a limited period before being overwritten.

Deleting your account is immediate and irreversible. It removes your profile, trips, posts, comments, friendships, convoy membership, and live location. We cannot restore a deleted account.

7. Security

We protect your data using encryption in transit (TLS), access controls and row-level security, and restricted access to stored files. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children

Cruise is intended for licensed drivers and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children.

9. International Users

We operate in the United States and may process and store your information there and in other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers.

US State Privacy Laws — Sale, Sharing, and Opt-Out

Pocket Labs does not sell personal information, does not share it for cross-context behavioural advertising, and does not license aggregated or de-identified drive data to third parties. We have not done so in the preceding twelve months and we have no plans to. This applies under the CCPA/CPRA and comparable laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, and Tennessee.

If your browser transmits a Global Privacy Control signal on trycruise.app we honour it, though as we neither sell nor share there is no processing for it to stop.

Your Rights in Detail

• Know and access — confirm what we process and obtain a copy.
• Correct — fix inaccurate information; most fields are editable in Settings.
• Delete — from Settings → Account → Delete Account, or by emailing us.
• Portability — receive your data in a structured, machine-readable format.
• Limit use of sensitive personal information — we already limit precise location to providing the Services.
• Opt out of targeted advertising and profiling — we do neither.
• Appeal — if we deny a request you may appeal by replying to our decision. Several states require this; we honour it everywhere.
• Non-retaliation — we will never degrade your experience or charge you differently for exercising a privacy right.

Email contact@pocketlabsteam.com from your account address. We may need to verify your identity, and will respond within 45 days, extendable once by a further 45 days where reasonably necessary. An authorised agent may act for you with verifiable written permission.

EU and UK Supplement (GDPR)

Our lawful bases for processing:

• Performance of a contract (Art. 6(1)(b)) — authentication, drive recording, route rendering, convoys, notifications, and subscriptions.
• Consent (Art. 6(1)(a)) — precise background location, motion activity, notifications, and photo library access. You can withdraw consent at any time in iOS Settings without affecting prior processing.
• Legitimate interests (Art. 6(1)(f)) — securing the Services, preventing fraud and abuse, and debugging, where not overridden by your rights.
• Legal obligation (Art. 6(1)(c)) — responding to lawful requests and meeting tax and accounting duties.

You may also restrict or object to processing, and lodge a complaint with your local supervisory authority. We would appreciate the chance to resolve your concern first.

International Transfers

Pocket Labs is based in the United States, and your information may be processed there and wherever our service providers operate. For transfers from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses — or the UK International Data Transfer Addendum for UK transfers — together with any supplementary measures needed to ensure an essentially equivalent level of protection.

California Supplement

Notice at collection. We collect the categories listed in Section 2 for the purposes described above, retain them for the periods in the Retention section, and do not sell or share them.

Categories sold or shared in the preceding twelve months: none.

Shine the Light. California Civil Code §1798.83 lets residents request details of disclosures to third parties for their own direct marketing. We make no such disclosures.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the app or by other reasonable means and update the "Last updated" date above.

11. Contact Us

Questions or requests? Email us at contact@pocketlabsteam.com.