Koast (“the app”, “we”) is published by Archive Vivante Inc. (Québec, Canada). This policy explains what data we collect, why, and your rights. It follows the spirit of Québec’s Law 25 and Canada’s PIPEDA.
1. Data we collect
Account: email address, display name, and optionally your car info (model, year, color, notes, photo).
Location: your GPS position in real time during a ride (and in the background while a ride is active, even with the screen locked) to show you and your convoy on the map. Location is only active during rides.
Activity: your rides (distance, duration, top speed), your crews, your crew messages, your comments, your follows (the riders you follow), your points and levels.
Shared photos: photos you add to your crew’s ride albums. Stored privately (temporary signed-link access), visible only to crew members.
Notifications: a push token to send you convoy alerts and announcements.
Technical: app version, device type, error logs.
Koast assistant (memory): the durable facts you share with the voice assistant (your vehicle, driving preferences and habits, your crew) are remembered to personalize its answers. The assistant does not store sensitive data, and you can erase everything at any time (Settings → “Forget my Koast memory”).
We do not collect your contact list or advertising data, and we never sell your data.
2. Why (purposes)
To run the real-time convoy, navigation, push-to-talk voice, leaderboard/gamification, safety, moderation, and to send you useful notifications. Basis: your consent (which you can withdraw) and performance of the service you request.
3. Who it’s shared with
Your crew members see your position and info in real time during a ride — this is the core of the app, you consent by joining a convoy. The photos you add to ride albums are visible to your crew members only.
The public feed and your followers: if you publish a ride, or comment or like content, your display name, your ride and your comments become visible to other users (the “Discover” feed and followers). You choose what you publish — a ride stays private to your crew until you publish it.
Moderation: our team (administrators) can view and remove content (including photos) to enforce the rules and the law — notably upon report. This access is restricted and logged.
Technical providers (under contract): Supabase (database/hosting, data stored in Canada — ca-central region), Mapbox (maps/routing), LiveKit (live voice, not recorded), Expo/Apple (notifications, distribution). They process data only to provide the service. Your data is hosted in Canada.
AI providers (optional features): when you use the Koast voice assistant, the ride planner or skin generation, the strict minimum is sent to AI sub-processors to produce the result: Anthropic (assistant + planner + assistant memory), Google (skin generation), OpenAI (premium assistant voice), TomTom (traffic/routing). This processing happens in the United States. They do not use your data to train their models and we do not sell it.
Authorities: only if required by law.
4. Retention
We keep your data as long as your account exists. Live positions are not kept as a history of your movements. The detailed GPS trace of a ride (if you save it) is kept for at most 90 days, then automatically deleted; only summaries (distance/duration) remain. You can delete your account and all your data anytime in the app (Profile → Legal → Delete my account), or write to us (see §6).
5. Security
Access protected by authentication, row-level security on the database, and restricted server functions. No system is perfect, but we apply reasonable industry measures.
6. Your rights (Law 25 / PIPEDA)
Access: get a copy of your data.
Correction: fix your info from the app.
Deletion: erase your account and data (“right to be forgotten”).
Withdraw consent: turn off location/notifications in your phone settings, or delete your account.
Assistant memory: erase what Koast learned about you, at any time (Settings → “Forget my Koast memory”).
Koast is intended for people aged 13 and over (you confirm your age at sign-up). We do not knowingly collect data from children under 13. Under Québec’s Law 25, if you are under 14, use requires the consent of a parent or guardian.
8. Changes
We may update this policy; the date at the top shows the latest version. Significant changes will be announced in the app.