Privacy policy

Last updated 28 October 2026

Clan Of VTC is a map and community for off-road drivers in the GCC. This page says what we store about you, why, who else touches it, and how to get rid of it. Short version: we keep what the features need, we do not sell anything, and there are no ads or analytics trackers.

What we collect

• Your account. Email address and name. If you sign in with Google we also receive your Google profile picture and Google account id. If you sign up with email, we store your password only as a salted one-way hash.
• Your profile. Whatever you choose to fill in: handle, photo, city, country, contact details (WhatsApp, Instagram, extra emails), interests, and your vehicle and its build. Profiles are visible to other members.
• What you post. Pins and meets, routes, photos (with the map position you attach them to), posts, ratings, tags, rivalries, follows, friendships and blocks.
• Location, only when you use a feature that needs it.
  • To centre the map or the nearby feed on you. The map position stays on your device; the nearby feed sends a rough area to fetch posts and does not store it.
  • Going live. While you are broadcasting a drive, we record your position, speed and heading so the people you chose can see you and your trail. In the mobile app this continues with the screen locked, which your phone shows as an ongoing location notification, and it stops when you end the drive. A drive you stop can be saved as a route; otherwise the trail is kept with the drive record until you delete your account. The drive also appears as a card in the feed of the people who can see it, with the trail, its distance and speed, the colour and pointer you picked, and any short updates posted on it. You can delete a drive, and with it the card.
  • Journey photos. Photos you take on a drive — one at a time with the camera button, or automatically on an interval if you turn on auto snaps — are stored with the position and time they were taken and shown on that drive's card and map, to the same people who can see the drive. Auto snaps use the camera only while you have them on and the screen is on, with a live preview showing the whole time; nothing is recorded from the camera otherwise. You can delete any of your photos from the drive.
  • Tagging along. When you tag along on someone else's drive, we record that you joined it, when, and whether you came in your own truck. The driver and the others in that convoy see you on its roster. If you are live yourself when you join, your own drive becomes visible to that driver and convoy until either drive ends or you leave. Joining in your own truck also puts your position and trail on that drive's card, which is seen by everyone who can see the organiser's drive; only the stretch you drove while in the convoy is shown, and the organiser can end the recording for everyone in it. The record of who came along, and the updates posted on the drive, are kept with the drive.
• Signals. When you send a signal we store its name, the location you put the pin on, the optional place name, note, time and poll, and the list of friends it was sent to. When you answer one we store your answer (going, on my way, maybe, can't) and your vote, and we store the messages you write on it. A signal is kept on your timeline until you delete it or your account.
• Basic technical data. A session cookie (or, in the app, a stored session token) to keep you signed in, and request counters used to rate-limit expensive features. Our hosting provider sees standard request information such as IP address.

Who sees it

• Other members see your profile and what you post. Live drives are visible to your followers and friends by default; public visibility is opt-in. When you go live your followers get a notification unless you turn that off for the drive, and anyone tagged along on your drive can see it for as long as they are in the convoy.
• Signals are seen only by you and the friends you sent them to, who also see each other's answers, votes and messages on it. The sender sees who it went to and who has not answered yet. Friends you add later do not see signals you sent before.
• Service providers who run the infrastructure: Cloudflare (hosting, database, file storage), Amazon Web Services SES (sending account emails such as invites and password resets), and Google (only if you choose Google sign-in). Map fonts are loaded from Protomaps' public file host.
• Moderators see reports and the content reported, so they can act on them.
• We do not sell your data or share it for advertising.

Deleting your data

Delete your account any time from your profile (scroll to the bottom). It removes your profile and everything you created (pins, routes, photos, posts, ratings, drives and their trails, rivalries, follows and notifications) straight away. Reports you were the subject of are kept, without the link to your account, as a record of moderation decisions. If you cannot sign in, email us from the address on the account and we'll do it for you.

You can also delete any single pin, route, photo or post yourself, and you can ask us for a copy of your data.

Children

Clan Of VTC is for people aged 16 and over. We do not knowingly hold accounts for anyone younger.

Changes and contact

If this policy changes in a way that matters, we'll say so in the app before it applies. Questions or requests: hq@vtcclan.com.