Privacy Policy
Last updated 30 April 2026
Who we are
OnRoad is operated from Riga, Latvia. The data controller for the purposes of GDPR is the operating entity behind the OnRoad app. Reach us at support@onroad.lv.
What we collect
Account data: your email address, name, phone number, role (driver or mechanic), profile photo if you upload one. Service data: requests you create or accept, status updates, location pins, ratings and reviews, reports filed, and blocks placed. Device data: a device fingerprint used for fraud prevention, and a Firebase Cloud Messaging token used to notify you about jobs. Feedback data: if you send a suggestion through our website, we store your message and any email address you choose to include.
Why we collect it
To create and operate your account. To match drivers with mechanics. To enforce our community rules and prevent fraud. To meet legal obligations including tax record-keeping where applicable. To communicate with you about service-critical events.
Phone numbers and matched parties
When a mechanic accepts a request, we share both parties' phone numbers so you can call each other. After the job ends or is cancelled, the phone number is automatically redacted from the history view 72 hours later. Your phone number is never shared with any other party or with mechanics you have not been matched with.
How long we keep data
Accounts and service history are retained while your account is active. Reports are kept for 24 months for safety record-keeping. After account deletion we remove personal data and keep only the minimum required by law and a 12-month reserved-email marker for anti-fraud.
Your rights
You may request access to, correction of, or deletion of your data, and you may object to or restrict certain processing. Account deletion is available in Settings → Account. To exercise other rights, email support@onroad.lv. You may lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija).
Cookies and analytics
OnRoad does not use advertising cookies. We use Firebase Crashlytics to collect crash reports for stability, and minimal Firebase Analytics for product metrics; both can be disabled at the OS level.
International transfers
Our infrastructure runs on Google Cloud / Firebase. Data may be processed in EU and US data centres under Google's Standard Contractual Clauses.
Security
We use industry-standard encryption in transit and at rest. Uploaded images are stored in restricted-access buckets readable only by our team and Cloud Functions.
Children
OnRoad is not intended for users under the age of 18. We do not knowingly collect data from children.
Updates to this policy
We may revise this policy. Material changes will appear in the app before they take effect.
Contact
Privacy questions? Email support@onroad.lv.