Convoy — Privacy Policy

Last updated: July 27, 2026

This is a starting draft, not a finished legal document. It should be reviewed by a lawyer before public launch.

What we collect

• Email address — used for account login and notifications. No .mil address is required.
• Display name — chosen by you; not your legal name unless you choose to use it.
• Selected installation — self-reported by you at sign-up, used only to show you relevant rides. Not verified by Convoy.
• Ride and request data — routes, times, seat counts, and status you post or respond to.
• Messages — content of in-app chat between users, including any phone number a user chooses to share through the app.
• Ratings — star ratings and ride counts between users.

What we do not collect

• No location or GPS data of any kind, at any time.
• No government ID, military ID, or CAC data.
• No payment information — Convoy does not process any ride-related payment.

How we use this data

Solely to operate the app: matching rides, displaying profiles and ratings to other users, sending notifications, and enforcing reports/blocks. We do not sell user data to third parties.

Data retention and deletion

Deleting your account permanently and immediately removes your profile and personal information — there is no retention period or recovery window; deleted data cannot be restored, including message history shared with other users (see the Terms of Service, Section 4, for how conversations are affected when either participant deletes their account).

Third parties

Convoy is built on Supabase (database, authentication, and real-time chat infrastructure) and hosted on Vercel. Both process data on our behalf to run the app; see their respective privacy policies for how they handle it.

Children's privacy

Convoy is not intended for use by anyone under 18. We do not knowingly collect data from minors.

Contact

Questions about this policy can be sent to convoyrideshare@gmail.com.