How we handle app data.

What we collect

Location data. When you record a trip or use Live Convoy, the app processes precise location to determine your route, distance, and convoy position. Location can be used while the app is running, and in the background while you are actively recording or while Live Convoy is active. Location is also used to back up your route when you’re signed in.

Live Convoy sharing. When you join a convoy, your live position is shared with the other members of that convoy. Sharing stops when you leave the convoy or when the trip ends.

Account identifiers. If you sign in, we store your user ID and your email address (including Apple relay addresses when applicable) to run your account.

Profile content. If you add it, we store profile content such as your handle, vehicle name, and club affiliation, including a club logo image.

Saved Places and GPX waypoints. If you save a place or import GPX waypoints, we store the name, note, and coordinates as your content.

Photos you add. Trip photos and other images you choose to upload are stored as part of your content.

Trip summary aggregates. We store trip summary aggregates such as distance, desert km, duration, and max pitch/roll/G. Pitch and roll are recorded but not surfaced. Peak G may appear on trip proof.

On-device motion processing. Device motion (including G-force) is processed on device to compute trip aggregates. Raw motion sensor streams are not treated as user content.

Product analytics. We use Amplitude Analytics to understand how the app is used and to improve its features. The app sends events such as app opens, screen views, leaderboard use, public profile and vehicle views, and Share Card/template usage. Events may include your DuneTraq account user ID, an Amplitude device identifier, app version, device and operating-system information, and event timestamps. We do not send trip GPS coordinates or Share Card images to Amplitude as part of this analytics instrumentation.

How we use it

We use the data listed above to record trips, show your history and proof, and power Live Convoy coordination. If you sign in, we use your account identifiers to keep your account and saved data working across devices.

DuneTraq is built for off-road tracking and coordination. It is not an emergency or SOS service and does not monitor for distress.

Sharing and Share Cards. Share Cards are designed to share trip proof and highlights. We do not place exact GPS coordinates on Share Cards. Cards are designed to show regions and proof, not a coordinate pin. Review what you share and avoid posting sensitive locations.

Service providers and maps

We use Supabase for account authentication, database services and storage of uploaded content. Our Supabase project is hosted in the Mumbai region (India).

Maps are provided by Mapbox. Its SDK processes location, usage and diagnostic information to operate and improve its mapping services. This includes map interactions and performance information. You can control Mapbox telemetry through the information and attribution control on the map. See Mapbox’s privacy policy.

We use Amplitude, Inc. for product analytics. Analytics data may be processed and stored outside the United Arab Emirates, subject to the provider’s applicable security and data-processing terms. We use the service only for product measurement and improvement, not for targeted advertising or the sale of personal data. See Amplitude’s privacy notice.

Retention

We keep app data for as long as needed to provide the service, and for legitimate purposes such as safety, security, and preventing abuse. You can delete your account in the app. After deletion, some records may be retained for a limited time where required for legal compliance or to protect the platform.

Sale and advertising

We do not sell personal data. We do not share app data with third parties for targeted advertising.

Your choices and controls

You can control location permissions in iOS Settings. Within the app, you can manage your trips and your account, and you can delete your account using the in-app deletion flow.

You may ask us to stop associating analytics events with your account or to delete analytics data connected to your account by contacting support. We will verify the request before acting on it.

If you believe a profile should be reviewed, use the in-app profile report flow.

Contact

DuneTraq is operated by Florian Kall.

Questions or requests (including deletion requests) can be sent to support@dunetraq.app.

The WhatsApp channel is broadcast-only for product updates: WhatsApp channel.

If you request account deletion via support, we may ask for verification to protect your data.

UAE privacy note: If you are located in the UAE, we handle personal data in line with applicable requirements, including providing access, correction, and deletion options through the app and support contact above.

Updates

We may update this policy as the app evolves. Material changes will be reflected here.