Prevooh Privacy Policy

Effective date: July 23, 2026 · Last updated: July 23, 2026

iWAT LLC ("we", "us"), a Pennsylvania limited liability company, operates Prevooh — a driving companion that runs on your device, including in the background, and uses your location and direction of travel to detect the road you are on and alert you to traffic delays and incidents ahead. This policy explains what we collect, how we use, disclose, and (in de-identified/aggregated form or with your consent) monetize it, and the choices and rights you have. Your use of the App is also governed by our Terms of Use & EULA. If you do not agree with our practices — including our commercial use and monetization of data described below — do not use the App.

1. Who we are

Controller / Business: iWAT LLC, 760 E. Washington St., Chambersburg, Pennsylvania 17201, United States. Privacy contact: customercare@iwatllc.com. If we appoint an EU/UK representative or DPO, details will appear here: [IF APPLICABLE].

2. Information we collect

• Account details. Email address and a securely hashed password; preferences and support correspondence.
• Precise location & movement. With your permission, GPS location, speed, heading, altitude/course, timestamps, and — including in the background / "always" — location history, trip segments, and inferred travel corridors and habitual routes.
• Places you set. Optional "Home"/"Work" locations, stored on your device, so the App can pause monitoring when you are parked there.
• Device & technical data. Device model, OS, app version, language/time zone, IP address, carrier/connection, crash logs, diagnostics, and performance metrics.
• Identifiers. Account and device identifiers (e.g., IDFV), a push token if you enable alerts, and — where available and permitted — advertising identifiers (IDFA/GAID).
• Usage & interaction data. Features used, alerts shown / opened / dismissed, session timing, settings, and consent/permission states.
• Inferred & derived data. Traffic conditions observed across users, congestion models, audience segments, and commercial analytics.
• Data from third parties. Map/traffic providers, analytics, attribution, and fraud-prevention vendors, which we may combine with App data.

3. How we use your information

• Provide the core service — detect your current road and alert you to delays and incidents ahead, and pause monitoring when appropriate.
• Operate, secure, and improve — diagnostics, analytics, model development, feature testing, fraud/abuse prevention, and support.
• Communicate — service messages and, if you opt in, push alerts; marketing where permitted.
• Create aggregated and de-identified data — traffic-flow, congestion, road-usage, and travel-pattern analytics that do not identify you.
• Commercialize data (a primary business purpose) — use, license, sell, and disclose aggregated and de-identified insights to third parties (e.g., transportation, mapping, planning, insurance, logistics, research, and market partners) to generate revenue; and, only with any consent required and subject to your opt-outs and platform rules, use personal data or identifiers for advertising, measurement, or partner programs.
• Comply with law and enforce our agreements.

Legal bases (EEA/UK): consent (precise/background location and certain advertising/sale/sharing); performance of our contract; our legitimate interests in operating, securing, improving, and commercially developing the Service where not overridden by your rights; and legal obligation. You may withdraw consent at any time.

4. How we disclose, share & sell information

• Service providers (hosting, analytics, crash reporting, messaging, support) processing data on our behalf under contract.
• Map & traffic providers — Google Maps Platform (road geometry/name), TomTom Traffic (incidents), Firebase Cloud Messaging (push, if enabled) — which process data under their own policies.
• Recipients of aggregated / de-identified data for the commercial purposes above (this data does not identify you).
• Advertising / measurement partners, where enabled and consented.
• Business & commercial recipients of personal information — where lawful, permitted by platform policy, and consistent with your consent and opt-outs; some sharing for advertising may be a "sale" or "sharing" under state law (see Section 6).
• Legal, safety & corporate transactions — to comply with law, enforce terms, protect rights/safety, or as part of a merger, financing, or sale of assets.

5. Sensitive information & precise location

Precise geolocation may be treated as sensitive personal information under some laws. We collect it to provide the core delay-avoidance function and, where permitted by law and your consent/settings, for commercial analytics. We do not knowingly sell or disclose data revealing your visits to sensitive locations (such as health/reproductive-health facilities, places of worship, shelters, schools, addiction-treatment or military/correctional facilities, union halls, or political gatherings) for advertising, profiling, or unrelated commercial purposes, and we may filter, generalize, or delete such data. Where a law gives you the right to limit use of sensitive personal information, you may exercise it as described below.

