Privacy Policy

CRUIZE ("CRUIZE," "we," "us") is a social app for adult car enthusiasts to find nearby cruisers, meet up, and roll together in convoys. This policy explains exactly what data we collect, why, who we share it with, how long we keep it, and how you can control or delete it. CRUIZE is intended only for people 18 and older.

1. Information we collect

Information you give us

• Email address — used to create and secure a single account and to sign you in. It is never shown to other users.
• Date of birth — you enter it once, on your phone, so the app can check you are 18 or older. It is checked on your device and is not sent to us or stored on our servers. We keep no record of your birth date.
• Handle and profile — the display name you choose (not your real name), and anything you optionally add such as your car, a short bio, or a profile photo. Profile photos are stored in a public bucket, which means the photo's web address will load for anyone who has that exact link, signed in or not. Deleting your account deletes the file.
• Meets you host — a meet you post as Open is visible to everyone using CRUIZE, anywhere: its name, its exact address, its time, your handle, and anything you write in the description. A meet you post as Shielded shows only a rough area on the map; its exact address is stored separately and released only to people you approve. Who has RSVP'd is shown to the host and to the other people going. Do not post your home address as an Open meet.
• Posts you share — a post stores the photo or clip itself, your handle, the caption you write, whether you set it to Public or Only me, whether a clip is muted, and whether it came from the in-app camera or your photo library. Post location is a separate, per-post choice that is off by default on every post — it is never remembered from your last post, and the app will not attach it at all while you are standing inside one of your off-grid zones, or while it is still working out whether you are. If you do turn it on for a post, that post keeps a coordinate rounded to two decimal places — roughly a kilometre across, a neighbourhood rather than a street — together with the neighbourhood name shown in the posting sheet. A Public post, its photo or clip, its caption and its location are visible to everyone using CRUIZE.
• Other content you create — community spots you submit (visible to every CRUIZE user); comments you leave on posts (stored with your handle and visible to anyone who can see that post); the posts you like; who you follow and who follows you; direct messages you send; feedback you send (stored with your handle, the app version and your device's browser identification string, so we can reproduce what you saw); and the people you block or report, and the posts and comments you report (we keep the blocked handle and your report reason).

Information collected automatically

• Location — while the app is open and you have granted permission, we collect your device location to place you on the live map and enable convoys. We do not collect location in the background when the app is closed. Going hidden stops your live position being collected or stored at all. Post location is a different thing and follows different rules: if you turn it on for an individual post, that post keeps a coordinate rounded to about a kilometre, it is stored with the post, it stays after you go hidden, and it goes only when you delete that post, use You → Privacy → Remove location from my posts, or delete your account.
• Off-grid zones — the areas you mark to hide yourself (for example near home or work) are stored with your account so they survive reinstalls and moving to a new phone. They are visible only to you — never to other users — and are deleted with your account.
• Sign-in protection — when you sign in with your handle instead of your email, we record that handle, the IP address the attempt came from, a count of failed attempts and a timestamp, so we can pause sign-in after repeated wrong passwords. We never record the password you typed. These records are deleted 15 minutes after the last attempt.
• Error reports — when something breaks, the app sends us the error message, where in the app it happened, the app version, your device's browser identification string, and a small snapshot of app state at that moment (whether location was on, whether you were online, your speed). We use these only to fix bugs. They are never used to profile you or shown to other users, and when you delete your account they are unlinked from you and the device string and state snapshot are erased.
• In-app notifications — waves, convoy invites and meet RSVPs sent to you are stored so they can be shown to you in the app. Deleted with your account.

2. How your location is protected

• Off by default. You start hidden. You cannot go visible at all until you have marked at least two off-grid zones, and going visible takes a deliberate confirmation.
• Fuzzing. When you are visible, the position other nearby drivers see is snapped to a grid roughly a kilometre across, with a fixed offset unique to you, so it is never your street and never your exact coordinates. Treat it as "which neighbourhood," not as anonymous — the offset is consistent, so the same area maps to you each time.
• Convoys. Inside a convoy, the people in that convoy see your precise, live position — that is what a convoy is for. Nobody outside the convoy can see it. It stops the moment you leave, and positions older than a minute cannot be read at all.
• Off-grid zones. Areas you mark (like home or work) hide you completely — inside them your live position is deleted, not just hidden.
• Post location. Per post, off by default, and never joined to your live position — a post's coordinate is taken once at the moment of capture and is never used to place you on the map. It is refused outright inside an off-grid zone, and refused while the app has not yet confirmed where your zones are. Unlike everything else in this list it is persistent: there is no 60-second read window and going hidden does not remove it. You → Privacy → Remove location from my posts strips the coordinate and the neighbourhood name from every post you have already made, and keeps the posts.
• Hidden. Turns off all location sharing while keeping the rest of the app usable. It is the default, and one tap at any time.
• Blocked users. Someone you block cannot read your live position, your messages, your profile row or your posts — that is enforced by the database, not just by the app — and they are removed from your map, your inbox, your convoys and your meet rosters, and you from theirs. Blocking also breaks the follow in both directions and clears the notifications the two of you generated for each other. Things that are public to every CRUIZE user, such as your handle or an Open meet you host, stay visible to them as they are to everyone else.

3. How we use your information

• Provide the core features: the map, meets, convoys and direct messages.
• Verify you are one real adult and keep spam and abuse off the app.
• Keep the service secure, debug problems, and prevent fraud.
• Review reports and enforce our Community Guidelines.

