Privacy Policy

Road Dawg, Inc. Effective Date: May 11, 2026 Last Updated: May 11, 2026

1. Introduction

Road Dawg, Inc. ("Road Dawg," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have regarding your information when you use the Road Dawg mobile application, website at roaddawg.com, and all related features and services (collectively, the "Service").

This Privacy Policy is incorporated into and forms part of our Terms of Service. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

Key things to know upfront:

• You must be 18 or older to use Road Dawg.
• Your conversations with Max, our AI companion, are processed by AI systems to provide and improve the Service.
• We do not sell your personal information to third parties.
• We may share aggregated or anonymized data (which does not identify you) in the future for research, analytics, or commercial purposes.
• You have rights to access, correct, and delete your personal data.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: When you register, we collect your name, email address, date of birth (to verify you are 18+), and any other information you choose to provide.

Profile and Preferences: We collect your stated travel preferences, traveler personas (such as backpacker, luxury, or digital nomad), travel goals, dietary preferences, interests, and other profile information you provide during onboarding or setup.

User Content: Photos, reviews, trip notes, itineraries, and other content you submit to the Service.

Communications: Messages you send to us directly, including support requests, feedback, or survey responses.

Payment Information: If you subscribe to a premium tier, payment card details are collected and processed by our third-party payment processor. We do not store full payment card numbers.

2.2 Information Generated Through Your Use of the Service

Max Conversations: Your chat messages, queries, and interactions with Max, including follow-up messages, preference signals, and any corrections or feedback you give Max. These conversations are used to personalize your experience and improve Max over time.

Travel Activity: Places you search for, save, visit, or mark as visited; itineraries you create or view; trips you plan or complete; and time spent in specific destinations.

Usage Data: Features you use, pages you view, actions you take within the app, session duration, and interaction patterns.

Social Activity: Connections you make with other users (buddies), profiles you follow, and content you engage with.

2.3 Information Collected Automatically

Location Data: With your permission, we collect precise or approximate location data to provide location-relevant features such as nearby recommendations and real-time navigation assistance through Max. You can revoke location access at any time through your device settings.

Device Information: Device type, operating system and version, unique device identifiers, browser type, mobile network information, and app version.

Log Data: Server logs including IP address, access times, pages viewed, and referring URLs.

Cookies and Similar Technologies: We use cookies and similar tracking technologies to recognize you, remember your preferences, and understand how you use the Service. You can manage cookie preferences through your browser settings, though some features may not function properly without cookies.

2.4 Information From Third Parties

Connected Social Accounts: If you choose to connect social media accounts during onboarding (to help personalize your experience), we receive certain profile information from those platforms, subject to your privacy settings on those platforms.

Third-Party Data Sources:We receive data from providers such as Google Places, flight data APIs, and mapping services to power features of the Service, including Max's real-time recommendations. These providers have their own privacy policies.

3. How We Use Your Information

We use the information we collect to:

Provide and Operate the Service:

• Create and manage your account
• Power Max's conversational and recommendation capabilities
• Generate personalized travel recommendations, itineraries, and content
• Enable social features including buddies and following
• Process payments and manage subscriptions

Personalize Your Experience:

• Learn your travel preferences, tastes, and patterns over time
• Tailor Max's tone, recommendations, and responses to your traveler persona and history
• Surface content, places, and experiences relevant to your interests

Improve the Service:

• Analyze how users interact with the Service and with Max
• Train and refine our AI models using conversation data and behavioral signals (in accordance with Section 5 below)
• Identify bugs, performance issues, and areas for product improvement
• Conduct user research and testing

Communicate With You:

• Send transactional messages (account confirmation, password reset, subscription receipts)
• Send service-related updates and notices
• With your consent, send marketing communications about new features, offers, or news (you may opt out at any time)

Protect Safety and Security:

• Detect and prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service
• Comply with legal obligations

Legal and Compliance:

• Respond to lawful requests from law enforcement or regulatory authorities
• Establish, exercise, or defend legal claims

4. Max — AI Processing Disclosures

Max is a core part of Road Dawg. To be transparent about how your data powers Max:

4.1 Conversation Processing. When you interact with Max, your messages are transmitted to and processed by AI language model providers and our own systems. Conversations are used in real time to generate responses and are retained in your account to enable Max to remember context, learn your preferences, and improve over time.

4.2 Model Improvement. We may use de-identified or aggregated conversation data to train, evaluate, and improve our AI models. See Section 4.4 for your opt-out rights regarding model training.

