Privacy Policy

Last Updated: November 4, 2026

Highway Copilot Technologies, LLC ("Highway Copilot," "we," "our," or "us"), an Illinois limited liability company, respects your privacy and is committed to protecting your personal information. This Privacy Policy ("Policy") explains how we collect, use, store, share, and protect your information when you use the Highway Copilot mobile application and related services (collectively, the "Services").

By accessing or using our Services, you agree to this Policy. If you do not agree with our practices, do not use the Services. This Policy is incorporated into and subject to our Terms of Service.

1. Information We Collect

We collect the following categories of information:

1.1 Information You Provide

• No Account Required: You can use the Services without creating an account. The application does not ask for your name, email address, or password.
• Preferences and Saved Exits: Your settings, saved exits, and trip history are stored on your device and are not sent to our servers, except for the few settings needed to answer a request (for example, how long you plan to stop).
• Ratings and Stop Surveys: Exit ratings and any comments you submit, and your answer when the application asks what kind of stop you made. These are not linked to your name, device, or any account.
• Communications: Information you provide when you contact us for support or other inquiries.
• Payment Information: Subscription payments are processed through Apple App Store or Google Play Store. We do not directly collect or store your payment card details; the application checks with the app store only whether you have an active subscription.
• Waitlist Sign-Up: If you join the waitlist on our website, we collect the email address you enter and use it only to tell you when the Services launch.

1.2 Information Collected Automatically

• Location Data: With your permission, the application uses your device's precise geographic location (GPS coordinates) to provide exit recommendations and navigation. This is essential to the core function of the Services. To find exits and weather along your trip, the application sends your planned route (a series of coordinates from your starting point to your destination) to our servers. Routes are used to answer that request; they are not saved to our database or linked to any account or device identifier.
• Device Information: Your platform (iOS or Android) and application version, which the application sends when it starts to check whether an update is required.
• Stop Data: When analytics is turned on in the application's Settings (it is on by default), the application sends a short record each time you stop during a trip: when the stop happened, how far into the trip, the time and distance since your last stop, the exit, and the distance remaining. These records carry no name, account, or device identifier. You can turn analytics off at any time in Settings.
• Usage Data: When analytics is turned on in the application's Settings (it is on by default), the application records how its features are used: which screens and features you open, settings you change, when a trip starts and ends (with its distance and length in broad ranges, such as "25–100 miles"), which alerts were shown, and views and outcomes of the subscription screen. These records are tagged with a random identifier generated on your device. That identifier is not linked to your name, an account, your Apple ID, or your purchases. Usage data never includes your location, route, destination, place searches, or anything you type or say. Turning analytics off stops these records and discards the identifier; turning it back on starts a new one.
• Log Data: Our servers and hosting providers automatically record technical information about requests, such as IP address, request time, and errors, to keep the Services running and secure.
• Cookies: Our website does not use cookies or analytics. It loads fonts from Google Fonts, which receives your IP address when you visit.

1.3 Information from Third Parties

• Mapping Data: Location and mapping data from Apple Maps and Google Maps.
• Business Data: Information about businesses and points of interest from third-party data providers, including OpenStreetMap.
• Weather Data: Current and forecasted weather information from third-party weather services.

2. How We Use Your Information

We use your information for the following purposes:

3. AI-Generated Content

3.1 How We Use AI. We use a third-party AI service, OpenAI, to write the short descriptions of exits shown in the application. These descriptions are generated in advance from public information about the businesses at each exit, not from anything you enter.

3.2 What We Send to AI Providers. Nothing about you. Your location, route, voice input, ratings, and other information are not sent to OpenAI or any other AI provider.

3.3 Exit Scores. Exit scores and recommendations are calculated by our own servers and models, not by a third-party AI service.

3.4 Changes. If we add features that send your information to an AI provider, we will update this Policy before those features launch.

4. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating the Services, including cloud hosting (Amazon Web Services), mapping services (Apple, Google), weather services, and product analytics (PostHog, which receives usage data and processes it only on our behalf). These providers are contractually required to use your information only for the purposes we specify.
• Mapping Providers: Your location data is shared with Apple Maps and/or Google Maps to provide navigation services, subject to their respective privacy policies.
• Speech Recognition: If you use voice input, your device's speech recognition service (Apple on iOS, Google on Android) processes your audio under its own privacy policy. We do not receive or store audio recordings.
• Weather Providers: Our servers send points along your route, without any identifier, to weather services to retrieve forecasts and alerts.
• Legal Requirements: When required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
• Aggregated and De-identified Data: We may share aggregated or de-identified data that cannot reasonably be used to identify you, such as aggregate exit quality statistics or general usage trends.

We do not sell your personal information to third parties. We do not share your personal information with third parties for their own direct marketing purposes.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specifically:

• We do not keep accounts. Trip history, saved exits, and settings are stored on your device and remain there until you remove the application.
• Routes sent to our servers are used to answer the request and are not saved to our database.
• Stop data, exit ratings, and survey answers carry no personal identifier and are retained indefinitely to improve the Services.
• Usage data is retained for up to one year and then deleted.
• Waitlist email addresses are retained until you ask us to remove yours.
• Server logs are kept only as long as needed to operate and secure the Services.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest (AES-256).
• Secure cloud infrastructure hosted on Amazon Web Services (AWS) with access controls and monitoring.
• Regular security assessments and updates.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. Any transmission of information is at your own risk.

7. Your Rights and Choices

7.1 Location Permissions

You can control location permissions through your device settings. However, disabling location access will prevent the Services from providing exit recommendations and navigation, which are the core functions of the application.

7.2 Information on Your Device

You do not need an account to use the Services. Trip history, saved exits, and settings are stored on your device, and removing the application deletes them. You can stop sending stop data and usage data by turning off analytics in the application's Settings. To ask about or remove information you have sent us, such as your waitlist email address, contact us at privacy@highwaycopilot.com.

7.3 Communications

You may opt out of promotional communications by following the unsubscribe instructions in such communications or by contacting us. We may still send you transactional communications related to your account and the Services.

7.4 Push Notifications

You may disable push notifications through your device settings at any time.

8. Your Privacy Rights by Jurisdiction

8.1 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt Out of Sale: We do not sell personal information. If this changes, we will provide notice and an opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at privacy@highwaycopilot.com. Because the information on our servers is not linked to your name or an account (usage data carries only a random identifier generated on your device), we may be unable to match it to you; we will tell you if that is the case.

8.2 European Economic Area (EEA) Residents (GDPR)

If you are an EEA resident, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. You also have the right to withdraw consent at any time and to lodge a complaint with your local supervisory authority. To exercise these rights, contact us at privacy@highwaycopilot.com.

8.3 Illinois Residents

We comply with all applicable Illinois privacy laws. If you are an Illinois resident and have questions about your privacy rights, please contact us at privacy@highwaycopilot.com.

9. Children's Privacy

The Services are not directed to children under 13, and children under 13 may not use them. Users between 13 and 18 (or the age of majority where they live) may use the Services only with the consent of a parent or legal guardian, as described in our Terms of Service. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe we have collected information from a child under 13, please contact us at privacy@highwaycopilot.com.

10. Third-Party Services and Links

The Services integrate with and may contain links to third-party services, including Apple Maps, Google Maps, weather providers, and business listing services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through the application. Key third-party privacy policies include:

• Apple Maps: https://www.apple.com/legal/privacy/
• Google Maps: https://policies.google.com/privacy
• Amazon Web Services: https://aws.amazon.com/privacy/
• PostHog: https://posthog.com/privacy

11. International Data Transfers

Your information is primarily stored and processed in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries where our service providers maintain facilities. By using the Services, you consent to the transfer of your information to the United States and other countries, which may have different data protection laws than your country of residence. Where required, we will implement appropriate safeguards for international data transfers, such as standard contractual clauses.

12. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no industry standard for DNT compliance, the Services do not currently respond to DNT signals. We will update this Policy if a standard for DNT is established.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy and, where practicable, by providing notice through the application. Your continued use of the Services after any changes constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Highway Copilot Technologies, LLC
Email: privacy@highwaycopilot.com
Website: https://highwaycopilot.com

For privacy-related complaints, you may also contact the applicable regulatory authority in your jurisdiction.