01Overview
RoadPulse Helper is a companion utility for the RoadPulse road-condition sensor. Its only function is to transfer road-data files that the sensor has already recorded. The app connects to the sensor over a locally emitted Wi-Fi network, downloads the recorded files to your device, and then uploads them to our cloud storage using your device’s internet connection (typically your mobile data). Files are held on the device only temporarily during a transfer and are deleted after a successful upload.
This policy explains what data is involved, how we handle it, and the rights you have under applicable law.
02Data we process
The app itself does not collect analytics, advertising identifiers, or usage tracking of any kind. It does not create user accounts. Road-data files are stored on your device only briefly while a transfer is in progress and are removed once the upload completes.
The files recorded by the RoadPulse sensor, which the app uploads on your behalf, may contain the following categories of data:
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Sensor device ID (e.g. RoadPulse-7A3F) | Attribute data to a specific sensor unit |
| Precise geolocation | GPS latitude / longitude | Geolocate detected road events (e.g. potholes) |
| Sensor / device data | Accelerometer (ax, ay, az), speed, GPS quality | Detect and characterize road-surface events |
| Timestamps | UTC and device time | Order and locate samples |
Under California law (CPRA) and several other US state laws, precise geolocation is treated as “sensitive personal information.” We use it only for the road-condition purpose described above and do not use it to infer characteristics about you. We do not intentionally associate uploaded sensor files with a named individual, and our customer-facing outputs are not designed to identify individual drivers or isolate individual movement patterns. However, raw sensor files may contain device IDs, timestamps, and precise geolocation, and therefore may be treated as personal data where such information could reasonably be linked to an identifiable person.
The app requires Local Network access on your device solely to reach the sensor at its fixed local address. It does not scan, index, or transmit anything else about your local network.
03Sources of data
We receive this data from the RoadPulse sensor hardware associated with you, by means of the app uploading the files that the sensor recorded.
04How we use the data (purposes)
- To detect and map road-surface conditions (such as potholes and rough surfaces).
- To operate, maintain, secure, and improve the RoadPulse service.
- To comply with legal obligations and enforce our terms.
We do not sell your personal information, we do not “share” it for cross-context behavioral advertising, and we do not use it for advertising or profiling that produces legal or similarly significant effects. We do not carry out solely automated decision-making that produces legal effects concerning you. We do not intentionally associate sensor files with a named individual. However, sensor data may be treated as personal data where a device ID, vehicle assignment, route, timestamp, or customer records could reasonably identify a driver or operator; for that reason, we do not intend to allow isolation of specific patterns in any external documents.
05Legal bases (GDPR)
Where the EU GDPR applies, we rely on one or more of the following:
- Consent (Art. 6(1)(a)) for processing precise location data, obtained before such processing where required;
- Legitimate interests (Art. 6(1)(f)) in operating and improving a road-condition monitoring service, balanced against your rights; and/or
- Legal obligation (Art. 6(1)(c)) where we must process data to comply with law.
You may withdraw consent at any time (see Section 10); this does not affect processing carried out before withdrawal.
06Recipients and processors
Uploaded files and derived data are stored using Supabase, our hosting and database provider, which acts as a data processor on our behalf under a Data Processing Addendum that incorporates the European Commission’s Standard Contractual Clauses. Supabase hosts data on Amazon Web Services (AWS) infrastructure and maintains ISO/IEC 27001 certification. RoadPulse may share aggregated, de-identified, or anonymized road-condition outputs with clients, customers, and other relevant stakeholders. These outputs are intended to describe road infrastructure conditions, not individual driver behavior or individual travel patterns. We may also disclose data to competent authorities where required by law, or to professional advisers, in each case subject to appropriate safeguards. We do not otherwise share your data with third parties.
07International transfers
We host data in the following regions: EU (Frankfurt / eu-central-1) for EEA users and US (N. Virginia / us-east-1) for US users, to the extent that we have knowledge and control over it. Should there be concerns about your data specifically, we will try to accommodate, where possible, to store it on a regionally advantageous.
Wherever possible, we keep data from users in the European Economic Area (EEA) within an EEA hosting region, so that no data transfers outside the EEA occur. Where personal data is nonetheless transferred outside the EEA or your home jurisdiction (for example, because our processor is a US company or provides support from the US), we rely on lawful transfer mechanisms, principally the European Commission’s Standard Contractual Clauses, together with a transfer impact assessment and any supplementary measures needed to protect the data.
08Retention
We keep uploaded sensor data only for as long as necessary for the purposes described in this policy, after which it is deleted or anonymized.
09Security
Cloud uploads use HTTPS/TLS. Local transfer from the RoadPulse sensor to the iPhone occurs over the sensor’s local Wi-Fi network and is used only for short-range file transfer. The sensor Wi-Fi is password-protected/WPA2.
Cloud storage is private and not publicly listable, and access to raw data is restricted to authorized personnel. No method of transmission or storage is completely secure, but we take reasonable technical and organizational measures appropriate to the risk.
10Your rights
10.1 EU / EEA (GDPR)
You have the right to: access your data; rectify inaccurate data; erase data (“right to be forgotten”); restrict or object to processing; data portability; withdraw consent; and not be subject to solely automated decision-making. You also have the right to lodge a complaint with your local data protection supervisory authority. We encourage you to contact us first so we can try to resolve the issue.
10.2 United States (California and other state privacy laws)
Depending on your state, you may have the right to: know and access the personal information we collect; delete it; correct it; opt out of sale or sharing; and limit the use of sensitive personal information. We do not sell or share your personal information, and we do not use or disclose sensitive personal information beyond the purposes permitted by law. You will not be discriminated against for exercising your rights. You may use an authorized agent to submit a request.
10.3 How to exercise your rights
Contact us at privacy@roadpulse.ch. Because sensor data is keyed to a device identifier, please include your device ID (e.g. RoadPulse-7A3F) so we can locate your data. We will verify your request as required by law and respond within the timeframes the applicable law requires.
11Children
RoadPulse Helper is designed for and directed at adults and is not intended for children. We do not knowingly collect personal information from children under 16 in the EEA and/or under 13 in the United States. The app does not create accounts or ask users to enter personal details, so no age verification step is imposed on users. If you believe a child has provided us data, contact us and we will delete it.
12“Do Not Track” and global privacy signals
The app does not track users across third-party apps or websites, so it does not respond to browser “Do Not Track” signals. We honor recognized opt-out preference signals where reasonably possible and/or required by applicable law.
13Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the “Effective date” above and, where appropriate, by notifying users.
14Contact
Privacy requests and questions: support@roadpulse.ch
Incorporation Notice
RoadPulse AG is currently in formation. Once RoadPulse AG is incorporated and entered in the Swiss commercial register, these Terms may be assigned or transferred to RoadPulse AG, and RoadPulse AG may assume the rights and obligations under these Terms.