Privacy Policy for the App "RUDX"
Translation for convenience. In case of differences, the German version prevails.
Draft for legal review · Last updated: 05.10.2026 · Version 1.0
We take the protection of your data seriously. RUDX connects drivers on shared tours – for this we need certain data, in particular your location during a tour. Here we explain in plain language which data we process, when, for what purpose and for how long, and what rights you have.
This policy applies to the RUDX app (iOS) and the associated services. It is based on the Swiss Federal Act on Data Protection (FADP/DSG) and – where applicable – the EU General Data Protection Regulation (GDPR/DSGVO), the UK GDPR, Canadian law (PIPEDA, in Québec Law 25 (Loi 25), in Alberta and British Columbia PIPA) and the data protection laws of the US states (including California: CalOPPA, CCPA/CPRA).
1. Who is responsible?
Brevity GmbH
Seestrasse 15
6052 Hergiswil NW
Switzerland
UID: CHE-152.350.548
Email for data protection matters: datenschutz@rudx.ch
Person in charge of data protection (also under Québec Loi 25): David Arturo Imminger-Perez, Chairman of the Management, reachable at the address above.
Representative in the EU (Art. 27 GDPR/DSGVO): will be appointed before the official launch in the EU and named here
Representative in the United Kingdom (Art. 27 UK GDPR): will be appointed before the official launch in the United Kingdom and named here
2. Key points at a glance
- Location only during the tour: Your position is shared with your group only during the time window of a tour in which you participate. We do not store live positions permanently.
- You decide what others see: You individually release your profile, garage, tours, photos and performance data. Emergency contact and health information are never public.
- No selling, no advertising, no tracking: We do not sell data, do not show personalised advertising and do not use any tracking or advertising SDKs.
- Mesh without servers: In mesh mode (without mobile network), data travels encrypted directly between the phones of the group, not via our servers.
- Delete at any time: You can delete your account and your data in the app.
3. What data we process, for what purpose and on what legal basis
Legal bases under the GDPR/UK GDPR (under Swiss law, a legal basis is generally not required; where the DSG requires consent, we obtain it):
Contract = Art. 6(1)(b) (provision of the app) · Consent = Art. 6(1)(a) or Art. 9(2)(a) · Legitimate interest = Art. 6(1)(f) · Legal obligation = Art. 6(1)(c) · Vital interests = Art. 6(1)(d) / Art. 9(2)(c).
3.1 Account and profile
- Data: name or display name, email (with "Sign in with Apple", possibly an anonymous relay address from Apple), profile picture, place of residence (optional), short bio, language, confirmation of minimum age, time of acceptance of the Terms of Use.
- Purpose: maintaining your account, making you recognisable in groups, sign-in.
- Basis: contract.
3.2 Vehicles (garage)
- Data: make, model, colour, power, top speed, off-road values (tilt limits, ground clearance, etc.), your own photos of your car. Cutting out the car from the photo is done on your device.
- Purpose: display in the convoy, limit warnings, speedometer scale, garage.
- Basis: contract. Note: when uploading, make sure that no licence plates or persons are recognisable if you do not want this.
3.3 Location during tours
- Data: GPS position, accuracy, speed, heading, altitude; in the background with the screen locked, as long as the tour is running (iOS then shows a blue indicator at the top).
- Purpose: convoy map, distances, turn instructions, notices at specific locations, calls for help with position, accident/rollover alarm with position.
- Who sees it: only the participants of the ongoing tour.
- Retention period: live positions are not stored permanently; they are deleted no later than 24 hours after the end of the tour. Only what you deliberately record is stored permanently (3.6).
- Basis: contract and your consent via the iOS location permission, which you can revoke at any time in the iOS settings.
3.4 Sensor data and safety features
- Data: acceleration (g-forces), tilt and lean angle from your iPhone's motion sensors.
- Purpose: inclinometer (off-road), accident and rollover detection, performance data.
- Processing: continuously on your device. Only a triggered alarm (type of event, measured value, position, time) is transmitted to the group, and only if you do not cancel it within 15 seconds.
- Basis: contract; in the case of an alarm, additionally vital interests.
3.5 Radio, voice notes and chat
- Data: voice recordings when pressing the push-to-talk button, voice notes, text messages, photos in the chat, time, sender.
- Purpose: communication within the group.
- Retention period: radio messages in the history according to your setting (10–120 minutes, default 30), then deleted; group chat until the message is deleted, the account is deleted or the group is dissolved.
- Basis: contract.
- Note: All participants of the tour hear radio messages. Do not say anything that not everyone should hear.
