Avyro · Evolute LLC

Privacy policy

Understand what Avyro keeps on your phone, what network features send, and the choices you have.

Last updated: October 7, 2026 · Applies to Avyro by Evolute LLC

Who we are and what this covers

Evolute LLC provides Avyro for iOS and Android. Contact hello@evolute-llc.com with privacy questions or requests. This policy covers the app and optional Family services. Family sign-in, purchase verification, and push delivery are not yet activated for general use. We describe their intended data flow separately below.

Information used on your device

With your permissions, Avyro uses precise location, timestamps, native speed and its reported accuracy, direction and location accuracy, and available motion readings to record trips and calculate driving summaries. Background location and motion access support recording and optional automatic detection while the screen is locked or another app is open. You can stop recording and change permissions in system settings.

Local records can include routes, start/end times, distance and duration, road names and posted limits, driving events and their locations, scores and assessment history, measurement diagnostics, route fingerprints, tags, favorites, driver/passenger choices, privacy zones, and app preferences. Core local recording and analysis do not require a Family account.

Network providers and when data leaves the phone

Local analysis does not mean the entire app is offline. Maps and package downloads make network requests. Providers operate under their own policies: Apple, Google, OSM Foundation, GitHub, and Cloudflare.

Optional Avyro Family

The current Family implementation is limited to US members aged 16 and over, with an adult household creator and adult supporter. Age bands are self-reported. When activated and chosen, Family uses Apple or Google account verification, a provider identifier and display name, session and household identifiers, membership and invitation records, sharing agreement versions, driver/passenger attribution, practice goals, and chosen sharing data. Check-ins contain trip status and timing without route coordinates. Coaching can include completed-trip summaries, scores, event counts, weekly briefs and selected event clips with a driver’s explanation. The routes level can additionally include completed routes filtered by privacy zones. Raw sensor streams, personal trip tags, addresses and route fingerprints are excluded from the Family trip projection.

Participants in the accepted agreement can see the information its level permits. Broader sharing requires both participants to accept; reducing or revoking sharing limits future access. Check-ins may be delayed. Apple/Google push services use device notification tokens and delivery information. Store verification uses purchase receipts or transaction/purchase identifiers to check subscription access. Family data is protected in transit with HTTPS and stored using Cloudflare services; it is not represented as end-to-end encrypted.

AI and advertising

Ask Avyro, where eligible, uses Apple’s on-device language model to interpret a driving question. Report facts are derived locally from retained trip records. Guided reports are available without conversational AI. Avyro does not send your questions or trip records to a cloud AI provider. We do not sell driving records or use them for targeted advertising. Map and platform providers may process service metadata as explained above.

Retention and security

Completed trip history and recording journals use local AES-GCM encryption, with keys stored through iOS Keychain or Android Keystore. Encryption does not protect data you deliberately export in readable form. Automatic raw-sample expiry is set to 90 days and runs when the app processes stored history; it is not a guaranteed background deletion at the exact deadline. Summaries, scores, road names, event/evidence coordinates, and route fingerprints may remain until you delete the drive.

iOS migration snapshots follow the app’s raw-removal and drive-deletion handling. Android can retain a separate encrypted migration backup; deleting an active drive or expiring raw samples does not currently guarantee removal from that backup. To remove Android’s local app files and backup, use system Settings → Apps → Avyro → Storage → Clear data. Device or external backups and files you exported are separate copies you control.

Family’s implemented service assigns a 90-day expiry to shared trip and review records and a 365-day expiry to archived weekly briefs. Maintenance removes expired records in bounded batches, so expiry is not an instant purge. Account deletion removes the Family account and associated sharing access through the service workflow. Provider transaction, security, legal, or backup records may be retained separately where necessary. Contact us for the scope of a specific request.

Your choices and requests

Manage recording permissions, automatic detection, notifications, privacy zones, sharing agreements, raw samples and individual drives in the app. Privacy zones hide relevant points in views and eligible sharing; they do not erase the local raw record. Summary-first export omits location details; a separately selected raw export can include locations inside privacy zones. Inspect exports before sending them.

See Delete account & data for local removal and account requests. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, or receive a portable copy. Email us with the request and your account identifier if applicable. We verify identity without requesting your password and explain any required retention or inability to access device-only records. You can also contact your local privacy regulator.

New drivers and families

Avyro is intended for licensed drivers and supervised learners permitted to drive under local law. It is not directed to children under 13, or under a higher minimum age required locally. Minors should use the service with permission and involvement from a parent or legal guardian. Family sharing must be visible and agreed; it must not be used for covert surveillance. Contact us if you believe a child’s information was provided improperly. See Family sharing.

This website and policy updates

The Evolute website uses hosting request logs and website analytics described in the Evolute website privacy policy. Those are distinct from local driving analysis. Services may process information in countries other than yours. We update this page when practices change and will provide additional notice or seek consent when required. No statement here overrides rights that applicable law gives you.