RoadTripBuddy privacy policy

1. Who is responsible

ARROW HEALTH SOLUTIONS PTY LTD (trading as Arrow Health Solutions), ABN 27 698 339 454, ACN 698 339 454 (“Arrow Health Solutions”, “we”, “us”) is the organisation responsible for this policy for the RoadTripBuddy app published under bundle ID au.com.arrowhealthsolutions.roadtripbuddy.

This policy covers the RoadTripBuddy app and its Share Extension on Apple platforms. It does not replace Apple’s own privacy terms for Apple services (MapKit, Apple Maps, speech recognition, App Store). Our marketing website privacy policy covers arrowhealthsolutions.com.au when you browse that site in Safari.

2. Summary

• Trip play data (routes you enter, checklist progress, game scores, alphabet answers you save) is stored on your device with Apple’s SwiftData / iOS storage. In the current app we do not operate an Arrow Health account or upload that database to Arrow Health Solutions servers.
• Optional microphone use is only for speaking Alphabet answers. Where the device supports on-device speech recognition, the app requires on-device recognition. Otherwise Apple’s speech recognition service may process audio under Apple’s terms.
• Optional place search, map pins, route preview helpers, and “Open in Maps” use Apple MapKit / Apple Maps. Those features send map queries or coordinates to Apple, not to Arrow Health Solutions game servers (we do not run game servers for this app today).
• We may receive anonymous product analytics (install identifier, app version, and allowlisted usage events such as trip created or game opened) on Arrow Health Solutions’ Google Cloud systems so we can improve the app. This is first-party analytics — not a third-party ad or marketing SDK.
• We do not use third-party advertising or marketing-analytics SDKs in the current RoadTripBuddy build.
• We do not track you across other companies’ apps or websites for advertising.

3. Information stored on your device

Depending on how you use the app, RoadTripBuddy may store on the device:

• Trip origin and destination text, legs, and related trip metadata you enter or import
• Checklist items and whether you marked them spotted
• Bundled facts, trivia, and alphabet content progress and answers you save
• Appearance preference (system / light / dark)
• Which content packs are marked owned on this device (including preview unlocks before StoreKit goes live)
• Temporary Apple Maps URLs waiting to be imported, when you use the Share Extension (shared App Group storage on the device)

Deleting the app removes its local data under normal iOS behaviour. Arrow Health Solutions cannot remotely delete or retrieve your on-device SwiftData store because we do not host it.

4. Microphone and speech recognition

If you tap the microphone in the Alphabet game, iOS will ask for Microphone and Speech Recognition permission. Speech is used only to fill the Alphabet answer for that turn.

• On-device when available. If the device reports support for on-device recognition, RoadTripBuddy sets recognition to require on-device processing.
• Apple’s service otherwise. If on-device recognition is not available, audio may be sent to Apple’s speech recognition service to produce text, under Apple’s privacy policy and terms. We do not receive that audio on Arrow Health Solutions servers.

You can refuse microphone or speech permission and type answers instead. You can change permissions later in iOS Settings → RoadTripBuddy.

5. Maps, places, and imports

When you use these optional features, processing is performed by Apple technologies on or via Apple:

• Typing a place name into search (MapKit search completer / local search)
• Dropping a pin on a map and reverse-geocoding that coordinate to a place label
• Opening a landmark in the Apple Maps app
• Importing an Apple Maps link (including resolving some short links over HTTPS to Apple hosts before the app reads origin/destination)

RoadTripBuddy does not request continuous location permission and does not implement turn-by-turn navigation or a speed display. Map features are for choosing trip endpoints and passenger landmark links.

6. Sharing a trip with family

If you use Share with family, RoadTripBuddy builds an invite that includes route origin and destination text, content pack identifiers, a trip group identifier, leg index, and a timestamp. That payload is encoded into a roadtripbuddy:// link and handed to the iOS share sheet you choose (for example Messages or AirDrop).

Arrow Health Solutions does not operate a join server that receives those invites. Anyone you share with can see the invite contents. Do not put sensitive personal information in origin/destination fields.

7. Anonymous product analytics (first-party)

To understand which passenger features are used and where the experience is confusing, some RoadTripBuddy builds (including development and internal TestFlight builds) send anonymous product analytics to Arrow Health Solutions. App Store builds keep this off until we enable it after store privacy labels are complete. When enabled, events are posted over HTTPS to our Google Cloud ingest service and stored in BigQuery for analysis by Arrow engineering.

Typical data includes:

• A random install identifier stored in the device Keychain (not your Apple ID or email)
• App version and build number
• Allowlisted event names and small properties (for example that a trip was created, a checklist item was spotted, or which game was opened) — not trip origin/destination text, Alphabet answers, microphone audio, or family invite payloads

We use this information for app functionality and product improvement only. We do not sell it, use it for cross-app advertising, or share it with advertising networks. Retention target is about 24 months. Contact us if you have questions about these practices.

8. Purchases (when enabled)

Content packs are prepared for App Store distribution. While StoreKit purchase flow is not live, unlocks may be previewed on device for testing. When paid packs ship, Apple will process payment through the App Store. We would receive entitlement/status information through Apple’s commerce mechanisms — not your full card number.

9. What we do not do in the current app

• No Arrow Health Solutions user account or password inside RoadTripBuddy
• No CloudKit sync of your trip database in the current build
• No third-party advertising SDK
• No third-party marketing-analytics SDK (for example Mixpanel, Amplitude, or AppsFlyer)
• No sale of personal information
• No HealthKit / clinical data collection

10. Children and families

RoadTripBuddy is designed for families travelling together. A parent or carer should control the device, App Store account, and microphone permission. The app is a passenger entertainment product, not a service directed at collecting children’s data for Arrow Health Solutions.

11. Overseas processing

On-device storage remains on your device. Anonymous product analytics are processed on Google Cloud systems operated for Arrow Health Solutions (which may include regions outside Australia). When you use Apple MapKit, Apple Maps, or Apple speech recognition (if on-device recognition is unavailable), Apple may process information in regions Apple operates. See Apple’s privacy documentation for those services. Opening our support or privacy pages in Safari is subject to our marketing-site privacy notice (which may describe website analytics on that site).

12. Security

We rely on iOS data protection for on-device storage, HTTPS for our analytics ingest, and Apple’s transport security for Apple service calls you trigger. Our ingest endpoint uses access controls and rate limiting to reduce abuse, and we monitor for unusual traffic so we can respond. The shared app credential used for ingest is an abuse-prevention control, not a substitute for stronger edge protections if traffic grows. No method of storage or transmission is perfectly secure. Protect your device with a passcode and keep iOS updated.

13. Access, correction, and complaints

Because trip and game data live on your device, the practical way to remove them is to delete or reset the app data on that device. Deleting the app also stops new analytics events from that install. For privacy questions about Arrow Health Solutions’ practices, contact us using the details below. You may also have rights under the Australian Privacy Act 1988, including making a complaint to the OAIC if you are not satisfied with our response.

14. Changes

If we add accounts, cloud sync, new SDKs, or new permissions, we will update docs/DATA_PRACTICES.md in the product repository, update this page, and refresh the date above. Material changes will also be reflected in App Store privacy nutrition labels where required.

Privacy contact

Privacy requests and questions about this statement: privacy@arrowhealthsolutions.com.au

ARROW HEALTH SOLUTIONS PTY LTD (trading as Arrow Health Solutions) · ABN 27 698 339 454 · ACN 698 339 454. Main business region: QLD 4165.

Complaints

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC): OAIC privacy complaints.