3.6 Recorded routes, recaps, performance data (optional)
- Data: recorded track, altitudes, speed, inclines, notices, analysis generated from them; tour recap (distance, driving time, your top speed); performance data (0–100, 0–200, 0–300 km/h, braking distance 100–0) and whether they were obtained in measurement mode on a closed circuit.
- Who sees it: top speed and performance data only you, unless you share them yourself or release them in your public profile. Shared routes are visible to others in "Discover" – without the exact start and destination addresses of your place of residence.
- Retention period: until you delete them or delete your account.
- Basis: contract; publication only with your consent.
3.7 Emergency contact and health information (optional, sensitive personal data)
- Data: name, relationship and phone number of your emergency contacts; optionally blood type, allergies, medication.
- Purpose: in an emergency, the group can help and reach your relatives.
- Visibility: You choose: organiser only, all participants of the ongoing tour, or no one. The number is only displayed after confirmation with a reason; the group sees who accessed it and why, and you are notified. Nothing is visible outside a tour.
- Basis: health information only with your explicit consent (DSG Art. 6 para. 7; GDPR/DSGVO Art. 9(2)(a)), which you can revoke at any time by deleting the information; in an acute emergency, additionally vital interests (GDPR/DSGVO Art. 9(2)(c)).
- Third-party data: Your emergency contacts are not users themselves. Please inform them that you are storing their number. We use their data exclusively for emergencies.
3.7a Heart rate during the ride (optional, sensitive personal data)
- Data: heart rate during a ride – from the Health app (e.g. Apple Watch, read only) or from your Bluetooth heart-rate strap – and from it the average per section and the heart rate in curves.
- Purpose: only your own recap. Not a medical device, no health statements.
- Where and who sees it: only on your iPhone, only you. Nothing goes to our server unless you tap "Share heart rate with the group" in the recap – then exactly the text shown (average, peak, sections) goes to the group chat. No advertising, no sale, no disclosure to third parties.
- Retention period: the detailed values for 30 days, after that only the summary in the recap; can be deleted with the ride or your account.
- Legal basis: your explicit consent (switching it on under Settings → Heart rate; FADP Art. 6(7); GDPR Art. 9(2)(a)), revocable at any time by switching it off.
3.8 Groups, feed, comments, photos
- Data: memberships, roles (admin, organiser), join requests, invitation codes, posts (photos, text, associated tour), likes, comments, reports, blocks.
- Purpose: community features, moderation, protection against abuse.
- Who sees it: posts are visible to the members of the group; on your public profile only if you have released "Photos".
- Retention period: until deleted by you; reports and moderation decisions up to 12 months for traceability and abuse prevention.
- Basis: contract; moderation additionally legitimate interest and legal obligations (including the EU DSA).
3.9 Public profile
- Data: what you release: garage, statistics (tours, kilometres on RUDX tours, elevation gain, trophies), tours driven, photos, performance data. Selectable audience: all RUDX users, only your groups, or no one.
- Basis: consent (through your release), changeable at any time.
3.10 Mesh connection without mobile network
- Data: position, hazards, calls for help, short voice messages, device name in the group.
- Processing: directly between the group's devices via Bluetooth/Wi-Fi (Apple Multipeer Connectivity), encrypted with a group key, relayed via other cars in the group. No server, no storage on our side. Messages are cached on the devices for a maximum of 10 minutes.
- Basis: contract.
3.11 Premium and purchases
- Data: subscription status, purchase date, term. Payment is processed by Apple; we do not receive any payment data.
- Basis: contract; retention of business records in accordance with legal obligations (in Switzerland 10 years).
3.12 Technical data, security and support
- Data: device type, iOS and app version, language, time zone, IP address when establishing a connection, push token, crash reports (if you share them via Apple), support requests.
- Purpose: operation, security, troubleshooting, support, notifications.
- Retention period: server logs for a maximum of 30 days.
- Basis: contract and legitimate interest (secure operation).
3.13 Weather, maps and routes
For weather, elevation profiles and maps, the app calls third-party services (section 5). In doing so, the coordinates of the requested location and, for technical reasons, your IP address are transmitted, but no account data.
3.14 What we do not do
No personalised advertising, no selling or "sharing" of data within the meaning of the CCPA/CPRA, no tracking SDKs, no recording of your screen usage, no automated decisions with legal effect. For this reason, Apple's App Tracking Transparency prompt does not appear.
4. Who receives data
- Other users: only as described in section 3 and released by you.
- Service providers (processors) who process data only on our instructions and are contractually obliged to protect it (list in section 5).
- Authorities: only if we are legally obliged to do so or if it is necessary to protect life and limb.
