Koast (“the app”, “we”) is published by Archive Vivante Inc. (Quebec, Canada). This policy explains what data we collect, why, and your rights. It follows the spirit of Law 25 (Quebec) and PIPEDA (Canada).
1. Data we collect
Account: email address, display name, and optionally your vehicle info (model, year, color, notes, photo).
Location: your real-time GPS position during a ride (and in the background while a ride is active, even with the screen locked) so you and your convoy show up on the map. Outside a ride, the app reads your location only when a screen needs it (nearby events and partners, planning a ride, navigation) or, on CarPlay, when Koast is shown on your vehicle’s screen, even with your phone locked: for the map, guidance and reports around you (speed cameras, police, traffic lights), which go through our servers just like on the phone’s map. On Android Auto, only during a ride or a navigation. Outside a ride, it is not shared with your crew. Otherwise, never in the background.
Activity: your rides (distance, duration, top speed), your crews, your crew messages, your points and levels.
Shared photos: photos you add to your crew’s ride albums. Stored privately (access via temporary signed link), visible only to crew members. Before it is published, any photo you add (albums, messages, events, vehicle, profile, crew, build) goes through an automatic content check (see §3).
Notifications: a push notification token to send you convoy alerts and announcements.
Technical: app version, device type; usage events (which screens and features you use, stored in our database, to know what is useful and what breaks); crash reports (error, device, app version), sent to Sentrywithout your account identifier, without full web addresses, coordinates or search text; an installation identifier assigned by Expo (checking for app updates and registering notifications); and a technical startup log kept on your phone only (the steps of the app’s launch, with no personal data: no location, name or messages), limited to the last three launches and never sent automatically.
Saved places: your Home and Work if you set them, and your last 20 destinations, to offer them again.
Purchases: your Koast+ subscription and in-app purchases (product, status, renewal date), and your credit balance.
Social: the riders you follow, your likes, your comments, and referrals (who invited you to Koast).
Feedback and applications: what you send us with “Send feedback” (or what you ask Koast to pass on to us), with the screen and app version; and, if you apply, your tester application (your answers, your vehicle, your location) or partner application (business name, phone number, website, city).
Koast assistant (memory): the durable facts you share with the voice assistant (your vehicle, driving preferences and habits, your crew) are remembered to personalize its answers. The assistant does not store sensitive data, and you can erase everything at any time (Settings → “Forget my Koast memory”).
Garage (vehicle maintenance) — optional, and only what you enter: vehicle identity (make, model, year, plate, VIN, odometer), service entries, reminders, fill-ups, warranties.
Glovebox — optional: the documents you upload yourself (driver’s licence, proof of insurance, vehicle registration, invoices). ⚠️ These may contain sensitive personal information. They are stored in a private area, accessible only by you: neither your crew members nor the Koast team can access them, including for moderation. Each opening uses a temporary link that expires within minutes.
Calendar — optional: if (and only if) you tap “Add to my calendar”, the app requests access to write one due date. It never reads your other events.
Vehicle screen (CarPlay, Android Auto) — if you connect your phone: the map, your convoy, your crew’s messages and guidance are shown in the vehicle. This display goes from your phone to the vehicle (on Android, through Google’s Android Auto app); we receive nothing more because of it.
If you choose to invite your crew, the app may read your contacts on your device only, to help you send an invite — it is never uploaded or stored on our servers. We do not collect advertising data and we never sell your data.
2. Why (purposes)
To run the real-time convoy, navigation, push-to-talk voice, ranking/gamification, safety, moderation, and to send you useful notifications. Basis: your consent (which you can withdraw) and the performance of the service you request. We may also write to the email address on your account for service-related reasons (fixing an issue on your profile, informing you about your account) and, occasionally, to invite you to take part in a test or a program. You can opt out at any time by replying to the message.
3. Who it’s shared with
Your crew members see your position and info in real time during a ride — that’s the heart of the app, which you consent to by joining a convoy. The photos you add to ride albums are visible to your crew members only.
Moderation: our team (administrators) can view and remove content (including photos) to enforce the rules and the law — notably on report. This access is restricted and logged.
Providers (under contract): they process your information only to run the service, and we sell nothing to anyone. Here is each one, what it receives, and why:
Supabase: database, accounts, files and server functions — everything described in §1. Database hosted in Canada (ca-central-1 region, Canada Central).
Mapbox: maps, address search and routes — the coordinates and search text needed, and the usage statistics (telemetry) its map module sends by default, which include your location and a device identifier. You can opt out of this telemetry: tap the ⓘ button on the map, then turn off Mapbox telemetry. These calls go out from your phone, so Mapbox sees its IP address.
Google Maps (Android) and Apple Maps (iOS): the maps on the plan-a-ride, generate-a-ride and navigation screens — the area shown.
TomTom: traffic and best stop order — the coordinates of the area or the stops.
LiveKit: the live push-to-talk voice (not recorded), your account ID and your display name in the voice room. Processing region set to the United States.
Expo, and the Apple and Google notification services: your push token and the content of notifications; Expo also delivers app updates and receives an installation identifier to do so (not your account).
Sentry: crash reports (error, device, app version) and, each time the app opens, a session signal used to measure stability. Sentry attaches its own random installation identifier. For a network request, only the method, the server called and the response code: not your account identifier, the full address, coordinates or search text. No performance measurements.
