Who we are
Roadside is a free driving and road safety app for Bermuda, published by Atlantic Strategies Ltd.
Your location
- Roadside uses your location while you use it, to show you on the map, give directions and warn you about hazards ahead. That location is used on your phone and is not sent to us, except in these cases, each described below: directions (the start and destination go to our routing server), anonymous traffic data (only if Share anonymous traffic data is on), reports, votes, map issues and place reports you send (where they are), saved places if you turn on the backup, and Share my ETA (only when you start it).
- Other people never see your location, except the approximate position you choose to send with Share my ETA, and only to people who have the link.
What we collect
- Your anonymous account. After you tap Agree and continue, the app creates an anonymous account and a random device ID for your phone. We do not ask for your name, email address or phone number. The device ID is kept in your phone's keychain, so it stays the same if you reinstall the app on the same phone.
- Directions: when you ask for a route, its start and destination go to our routing server in the United States (Virginia), which plans the route. The request carries no account or device ID, and the server does not keep the locations. With no connection, your phone plans the route itself.
- Anonymous location and speed points while you drive, only if Share anonymous traffic data is on. They carry a random trip code, never your account or device ID (see How traffic data is anonymised).
- Reports you make: the type of report, where it was, which way and how fast you were going, the time, the road it matched, an optional photo and an optional short note, with your device ID. To check a report, the app also sends a short summary of whether your phone was recently moving near that spot; it is used for the check and not stored.
- Votes you give (Still there, Not there), with your device ID. Votes and confirmations build a private trust score for each device, which no one else sees. If several trusted drivers mark your reports Not there within a week, your new reports may be hidden automatically for a time; this is logged and our team can undo it.
- Map issues, feedback and place reports you send: what you write; for a map issue, where it is and which way you were facing; for feedback, the app version and phone platform; for a place report, the details you enter (name, type, location, address, phone, website, hours, note) and an optional photo. Each is stored with your device ID. Testers in our internal group can also send survey pins for road crossings, with an optional photo.
- Saved places (Home, Work and places you save) stay on your phone. Only if you turn on Back up saved places (off unless you turn it on) are their names and locations copied to your anonymous account, so they come back after a reinstall.
- Reporter points: when another driver confirms a report you made, your account earns points, at most 50 a day across all your devices. Only you can see them, on your profile. There is no leaderboard and no name.
- Share my ETA, only when you start it: see Share my ETA below.
- Usage counts, if you leave them on: the names of things you do in the app (for example opening it, sending a report, an alert shown) with a few short details such as a count or a setting, never your location, what you typed or an ID. Each is stored with your device ID for at most 24 hours (an hourly cleanup removes the link once an event is 23 hours old). After that the device ID is replaced with a code that changes every day, and the key that makes that code is deleted by the start of the second day after, so the count can no longer be linked to you or to your other days.
- Crash reports, if you leave them on and crash reporting is switched on in the version you use: see Who processes it.
- Your privacy choices: which switches you turned on or off, when, and the version of this policy you saw, with your device ID. Each time you agree to the terms, the app also sends a record of which version of the terms you agreed to and when, with your device ID. We keep these as a record of your consent.
- Proof that the app is genuine: when it sends traffic data, reports or votes, the app can include a check from Apple's App Attest service that the request comes from the real Roadside app on a real iPhone. These checks are being introduced. Today they are recorded but not required for everyone, so they do not yet stop all requests from other software.
- Search and voice search work on your phone. What you search for and what you say are not sent to us. If you report by Siri, Apple handles what you say under its own terms, and Roadside receives only the report.
What your device ID is linked to
- Your reports and votes, your private trust score and reporter points, your report photos, your map issues, feedback, place reports and survey pins, your privacy choices, and your usage counts for their first 24 hours. Saved places, if you back them up, are linked to your anonymous account.
- Traffic data and Share my ETA are never linked to your account or device ID. Other drivers never see your device ID or your account.
Share my ETA
- Only when you tap Share ETA. The app sends the destination name you chose, your arrival time and your approximate position (rounded to about 200 metres, with the road and parish), updated about every 30 seconds while you share. Anyone with the link can see them. Only the latest position is kept, never a trail. The share is not linked to your account or device ID.
- The share ends when you arrive, when you tap Stop sharing, when you end the route, after 20 minutes without an update, or after 3 hours at most. Once it has ended, the link shows only that sharing has ended, and the page also hides the trip by itself when the 3 hours are up, even if it cannot reach us.
- When you tap Stop sharing, the app shows Stopping… until our server confirms the share has ended. If you are offline it keeps trying, and keeps the share's private stop key in your phone's keychain until then, so it can try again after a restart. Until the stop reaches us, the link can still show your last position, for 20 minutes after the last update at most.
