PRIVACY / SCOPE

Private by default. Specific by design.

Armada keeps the smallest useful amount of trip context in the smallest useful place. This website is a front door, not a location tracker.

ARMADA / JOINARMADA.CARETURN TO HOME ↗
DRAFT / CONSULTANT REVIEW

This page is a plain-language product draft, not legal advice. Armada will publish a final version after qualified legal counsel reviews the operating entity, jurisdictions, processors, retention schedule, and consumer rights that apply.

01

This page does not collect location data.

The public homepage, policy pages, and invite handoff do not request browser geolocation, microphone access, or camera access. Opening an invite never starts sharing.

  • No browser location request
  • No silent permission prompts
  • No public trip map
02

Only the information needed to run a trip.

Depending on the features you use, Armada may process account identifiers from your sign-in provider, profile details you choose to add, trip membership, messages, safety reports, and precise location only after you enable sharing in an active trip.

  • Account and provider identity
  • Optional profile and vehicle details
  • Trip, safety, and support activity
03

Purpose-limited processing.

We use information to authenticate you, operate private trips, show the group context you selected, provide support, prevent abuse, protect the service, and meet legal obligations. We do not sell precise location or use it for advertising profiles.

  • Operate and secure the service
  • Provide requested trip features
  • Respond to support and legal requests
04

Exact location stays behind scoped access.

When the app is in a live trip, location context is available only to the people and surfaces authorized for that trip. Sharing begins paused, can be stopped, and expires with the trip or membership.

  • Private crew context
  • Trip-scoped visibility
  • Pause, stop, and expiry controls
05

We keep data only as long as needed.

Live location is ephemeral trip data. Account and support records may be retained for security, dispute handling, legal obligations, and service continuity, then deleted or de-identified according to our retention schedule.

  • No permanent route diary by default
  • Deletion and export workflows
  • Backups expire on a separate schedule
06

You can access, correct, export, or delete.

Privacy includes an exit. You can update your profile, leave a group, revoke sessions, request an export, or request account deletion through the app and support channel.

  • Review and update profile data
  • Export or delete your account
  • Contact support for a privacy request
07

Trusted processors operate defined parts of Armada.

Identity, hosting, database, email, mapping, payments, and communication providers may process information under their own security and contractual obligations. We limit access to what each service needs.

  • No provider receives unrestricted trip access
  • Secrets stay on server infrastructure
  • Provider changes are reflected in this policy
08

Security is a product boundary, not a promise of perfection.

Armada uses encrypted transport, scoped credentials, server-side authorization, rate limits, logging controls, and deletion workflows. No internet service can guarantee absolute security; report suspected issues promptly.

  • HTTPS for production services
  • Scoped trip and account credentials
  • Security contact through support
09

We say what a control does before you use it.

Product states should be understandable at a glance: sharing off, rally visible, crew private. Clear labels are a privacy feature.

  • Visible sharing state
  • No hidden auto-join
  • No public spectator mode
KEEP THE CREW / LOSE THE CHAOS

Ready when your crew is.

Download the app