Privacy Policy

Effective and last updated: August 17, 2026

1. Who controls your data

Vojo is operated by Faiz Mamutov, an independent developer ("Vojo", "we", "us"). We are the controller of personal data processed to operate the App. Privacy requests can be sent to vojo.info.dev@gmail.com.

2. Data we collect

• Account and profile: email address, name, authentication provider identifier, profile preferences, motorcycle description, and push notification token.
• Ride and community content: ride title and description, date, route and meeting points, coordinates, bike type, participant records, optional contact link, reports, and moderation records.
• Garage data: motorcycle make, model, year and specifications; odometer readings; components, service history, reminders, notes, emergency contacts, and photos you upload.
• AI feature inputs, outputs, and safety reports: symptoms, questions, motorcycle and maintenance data, odometer or diagnostic photos, generated diagnoses, repair guides, part suggestions, component profiles, service schedules, and reports you submit about an AI result.
• Location: precise or approximate location when you grant permission and use nearby rides, map selection, route, or distance features. Vojo does not need continuous background location.
• Support, safety, and diagnostics: bug reports, optional screenshots and diagnostic context, support messages, app version, device type, operating system, and technical error information.
• Purchases: product, entitlement, transaction status, renewal and expiration information received from Apple, Google, and RevenueCat. Vojo does not receive your full payment-card details.

3. Sources and purposes

We receive data from you, your device permissions, Google or Apple sign-in, other users' ride interactions, and the stores/payment infrastructure. We use it to:

• create and secure your account and provide rides, garage, sharing, notifications, subscriptions, and support;
• show nearby content and open routes in a navigation service you choose;
• generate requested AI results after your separate permission to share relevant input with an AI provider;
• detect abuse, investigate user-content and AI-output reports, enforce our Terms, prevent fraud, and protect users and the service;
• diagnose failures, measure feature usage, maintain the service, and comply with legal obligations.

Depending on where you live, our legal bases are performance of our contract, your consent (including device permissions and third-party AI sharing), our legitimate interests in operating and securing Vojo, and compliance with law. You may withdraw consent at any time; withdrawal does not affect processing that was lawful before withdrawal.

4. What other users and the public can see

• Published ride details, host name, motorcycle description, date, route/meeting information, and participant information may be visible to signed-in users as needed to organize a ride.
• An optional contact link is shown only in the contexts indicated in the App. Do not provide a contact link you do not want other riders to use.
• If you create or use an external share link for an active ride, the shared ride information can be viewed by anyone who has that link and may be forwarded or indexed outside Vojo. Hidden and cancelled rides are not shared. Do not include sensitive information in public ride text.
• Garage records, emergency contacts, service photos, and AI conversations are private to your account and our authorized processors; they are not intended for other Vojo users.

5. Service providers and disclosures

We do not sell personal data and do not use it for cross-app behavioral advertising. We disclose only the data needed for the following services:

• Supabase: authentication, database, file storage, and server functions (privacy policy).
• Vojo AI backend and Anthropic: Vojo's controlled backend processes diagnostic and odometer requests. For features powered by Anthropic, it shares the prompt, relevant motorcycle/maintenance context, and selected photos with Anthropic (privacy policy). Vojo asks for explicit permission before third-party AI sharing begins.
• RevenueCat, Apple, and Google: purchases, entitlements, subscription status, store authentication, and account sign-in (RevenueCat, Apple, Google).
• Expo: push notification delivery and application infrastructure (privacy policy).
• Telegram: when you submit a bug report, a minimal alert containing only an internal report ID and timestamp is delivered to Vojo's private administrator support chat. The description, images, user ID, profile, and device details remain in Vojo's private Supabase datastore and are not copied into Telegram (privacy policy).
• Google Maps, Apple Maps, or Waze: a destination or coordinates are passed when you choose to open navigation; the selected provider then processes that request under its policy.
• Unsplash: remote destination imagery; loading an image may disclose network/device request data to Unsplash (privacy policy).

We may also disclose information when required by law, to respond to valid legal process, or when reasonably necessary to protect rights, safety, and service integrity. Emergency contacts are stored for your use; Vojo does not contact them automatically unless a feature clearly says so and you initiate it.

6. International transfers

Vojo and its providers may process data outside your country, including in the United States and European Economic Area. Where required, transfers rely on an adequacy decision, standard contractual clauses, or another lawful safeguard. Contact us to request information about safeguards applicable to your data.

7. Storage, security, and retention

We use encrypted HTTPS connections, access controls, database row-level policies, and private storage for garage, diagnostic, and bug-report photos. No system is completely secure, so please avoid placing passwords, financial information, health information, or other unnecessary sensitive data in ride descriptions, AI prompts, or bug reports.

We retain account and feature data while your account is active. After deletion, primary account records and user-owned uploads are removed recursively; limited records may be retained where necessary for security, fraud prevention, dispute handling, accounting, or law. User-content reports, AI-output safety reports, and support records are generally retained for up to 24 months, and store transaction records for the period required by the store or applicable law. Disaster-recovery backups are isolated and overwritten on the infrastructure provider's normal schedule; if a backup is restored, applicable deletion requests are re-applied.

8. Your choices and rights

• Review and update profile, garage, location, and notification choices in the App or device settings.
• Grant, decline, or later withdraw permission for third-party AI data sharing. Withdrawal stops new AI requests; it does not remove prior results stored in your account.
• Request access, correction, portability, restriction, objection, or deletion where provided by applicable law.
• Delete your account in Profile → Danger Zone → Delete Account, or follow our web deletion instructions.
• Complain to your local data protection authority. Residents of Türkiye may exercise rights under KVKK Article 11; EEA/UK residents may exercise applicable GDPR rights.

9. Children

Vojo is intended only for people aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a minor has created an account.

10. Changes

We may update this Policy as the App or law changes. For material changes, we will provide reasonable notice in the App or by another appropriate method and request consent again where required. The effective date above identifies the current version.

11. Contact

Email privacy and legal requests to vojo.info.dev@gmail.com. Please use the subject “Privacy Request” and do not email passwords or identity documents unless we specifically request a secure verification method.