How TORQ uses your data.

00 In short

01 Who we are

TORQ is published by BrilliantZero Technologies Private Limited (“BrilliantZero,” “TORQ,” “we,” “us,” or “our”). We operate the TORQ mobile application and the related marketing and support website. For purposes of the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), BrilliantZero is the “business.” For purposes of the EU and UK GDPR, BrilliantZero is the “controller” of personal data processed through the Services described here.

02 Scope

This policy applies to the TORQ iOS application, the TORQ website (including torq-socialdrive.vercel.app), and any related online services that link to this policy (together, the “Services”). It does not apply to third-party websites, applications, or services that we do not operate, even if you reach them through TORQ.

03 Summary at a glance

• We collect account information, vehicle information, drive and location information, device information, photographs you upload, push-notification tokens (if enabled), analytics and crash diagnostics, and support correspondence.
• We use that information to run TORQ, authenticate you, generate drive summaries and statistics, support social features you choose to use, send notifications, prevent fraud and abuse, and improve the product.
• We do not sell your data, and we do not share it with third parties for their own marketing or advertising purposes.
• The only disclosures we make are to service providers that run TORQ on our behalf (such as Supabase, Apple, Google, PostHog, and Sentry), which may use the information only to provide those services to us, and disclosures required by law.
• You have rights to access, correct, delete, port, and restrict certain processing of your personal information. Email us to exercise those rights.

04 Categories of personal information we collect

Framed using common privacy-law categories:

A. Identifiers — Email address, display name, username, account identifier, sign-in provider identifier (for example Apple or Google), device identifiers, and IP address.

B. Customer records — Account profile, garage / vehicle profile (make, model, year, nickname, photos), and saved drives.

C. Commercial information — A record of features you use inside the app. If we introduce paid features (such as TORQ Pro), transaction data may be processed by Apple or another payment processor and added to this category.

D. Internet or other electronic network activity — App and website interactions, session timestamps, screen views, feature use, crash reports, diagnostic logs, and referring URLs.

E. Geolocation data (precise) — Precise device location while drive recording is active, or while location permission is granted for drive detection features you enable. This may include latitude, longitude, course, speed, accuracy, altitude where available, and timestamps. We treat precise geolocation as sensitive personal information.

F. Sensory or audiovisual information — Photographs you upload (profile or vehicle). We do not record audio or video through TORQ.

G. Inferences — Inferences drawn from your activity, such as totals, streaks, milestones, personal records, and driving profile or “fingerprint” style summaries derived from your history.

H. Sensitive personal information — Precise geolocation and account credentials. We use sensitive personal information only as needed to provide and secure the Services.

We do not knowingly collect government identifiers, biometric identifiers for identification, health information, financial account numbers, racial or ethnic information, religious beliefs, union membership, sexual orientation, or genetic data.

05 How we collect personal information

• Directly from you. When you create an account, complete onboarding, add a vehicle, upload a photo, start or confirm a drive, follow friends, send a support message, or otherwise interact with TORQ.
• Automatically from your device. Device information, app interaction information, crash and diagnostic logs, and, with your permission, precise geolocation data.
• From third parties. If you sign in with Apple or Google, we receive a limited identifier and the information you authorize that provider to share. We may also receive aggregated performance information from analytics and infrastructure providers.

06 Why we use personal information

• Provide the Services. Create and authenticate accounts, store vehicles and drives, generate routes and statistics, power crew and ranking features, and deliver notifications you enable.
• Manage your account. Honor your settings, respond to support requests, and communicate operational information.
• Safety and abuse prevention. Detect, investigate, and prevent fraud, harassment, impersonation, and other misuse.
• Enforce our policies. Enforce our Terms of Use and safety rules.
• Product research and improvement. Understand how TORQ is used, debug issues, and improve features, including using de-identified or aggregated data for internal analysis. We do not package your identifiable data into datasets for sale.
• Corporate transactions. Evaluate or execute a merger, acquisition, financing, reorganization, sale of assets, or similar transaction.
• Legal compliance. Comply with applicable law and respond to lawful requests.

07 Location data

TORQ depends on precise location data for its core functionality. Depending on the permissions and settings you choose, TORQ may record drives you start manually and/or detect drives automatically (if you enable auto-detect features). During an active drive, TORQ may collect latitude, longitude, course, speed, accuracy, altitude where available, and timestamps. These points are used to compute distance, duration, routes, and related stats attached to your account and selected car.

We do not auto-expose your live location to other users as a default social feature. Speed data is treated as personal unless a future closed-course or other expressly disclosed context applies. You can delete previously recorded drives and your account from inside the app where those controls are available.

We treat precise geolocation as sensitive personal information under applicable law. See Your rights below for how to limit or delete location-related data.

08 How we share your data

We do not sell your personal information, and we do not share it with third parties for their own purposes. Disclosure happens only in limited circumstances:

• Service providers and processors. Vendors that perform services on our behalf under contracts that restrict their use of the information to providing those services to us. These currently include cloud and backend infrastructure (Supabase / Postgres, Auth, and Storage), Apple Inc. (Sign in with Apple, App Store, MapKit / Core Location on device), Google LLC (Sign in with Google, where used), analytics (PostHog), and error monitoring (Sentry).
• Other TORQ users. If you follow friends, appear on crew or ranking features, or share cards, information you choose to make visible can be seen by other TORQ users according to product features.
• Corporate transactions. If BrilliantZero is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar event, personal information may be transferred as part of that transaction, subject to this policy or with notice where required by law.
• Legal requirements. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and security of TORQ, our users, or the public.
• With your direction or consent. If you ask us to share information or we obtain consent for a specific disclosure not described above.