- When our server receives your stop or your arrival, the position and destination are removed at once. When a share ends on its own (20 minutes without an update, or after 3 hours), the link stops showing them at that moment and they are removed within 5 minutes by a cleanup that runs every 5 minutes. The rest of the share is deleted about an hour after it ends (at most 65 minutes). To stop misuse, a count of how many shares your account started each hour is kept for 24 hours, removed by the same 5-minute cleanup.
How traffic data is anonymised
- Each trip gets a random trip code that is not linked to you or to any other trip.
- Your phone removes the first and last 300 metres of every trip, so your home and destination are not in the data, and drops any point where the GPS is less accurate than 30 metres.
- Raw points are kept for at most 48 hours, counted from when each point was recorded, to build the live traffic layer. After that only averages for each road segment are kept, and those cannot be traced to anyone.
How long we keep things
- Raw traffic points: 48 hours at most. Traffic averages per road segment: kept; they cannot be traced to anyone.
- Reports: until they expire, plus a short review period. Their link to your device ID, their note and their photo are removed 30 days after they expire, by a daily cleanup (so within 31 days). Report photos never attached to a report are deleted 8 hours after the upload was prepared, by a cleanup every 10 minutes (within about 8 and a half hours).
- Votes: with the report, until the report is deleted or you use Delete my data.
- Map issues, feedback, place reports and survey pins: their link to your device ID is removed after 30 days, by a daily cleanup (so within 31 days), and a place report's or survey pin's photo goes with that link. The rest is kept for review without any link to you.
- Reporter points: your total until you delete your data; your daily count until the end of the following day at most (a daily cleanup keeps only today's). The record of which report earned points from which confirming device is kept for at most 35 days; it is removed at once when the report's link to you is removed, and at the next daily cleanup once the report is no longer live.
- Usage counts: linked to your device ID for at most 24 hours (hourly cleanup), then kept only under a daily code that cannot be linked to you once its key is deleted, by the start of the second day after.
- Share my ETA: the position and destination until the share ends (within 5 minutes after an automatic end); the rest about an hour after that (at most 65 minutes); the start count for 24 hours.
- Counters that limit how many photos, votes or usage counts an account can send: two days at most (votes: two hours), removed by an hourly cleanup.
- Your account, device ID, privacy choices and trust score: until you use Delete my data. Saved places backed up to your account: until you turn the backup off or delete your data.
- On your phone: saved places until you remove them; saved trip history for 90 days, never uploaded. Route requests are not kept by the routing server.
Who processes it
- Supabase stores the data above for us (database, sign-in, photo storage and server functions).
- Fly.io runs our routing server in Ashburn, Virginia, in the United States. It receives the start and destination of a route you ask for, with no account or device ID, and does not keep them.
- Vercel hosts our website and the Share my ETA page. Like any web host, it sees the internet address of people who open them.
- Cloudflare delivers map updates when the app downloads new map tiles. It sees which part of the map is downloaded, but no account or device ID.
- Apple provides App Attest (see Proof that the app is genuine), Siri if you use it, and the App Store.
- Sentry receives crash reports, only if crash reports are on and crash reporting is switched on in the version you use. A crash report has the error, where in the app's code it happened, the phone model, iOS and app version, and a short list of the app's last steps. Before it is sent the app removes everything else it holds, including web addresses' query parts, positions, IDs, tokens and email addresses that it recognises, and it never adds your account, device ID or a screenshot. Crashes in the phone's native code are reported by Sentry's own iOS component, with the phone model, iOS version and the place in the code.
Where
On servers outside Bermuda, with contractual safeguards. Route requests go to our routing server in the United States.
Turning things off
- Settings, then Privacy. One switch, Share anonymous traffic data, stops sharing driving data straight away. Separate switches control spoken alerts in the background, saved trip history, the saved places backup, usage counts and crash reports.
- Delete my data, in Settings (also in Settings, then Privacy, and from the agree screen's Privacy and data link, before you agree), first stops any Share my ETA link you have running and withdraws your shared driving trips. Then it deletes your account and device ID with your privacy choices, votes, trust score, points, saved places, feedback and report photos, your usage counts still linked to you, and the counters that limit what your account can send, and removes your link to the reports, map issues and place reports you made. It also clears what Roadside keeps on your phone: saved places, routines, trip history and reports not yet sent. You can download a copy of your data from the same screen first.
- Your phone's own Settings also lets you turn location, microphone and speech recognition off at any time. The map, search and directions keep working.
Your rights
Under Bermuda's Personal Information Protection Act (PIPA) you can see your data, correct it, have it erased and withdraw any consent at any time. You can also complain to the Privacy Commissioner for Bermuda.
What we never do
We never sell your data. We never show your location to other people, except the approximate position you choose to send with Share my ETA. We never publish a report about a person. We do not track you across other companies' apps or websites, and there is no advertising in Roadside.
Contact
Questions or requests about your data: info@atlanticstrategies.co, or use Help and feedback in the app's menu.