- Buyers/successors: in the event of a sale or merger of the company, subject to this policy.
5. Service providers and disclosure of data abroad
| Service | Purpose | Location / safeguards |
|---|---|---|
| Apple (App Store, Sign in with Apple, push notifications, Apple Maps) | Distribution, sign-in, notifications, maps and routes (road) | USA/worldwide; EU-US or Swiss-US Data Privacy Framework / standard contractual clauses |
| Infomaniak Network SA, Geneva (own server, operated by Brevity) | Account, groups, rides, chat, feed, files, routing, offline maps, calendar | Switzerland |
| Infomaniak Network SA, Geneva (own server) | Radio over the internet (encrypted with the group key) | Switzerland |
| Infomaniak Network SA, Geneva | Email (support, data protection requests) | Switzerland |
| Open-Meteo | Weather, elevation profiles (coordinates + IP only) | Switzerland/EU |
| Own map and routing server (OpenStreetMap data, Protomaps) at Infomaniak | Offline maps, routes incl. tracks | Switzerland |
If data is transferred to a country without an adequate level of data protection (pursuant to Annex 1 of the Swiss Data Protection Ordinance or the EU adequacy decisions), we rely on certified frameworks (Data Privacy Framework) or the standard contractual clauses of the European Commission including Swiss adaptations. You can obtain a copy on request.
6. How long we store data
| Data | Duration |
|---|---|
| Live positions | during the tour, deleted no later than 24 h after the end of the tour |
| Radio history | 10–120 minutes (your setting) |
| Mesh cache on devices | maximum 10 minutes |
| Account, garage, recordings, posts, chat | until you delete them or your account |
| After account deletion | immediately from the active system; from backups no later than after 30 days |
| Reports and moderation decisions | up to 12 months |
| Server logs | up to 30 days |
| Purchase/accounting records | in accordance with legal obligations (CH: 10 years) |
7. Data security
Encrypted transmission (TLS), encrypted mesh with group key, encrypted storage at the server provider, access rights based on the principle of least privilege, regular updates. In the event of a data security breach with a high risk, we inform the competent authorities (in Switzerland the FDPIC (EDÖB), in the EU the supervisory authority, in Canada the Privacy Commissioner or, in Québec, the Commission d'accès à l'information) and the data subjects in accordance with the legal requirements.
8. Your rights
You can at any time – free of charge, to the extent provided by law:
- request access to your data,
- receive a copy of your data in a common format (data disclosure/data portability),
- rectify incorrect data,
- have data erased or delete your account in the app,
- restrict the processing or object to it (in particular in the case of legitimate interest),
- withdraw consents (with effect for the future),
- in California and other US states: know what data we collect, request deletion, request correction, opt out of sale/sharing (we do not sell/share) – without discrimination; requests may also be made through an authorised agent,
- in Canada/Québec: access, rectification, withdrawal of consent, information about automated decisions (RUDX does not make any).
Requests to datenschutz@rudx.ch. We respond within 30 days (in exceptional cases with an extension as permitted by law) and may need to verify your identity.
Complaint to a supervisory authority: Switzerland: Federal Data Protection and Information Commissioner (FDPIC/EDÖB), www.edoeb.admin.ch · EU: the authority of your country of residence · UK: Information Commissioner's Office (ICO) · Canada: Office of the Privacy Commissioner of Canada, in Québec Commission d'accès à l'information, in Alberta/BC the respective Information and Privacy Commissioner · California: California Privacy Protection Agency.
9. Minimum age
RUDX is intended for persons aged 18 and over and is not directed at children. We do not knowingly collect data from children under 13 (USA, COPPA) or under 16 (EU). If we become aware of this, we delete the account.
10. Permissions on your iPhone
The app only asks when needed and explains each request: Location (convoy, also in the background during the tour), Microphone (radio, voice notes), Camera and Photos (car photos, tour photos, saving images), Motion (tilt, accident detection), Bluetooth and local network (mesh). You can change each permission in the iOS settings; individual features will then not be available. Health (reading heart rate, only if you switch it on), Bluetooth also for a heart-rate strap.
11. "Do Not Track" and Global Privacy Control
Since we do not track across apps or websites, there is nothing to switch off. We respect signals such as "Do Not Track" or "Global Privacy Control" as an objection to sale/sharing – which we do not engage in anyway.
12. Changes
We will amend this policy if the app or the law changes. We will announce material changes in the app; where necessary, we will obtain your consent again. The current version can always be found in the app under Settings → Legal.
Language versions: In case of differences, the German version prevails, unless the applicable law provides otherwise (in Québec, the French version is authoritative).