Privacy policy

Last updated 11 October 2026

Arrivo helps a group drive to the same place and see each other on the way. This policy explains what Arrivo (“we”) collects, why, and the choices you have.

What we collect

• Account: your email address and name, and your profile photo if you sign in with Apple or Google.
• Location: your precise location while a trip is active, including when the app is in the background or your phone is locked. It is shared with the other people on that trip so they can see where you are and when you will arrive.
• Trips: trip names, the destination and meeting point you choose, stops people request, and a summary of finished trips (time, distance, number of people).
• Phone and sign-in details: an ID for your phone, your phone model, system and app version, and the IP address you last used Arrivo from. On iPhone, Apple’s DeviceCheck also tells us whether a free trial was already used on that phone. Apple does not share who you are with us.
• Notifications: a device token so we can send push notifications, and your notification settings.
• Purchases: when you buy a Trip Pass, Apple or Google processes the payment. We receive a purchase receipt through RevenueCat. We never see your card or payment details.
• Usage and crashes: which features you use and error reports, so we can fix problems and improve the app.

How we use it

To run the app (sign you in, show your group on the map, calculate routes and arrival times, send notifications, process Trip Passes), to keep it working and secure, to prevent abuse such as one person creating several accounts to get more free trial trips, and to understand how it is used. We do not sell your data and we do not use it for advertising or track you across other companies’ apps and websites.

Who handles it for us

• Supabase (database and sign-in) and Vercel (hosting)
• Apple DeviceCheck (one free trial per iPhone)
• Firebase Cloud Messaging and Apple/Google push services (notifications)
• RevenueCat, Apple and Google (purchases)
• PostHog (usage analytics) and Sentry (error reports)
• MapTiler and OpenStreetMap contributors (map images), and our own routing server (driving routes)

These providers process data only to provide their service to us. Some are located outside your country, including in the United States and the European Union.

How long we keep it

• Your live location is deleted when the trip ends.
• Stop requests are deleted 30 days after their trip ends.
• Push device tokens are deleted when they have not been used for 90 days.
• Your account, trips and trip history, and the phones you use Arrivo on, are kept until you delete your account. We keep only the latest IP address.
• Purchase records are kept as long as the law requires for accounting.

Your choices

• You can delete your account and its data in the app: Profile → Delete account.
• You can turn off location in your phone’s settings and each kind of notification in Profile.
• You can ask us to access, correct or delete your data, or object to how we use it, by emailing harissokoli@gmail.com.

Children

Arrivo is not meant for children under 16, and we do not knowingly collect their data.

Changes and contact

If we change this policy we will update the date above and tell you in the app when the change matters. Questions: harissokoli@gmail.com.