09 We do not sell or share your data for advertising

BrilliantZero does not sell your personal information and does not share it for cross-context behavioral advertising as those terms are used in CCPA/CPRA and comparable US state privacy laws. We do not use your information for targeted advertising networks, and we do not run profiling that produces legal or similarly significant effects about you.

Because we do not sell or share personal information for advertising, there is generally nothing to opt out of. If your browser transmits a Global Privacy Control (“GPC”) signal when interacting with our website, we honor it, and our practices already meet what the signal asks for.

Categories look-back (summary)

10 Your privacy rights

Depending on where you live, you may have some or all of the following rights:

• Know / access — Confirm whether we process your personal information and obtain a copy.
• Correct — Correct inaccurate personal information.
• Delete — Request deletion, subject to legal exceptions. You can also delete your account in the app (Profile → Settings → Delete Account) where available.
• Portability — Receive a copy in a portable format where required by law.
• Opt out of sale or sharing — We do not sell or share for advertising, so there is nothing to opt out of.
• Limit sensitive personal information — Ask us to limit use of precise geolocation to what is necessary to provide TORQ.
• Opt out of targeted advertising and certain profiling — We do not run those practices as described in this policy.
• Appeal — If we deny a privacy request, you may appeal by replying to our written decision.
• Non-retaliation — We will not deny you Services or provide a different quality of service solely because you exercised a privacy right.

How to exercise your rights

Email torqdrive.app@gmail.com from the email address associated with your TORQ account. We may verify your identity before responding. We aim to respond within 45 days of a verifiable request (or the period required by applicable law), and may extend that period when reasonably necessary.

EU / UK GDPR rights

If you are in the EEA, UK, or Switzerland, you also have rights to restrict processing, object to processing based on legitimate interests, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority. See the EU / UK supplement below.

11 Retention

We retain personal information for as long as your account is active or as needed to provide the Services. When you delete your account, we initiate deletion of associated app data from active systems, subject to a short recovery or processing window and normal backup cycles (typically up to about 90 days for encrypted backups). Deleted records are not restored from backups unless required for disaster recovery, and we re-apply deletion when a backup is restored.

We may retain de-identified or aggregated statistics for product and operational purposes. We may also retain information longer where necessary to comply with law, resolve disputes, enforce agreements, prevent fraud or abuse, or meet tax, accounting, or regulatory requirements.

12 Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit (TLS), access controls, and monitoring through our infrastructure providers. No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately.

13 International data transfers

BrilliantZero Technologies Private Limited is based in India. When you use TORQ, personal information may be transferred to, stored in, and processed in India, the United States, the European Union, or other countries where we or our service providers (including Supabase, PostHog, Sentry, Apple, and Google) maintain facilities. Those countries may have different data-protection laws than your own.

Where required for transfers from the EEA, UK, or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses (and the UK Addendum where applicable), together with supplementary measures as needed.

14 Children's privacy

TORQ is not directed to children. The Services are intended for users who are old enough to use the App Store and who can lawfully use a driving-related app in their jurisdiction (generally at least 17, or the age of legal majority / licensed driving age where higher). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without required parental consent, we will delete it promptly. Parents or guardians may contact us to request investigation and deletion.

15 Third-party links and services

TORQ relies on, links to, or interoperates with third-party platforms, including Apple iOS and Apple services, Google sign-in (where used), Supabase, PostHog, and Sentry. Your interactions with those services are governed by their own privacy policies and terms.

16 Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date and provide additional notice through the Services, by email, or by other reasonable means. Continued use after the effective date constitutes acceptance of the updated policy, except where additional consent is required by law.

17 Contact

Privacy questions and rights requests: torqdrive.app@gmail.com

Controller: BrilliantZero Technologies Private Limited

18 European Union and United Kingdom supplement

This section applies to individuals in the EEA, UK, or Switzerland.

Lawful bases

• Contract — Processing necessary to provide TORQ features you request (GDPR Art. 6(1)(b)).
• Legitimate interests — Operating, securing, and improving TORQ, preventing fraud, and internal analytics, where not overridden by your rights (Art. 6(1)(f)).
• Legal obligation — Where processing is required by law (Art. 6(1)(c)).
• Consent — Where required (for example certain device permissions), which you may withdraw at any time (Art. 6(1)(a)).

You may lodge a complaint with a supervisory authority in your country of residence or work. We would appreciate the chance to address your concerns first at the contact above.

19 California supplement (CCPA / CPRA)

At or before collection, we collect the categories listed in Section 4 for the purposes in Section 6. We do not sell or share personal information for cross-context behavioral advertising. We retain information for the periods described in Section 11. Sensitive personal information (including precise geolocation) is used only to provide and secure the Services, not to infer characteristics about you for advertising.

California Civil Code §1798.83 (“Shine the Light”): we do not disclose personal information to third parties for their direct marketing purposes.

20 Related policies

See our Terms of Use for the agreement that governs your use of TORQ, and Support for help getting in touch.