Privacy Policy
Last updated 1 September 2026
Who we are
OnRoad is operated from Riga, Latvia. The data controller for the purposes of GDPR is the operating entity behind the OnRoad app. Reach us at support@onroad.lv.
What we collect
Account data: your email address, name, phone number, role (driver or mechanic), profile photo if you upload one. Location data: your precise location when you create a request or go online as a mechanic, so we can match you with someone nearby and so they can find you. Service data: requests you create or accept, status updates, ratings and reviews, reports filed, and blocks placed, including any photos and descriptions you add. Device data: a Firebase Cloud Messaging token used to notify you about jobs. Feedback data: if you send a suggestion through our website, we store your message and any email address you choose to include. Early-access data: if you ask for an invitation through the form on our website, we store your email address, whether you signed up as a driver or a mechanic, and the name and city if you give them. We use this only to send you an invitation to the test and to plan which regions to open next — never for a newsletter, and we do not share it. Ask us at support@onroad.lv and we will delete it.
Why we collect it
To create and operate your account. To match drivers with mechanics. To enforce our community rules and prevent fraud. To meet legal obligations including tax record-keeping where applicable. To communicate with you about service-critical events.
Phone numbers and matched parties
When a mechanic accepts a request, we share both parties' phone numbers so you can call each other. After the job ends or is cancelled, the phone number is automatically redacted from the history view 72 hours later. Your phone number is never shared with any other party or with mechanics you have not been matched with.
How long we keep data
Accounts and service history are retained while your account is active. Reports are kept for 24 months for safety record-keeping. After account deletion we remove personal data and keep only the minimum required by law and a 12-month reserved-email marker for anti-fraud.
Your rights
You may request access to, correction of, or deletion of your data, and you may object to or restrict certain processing. Account deletion is available in the app: drivers tap Profile → Delete account, mechanics tap Settings → Delete account. To exercise other rights, email support@onroad.lv. You may lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija).
Cookies and analytics
OnRoad does not use advertising cookies and does not use analytics. We use Firebase Crashlytics to collect crash reports for stability, which can be disabled at the OS level.
International transfers
Our infrastructure runs on Google Cloud / Firebase. Mechanic subscriptions are processed by RevenueCat and by Google Play, which receive your account identifier and purchase history; we never see or store your card details. Data may be processed in EU and US data centres under Google's Standard Contractual Clauses.
Security
We use industry-standard encryption in transit and at rest. Uploaded images are stored in restricted-access buckets readable only by our team and Cloud Functions.
Children
OnRoad is not intended for users under the age of 18. We do not knowingly collect data from children.
Updates to this policy
We may revise this policy. Material changes will appear in the app before they take effect.
Contact
Privacy questions? Email support@onroad.lv.