Legal

Data & retention

Last updated: July 21, 2026

This is the plain-language version of how Formation handles the data from a drive. The short version: live data is a temporary room, not a permanent trail. Here is exactly what that means.

Live location is never stored

While a convoy is active, your position is relayed between the members of that convoy in encrypted form so the crew can see each other on the map. It is not written to a database and there is no table of where you have driven. When the convoy ends, that live stream stops and nothing about your live position remains.

Convoy chat and the live route are wiped automatically

Convoy chat and the live route payload are ephemeral. Rather than living forever, they are removed from live systems automatically on a short, recurring cycle. You do not have to do anything for this to happen. The cleanup runs on its own.

Saved routes are the one thing you keep on purpose

A saved route is different from live location. If a host chooses to save a route, Formation stores the plannedroute, meaning the waypoints the host set, not anyone’s live GPS trail. It is opt-in and user-initiated, so it intentionally outlives the convoy cleanup, and it can be deleted at any time. Saving a route is a deliberate action, not automatic tracking.

Stats are totals, not a trip log

Formation shows totals like miles driven in convoys and meets attended or hosted. These are computed on your device and stored as running totals only. There is no per-trip, per-route, or position history behind them.

Legal and moderation holds

There is one important exception to the wipe. If content is reported for moderation, or if we are legally required to preserve it, that specific content is held so it can be reviewed or so we can meet a legal obligation. In other words, a hold always beats deletion. When content is removed, it is removed from live systems. A hold does not shred evidence that we are required to keep, and deletion never lets someone erase content that is under review.

Deleting your account

You can delete your account at any time in the App at Settings, Privacy & safety, Delete account. This removes your account and its associated data from live systems, subject to the limited holds described above.

For the full picture of what we collect and who we share it with, see the Privacy Policy.