Armada keeps the smallest useful amount of trip context in the smallest useful place. This website is a front door, not a location tracker.
The public homepage and invite handoff do not request browser geolocation, microphone access, or camera access. Opening an invite never starts sharing.
When the app is in a live trip, location context is available only to the people and surfaces authorized for that trip. Sharing can be paused or stopped.
Privacy includes an exit. Armada keeps paths for leaving a trip, reporting an issue, appealing a decision, and requesting deletion visible to the person affected.
Product states should be understandable at a glance: sharing off, rally visible, crew private. Clear labels are a privacy feature.