6. "Sale" and "Sharing" of personal information (U.S. state laws)

Laws in California (CCPA/CPRA) and states such as Virginia, Colorado, Connecticut, Utah, Oregon, and Texas define "sale" and "sharing" broadly. Depending on how advertising and data features are configured, some of our practices may be a "sale" or "sharing" of personal information. You have the right to opt out. Use the "Do Not Sell or Share My Personal Information" control and other data settings in the App's Privacy settings, or contact customercare@iwatllc.com. Where legally required, we honor recognized universal opt-out preference signals such as Global Privacy Control. We do not knowingly sell or share the personal information of individuals under 16.

7. Your choices & rights

• Permissions. Location (including background), motion, and notifications are opt-in and can be changed or revoked anytime in device settings; core features may stop working.
• In-app privacy controls. Consent and data toggles — including data-sharing/monetization and "Do Not Sell or Share" — are in Privacy settings.
• Advertising identifiers. You can limit ad tracking or reset your advertising ID in device settings, and (on iOS) via App Tracking Transparency.
• State privacy rights. Depending on where you live: to know/access, delete, correct, and port personal information; opt out of sale/sharing and targeted advertising/profiling; limit use of sensitive personal information; appeal a denial; and non-discrimination for exercising rights. Authorized agents may submit requests where permitted; we may verify your identity.
• EEA/UK rights. Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent; and to lodge a complaint with a supervisory authority.
• Deletion. Delete your account and associated personal data in the App (Account → Delete account) or by contacting us. Deletion is irreversible and does not affect already aggregated/de-identified data. Deleting the App does not by itself delete data already transmitted to us.

Withdrawing consent or opting out may limit our ability to offer a free or data-supported Service.

8. Retention

Recent location history on your device is purged automatically after a limited window. Data on our servers is kept only as long as needed for the purposes above, security, dispute resolution, and legal obligations — location history and derived datasets may be retained [RETENTION PERIOD — e.g., "as long as reasonably necessary for commercial and operational purposes, which may be multiple years"]. When we de-identify or aggregate data, we may retain and use it indefinitely.

9. Security

We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and you use the Service at your own risk.

10. Third-party SDKs & store disclosures

The App may include third-party SDKs (maps, analytics, crash reporting, attribution, and — if enabled — advertising), which may collect device and usage data under their own policies. In Apple's App Privacy details and Google Play's Data Safety form we declare what data is collected, how it is used, and whether it is used for tracking or sold; those summaries should be read together with this policy and must match it.

11. "Do Not Track"

There is no uniform "Do Not Track" standard for mobile apps, and we do not respond to browser DNT signals, except that we honor legally required opt-out preference signals as described in Section 6.

12. International transfers

We may process and store data in the United States and other countries. Where required for transfers from the EEA/UK/Switzerland, we use appropriate safeguards such as Standard Contractual Clauses.

13. Children

Prevooh is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect their data. If you believe we have, contact us and we will take appropriate steps to delete it.

14. Changes to this policy

We may update this policy; material changes will be posted here with a new effective date and, where required, notified in the App. Continued use after the effective date means you accept the update, except where separate consent is required.

15. California / state privacy notice (summary)

• Categories collected: identifiers; commercial information; internet/electronic activity; precise geolocation; sensory/device and diagnostic data; inferences.
• Purposes: providing and securing the Service; debugging; analytics and research; quality control; advertising/marketing; and sale/licensing of aggregated, de-identified, and (where consented) personal data.
• Categories that may be sold or shared: identifiers; device/network data; app activity; geolocation; inferences (subject to your opt-out and, for personal precise location, to any required consent).
• Sensitive personal information: precise geolocation — collected for functionality and, where allowed, commercial purposes; you may limit or opt out where the law provides that right (Section 5–6).
• Retention: see Section 8.

16. Contact

Privacy questions or requests: customercare@iwatllc.com, iWAT LLC, 760 E. Washington St., Chambersburg, Pennsylvania 17201, United States.