Privacy Policy

Introduction

Road Trip is operated by Broken Branch Studios LLC (“we,” “our,” or “us”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our mobile application and website (collectively, the “Service”).

Information We Collect

Location Data

Road Trip uses your device's location to provide navigation and point-of-interest discovery features. We collect:

• Current GPS coordinates during active trips
• Trip origin and destination addresses
• Route information for narrative generation

Location data is only collected while you actively use the app for navigation. We do not track your location in the background.

Account Information

If you create an account or subscribe to premium features, we may collect:

• Email address
• Display name (optional)
• Subscription status and payment information (processed securely by Stripe; we never store your card details)

Usage Data

We collect anonymous usage data to improve the app:

• App interactions and feature usage
• Trip statistics (distance, duration)
• Character preferences and settings

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract: Processing necessary to provide the Service you requested (account creation, trip features, subscription management)
• Consent: Location data collection (you grant permission via device settings) and optional Spotify integration
• Legitimate Interest: Anonymous usage analytics to improve app quality and prevent abuse

How We Use Your Information

We use collected information to:

• Generate personalized narratives about points of interest
• Provide navigation and trip tracking features
• Process payments and manage subscriptions
• Improve our app and develop new features
• Send important updates about your account or the service

Third-Party Services

Road Trip integrates with the following third-party services, each of which processes data according to their own privacy policies:

• Google Maps / Places — Maps, directions, and snack stop recommendations
• Stripe — Payment processing (we never store your card details)
• Spotify — Music integration (optional, requires your explicit consent)
• OpenAI / Google AI — AI narrative generation (location names and coordinates only; no personal identifiers)
• Supabase — Secure cloud database and authentication
• Vercel — Web hosting and serverless functions

Data Storage, Security, and Retention

Your data is stored securely using industry-standard encryption. Trip history and preferences are stored locally on your device and optionally synced to our secure cloud servers hosted by Supabase (AWS infrastructure, US region).

We retain your data according to the following schedule:

• Account data: Retained while your account is active; deleted within 30 days of account deletion request
• Trip history: Retained for 2 years from creation, then automatically deleted
• Payment records: Retained for 7 years as required by tax and accounting regulations
• Anonymous analytics: Retained indefinitely in aggregated, non-identifiable form

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (“right to be forgotten”)
• Portability: Export your trip history in a machine-readable format
• Opt-out: Opt out of non-essential data collection
• Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, contact us at ben@brokenbranch.dev. We will respond within 30 days (or 45 days for complex requests, with notice).

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• You have the right to know what personal information we collect, use, and disclose
• You have the right to request deletion of your personal information
• You have the right to opt out of the sale of your personal information

We do not sell your personal information. We do not share your personal information with third parties for their direct marketing purposes.

International Data Transfers

Our servers are located in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

Children's Privacy

Road Trip is designed for family use but requires users to be at least 13 years of age (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete that information.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable law. Notification will be sent via the email address associated with your account.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Your continued use of Road Trip after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Broken Branch Studios LLC
Email: ben@brokenbranch.dev