RevenueCat: your account ID and your Koast+ purchases, to manage the subscription.
Resend: sending sign-in emails — your email address and the content of the email (your sign-in or confirmation code).
Apple and Google: speech recognition of your voice commands (Apple on iPhone, Google on Android: the sound of your voice, while it is transcribed), and sign-in with your Apple or Google account if you choose it (Google sign-in goes through Google’s web page, on iPhone as on Android; Google then gives us your email address, your name and, if any, the link to your Google profile photo, which the app does not use).
Anthropic: the Koast assistant, the ride planner and the assistant’s memory — what you say, and the useful context (speed, destination, names and distances of your crew members, your vehicle, what Koast remembers about you); the garage too (vehicle identity, to suggest parts). Its commercial terms forbid it from training its models on this data.
Google (Gemini): skin generation (your vehicle photo) and the automatic check of the photos you add, before they are published. We use its paid offering: its terms state that Google does not use these photos or its responses to improve its products.
OpenAI: the assistant’s premium voice — the text Koast is about to say.
Open-Meteo: the weather — coordinates, with no account; when the call goes out from your phone, Open-Meteo sees its IP address.
Tankerkönig: fuel prices in Germany — the coordinates of an area, sent by our servers, with no identifier.
OpenStreetMap (Overpass servers): road signals (traffic lights, stops) — the coordinates of an area, sent by our servers, with no identifier.
NHTSA (National Highway Traffic Safety Administration, an agency of the United States government) — optional, free: the VIN, or the make, model and year, to decode the VIN and check safety recalls. Not your name, email, location or plate. Recalls go through our servers (responses cached). VIN decoding in the garage also goes through our servers, which keep in cache the VIN and the decoded model sheet, without your name or account, to avoid asking again. Decoding from the profile screen goes straight from your phone: NHTSA then sees its IP address, like any website.
Where your data is processed — and outside Quebec: our database is hosted in Canada (Supabase, ca-central-1 region). But several providers above process information outside Quebec and outside Canada. Your personal information may therefore be communicated outside Quebec. What we know about where: Sentry and LiveKit process in the United States (our account settings); Resend states that it processes data in the United States; NHTSA is in the United States. For the others, the processing country is not set by our configuration: they are companies established in the United States (Mapbox, Google, Apple, Expo, RevenueCat, Anthropic, OpenAI), the Netherlands (TomTom) and Germany (Tankerkönig); Open-Meteo and the Overpass servers do not state a country we can guarantee. We choose these providers for their security and privacy commitments, and we send them only what is needed.
Authorities: only if the law requires it.
4. Retention
We keep your data as long as your account exists. We also keep a history of your consents (date and version of the policy you accepted), to be able to demonstrate it; it is deleted with your account. Live positions are not kept: each member's last position is erased 15 minutes after its last update. Your recent destinations are limited to the last 20. The detailed GPS trace of a ride (if you save it) is kept for at most 90 days, then automatically deleted; only the summaries (distance/duration) remain.
Your service book is kept as long as you keep the vehicle in your garage — that’s the point: it must follow you from one phone to the next and serve at resale. Deleting a vehicle immediately erases its service history, reminders, fill-ups and documents. Deleting a document from the glovebox erases the file itself, not just the row in the list.
You can delete your account and all your data at any time in the app (Profile → Legal → Delete my account), or write to us (see §6). Deletion also erases all your files: photos, skins, glovebox documents, receipts, route thumbnails, and your photos posted in a crew. Images that belong to a crew that carries on without you (its banner, its photo) stay with the crew. A crew you lead is first handed over to its longest-standing moderator, or else to its longest-standing member, and its images stay with it; if there is no one else, it goes with you, images included. A country room is only handed over to another Koast administrator.
A few records remain detached from your account: usage events, feedback you sent, public reports placed on the map (speed camera, police…), reports you made about content or members, the log of photos removed by moderation, and, in a crew that continues, the albums you had created (their title stays, your photos go) and the group rides you had started. Their link to your account is erased at deletion; they no longer identify you, unless you wrote your own name in a text (feedback, a report, an album title).
5. Security
Access is protected by authentication, database-level access rules (Row-Level Security), and restricted server functions. No system is perfect, but we apply reasonable industry measures.
A copy of your profile stays on your phone so the app can open without a network connection; it is erased when you sign out and when you delete your account.
6. Your rights (Law 25 / PIPEDA)
Access: get a copy of your data.
Rectification: correct your info from the app.
Deletion: erase your account and data (“right to be forgotten”).
Withdraw consent: turn off location/notifications in your phone settings, or delete your account.
Assistant memory: erase what Koast learned about you, at any time (Settings → “Forget my Koast memory”).
To exercise these rights: contact@grouperzk.com. Reply within 30 days.
7. Children
Koast is for people 16 and older (you confirm your age at sign-up). We do not knowingly collect data from younger people; under Law 25, a parent’s or guardian’s consent is required under age 14.
8. Changes
We may update this policy; the date at the top shows the latest version. Significant changes will be announced in the app.
9. Contact
Archive Vivante Inc. — Personal information protection officer: contact@grouperzk.com