We do not use your information for third-party advertising, we do not sell or rent your personal data, and we do not build or share advertising profiles about you.

4. Who we share it with

We share data only with the service providers that operate the app for us, and only as needed to run CRUIZE. Each is contractually required to protect your data to the same standard set out in this policy:

• Supabase — authentication, database and file hosting (stores your account, profile photo, meets, spots, messages, and your posts — their photos and clips, captions, comments and likes). Data is stored on servers in the United States.
• Vercel — hosts and serves the app.
• CARTO — serves the map basemap tiles. Coarse location is sent to load the map around you.
• Mapbox — supplies the map software the app runs, and powers address and place search. Loading the map software sends your device's IP address and the app's web address to Mapbox. When you search for a place, your search text and coarse location are sent too. If you turn post location on for a post, the rounded coordinate is sent to Mapbox once to look up the neighbourhood name shown on that post.
• Apple — distributes the app through the App Store. We do not receive your Apple ID.

We may also disclose information if required by law, to respond to lawful requests, or to protect the safety of our users. We do not share your data with any third-party AI service.

5. Your rights and choices

• Delete your account. Open You → Delete account and type DELETE to confirm. This permanently removes your account and everything tied to it: your profile and photo, the meets you hosted and their addresses, your RSVPs, spots you submitted, your posts and their photos and clips, your captions, your comments, your likes, who you follow and who follows you, your messages, your live position, your off-grid zones, your blocks, your notifications, and the feedback you sent. It is immediate and cannot be undone. We keep only the abuse reports filed about you, with your handle, for as long as needed to keep other users safe.
• Withdraw consent. You can turn off location sharing anytime by going hidden, or in iOS Settings → Privacy → Location. The rest of the app still works.
• Access or correct. Email us to request a copy of, or a correction to, your data.
• Get a copy of your data. Email us and we will send you everything we hold about you, in a readable file, within 30 days.
• Object or complain. You can ask us to stop processing your data, and if you are in the EU or UK you can complain to your national data protection authority.

Depending on where you live (for example, California under the CCPA/CPRA, or the EU/UK under the GDPR), you may have additional rights to access, correct, port, or delete your data, and to object to certain processing. Contact us to exercise them; we will not discriminate against you for doing so.

Do Not Sell or Share My Personal Information

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We have not done so in the preceding 12 months, and we do not do so for anyone under 16. There is nothing for you to opt out of — but if that ever changes we will tell you before it does and give you a way to say no.

6. Data retention

• Your live position is overwritten every few seconds and cannot be read by other users after 60 seconds. It is deleted when you go hidden, when you enter an off-grid zone, and when you delete your account.
• Your account, profile, photo, meets, RSVPs, spots, posts, captions, comments, likes, follows, messages, zones, notifications, feedback and blocks are kept while your account exists, and deleted when you delete it.
• A post's coordinate lives exactly as long as the post does. The live-position rules above do not apply to it: it is not overwritten, it has no 60-second read window, and going hidden or entering an off-grid zone does not delete it. Delete the post, use You → Privacy → Remove location from my posts, or delete your account.
• Sign-in failure records are deleted 15 minutes after the last attempt.
• Error reports are kept while we need them to diagnose and fix the problem. When you delete your account they are unlinked from you and the device string and state snapshot are erased the same moment.
• Abuse reports are kept for up to 2 years after the report, so we can see repeat behaviour, even if the reporter or the reported person deletes their account.

Limited records may be kept longer only where the law requires it, and only for as long as it requires.

7. Security

Data is encrypted in transit. Every table enforces database-level access rules, so your private data — your messages, your off-grid zones, your blocks, your notifications, the exact address of a Shielded meet — is reachable only by you and the people you have shared it with. Things that are meant to be public, such as your handle, an Open meet or a community spot, are readable by other people using CRUIZE, by design. The photos and clips in posts are kept in a private bucket and are served only through short-lived signed links, so a post's file address stops working on its own — it does not keep loading forever the way a profile photo's address does. Administrative access is limited. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.

8. Children

CRUIZE is strictly for adults 18 and older. At sign-up you enter your date of birth and confirm you are 18 or older; that check runs on your device and we do not keep your birth date. We do not knowingly collect data from anyone under 18, and we do not use age-verification documents. If we learn an account belongs to someone under 18, we remove it and delete its data. If you believe a minor is using CRUIZE, contact us.

9. Changes to this policy

If we make material changes, we will update the date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

10. Contact us

Questions, requests, or privacy concerns: support@feintproductions.com. CRUIZE is operated by FEINT Labs LLC, a Nevada limited liability company.

11. Our legal basis for using your data (EU/UK)

• To perform our contract with you — your account, handle, profile, meets, messages, convoys, the map, and your posts, captions, comments, likes and follows. Without these the app cannot work.
• Your consent — your device location. You grant it in iOS, you can withdraw it any time in iOS Settings or by going hidden, and the rest of the app keeps working. A post's coordinate rests on a separate consent: a per-post switch that is off by default, which you can withdraw for past posts with You → Privacy → Remove location from my posts.
• Our legitimate interests — keeping the app secure and stable, preventing fraud and abuse, and reviewing reports. We balance this against your privacy and keep the data minimal.
• Legal obligation — where a law requires us to keep or disclose something.

CRUIZE is operated from the United States and your data is stored in the United States. If you are in the EU or UK, transfers rely on the Standard Contractual Clauses our providers have in place. Questions, or a complaint: support@feintproductions.com. You may also complain to your local data protection authority.