4.3 Personalization (Required).Max builds a model of your preferences over time based on your conversations, stated preferences, travel history, and behavioral signals. This personalization — remembering that you hate buses, knowing you prefer boutique hotels, learning your budget range — is the core of what Max does. It is not possible to opt out of session and account-level personalization while using Max's core features. If you prefer not to have your data used to personalize your experience, you should not use the Service.

4.4 Model Improvement (Optional — You Can Opt Out). Separately from personalization, we may use de-identified or aggregated conversation data to train, evaluate, and improve Road Dawg's AI models over time. This is distinct from personalization: disabling model improvement does not affect Max's ability to remember your preferences or give you personalized recommendations. You can opt out of your data being used for model improvement at any time through your account settings under Privacy → Model Training.

Whether you opt in or out, we implement technical measures to minimize re-identification risk, and we do not share identifiable conversations with third-party AI providers for their independent model training.

4.5 No Sensitive Information in Chats. Please do not share passwords, payment credentials, government identification numbers, or other sensitive information in conversations with Max. Our AI systems are not designed to handle such information securely.

5. Sharing and Disclosure of Information

5.1 We Do Not Sell Your Personal Information. We do not sell, rent, or trade your personal information (information that identifies you individually) to third parties for their independent commercial use.

5.2 Aggregate and Anonymized Data. We may compile, share, license, or otherwise use data that has been aggregated or anonymized such that it cannot reasonably be used to identify you individually. Examples include anonymized travel trends, aggregate destination popularity, or broad behavioral patterns across our user base. We do not use such data in any manner designed to re-identify individual users. Aggregate or anonymized data may be shared with partners, researchers, or commercial counterparties. This is not personal information and is not subject to the same restrictions as your individual data.

5.3 Service Providers. We share personal information with third-party vendors and service providers who perform functions on our behalf, including cloud hosting (e.g., Amazon Web Services), analytics (e.g., PostHog), payment processing, customer support, and AI infrastructure. These providers are contractually required to use your information only as directed by us and consistent with this Privacy Policy.

AI Model Providers Specifically:Max's conversational capabilities rely on one or more third-party AI language model providers (which may include providers such as Anthropic or OpenAI, or others as our infrastructure evolves). Your conversations with Max are transmitted to these providers solely for the purpose of generating responses on our behalf. These providers operate under data processing agreements that prohibit them from using your identifiable conversation data for their own independent model training without your separate consent. We will update this section if our material AI provider relationships change.

5.4 Other Users. Certain information — such as your public profile, shared trips, and User Content — may be visible to other users of the Service depending on your privacy settings.

5.5 Business Transfers. If Road Dawg is involved in a merger, acquisition, asset sale, or similar transaction, your information may be transferred as part of that transaction. We will notify you of any such transfer and any resulting material changes to this Privacy Policy.

5.6 Legal Requirements. We may disclose your information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, or legal process; (b) protect the rights, property, or safety of Road Dawg, our users, or the public; or (c) detect, prevent, or address fraud, security, or technical issues.

5.7 With Your Consent. We may share your information for other purposes with your explicit consent.

6. Data Retention

We retain your personal information for as long as your account is active and for a reasonable period thereafter to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes or where anonymized copies are retained as part of aggregated datasets.

Backups and logs may retain information for up to 90 days following deletion.

You may request deletion of specific data at any time as described in Section 7.

7. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.

Correction: Request that we correct inaccurate or incomplete information.

Deletion: Request that we delete your personal information, subject to certain exceptions (such as legal obligations or legitimate business purposes).

Portability: Request that we provide your personal information in a portable, machine-readable format.

Objection / Restriction: Object to or request that we restrict certain processing of your personal information.

Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Marketing Opt-Out:You may opt out of marketing communications at any time by clicking "Unsubscribe" in any marketing email or by adjusting your notification settings in the app.

Location Data: You can revoke location access at any time through your device settings.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used and shared;
• Delete personal information we have collected from you (subject to exceptions);
• Correct inaccurate personal information;
• Opt out of the "sale" or "sharing" of personal information (we do not sell personal information, but we disclose this right for completeness);
• Non-discrimination for exercising your privacy rights.

To exercise your California rights, contact us at legal@roaddawg.com or through the privacy controls in your account settings. We will respond within 45 days of a verifiable request.

European and UK Residents (GDPR/UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the rights listed above and additional rights including the right to lodge a complaint with your local data protection authority.

Our legal bases for processing your personal information include:

• Contract performance: Processing necessary to provide the Service you requested;
• Legitimate interests: Processing for analytics, fraud prevention, security, and product improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your specific consent, including marketing communications and location access;
• Legal obligation: Processing necessary to comply with applicable law.

To exercise your EEA/UK rights or to withdraw consent, contact us at legal@roaddawg.com.

Mexico Residents (LFPDPPP)

If you are located in Mexico, your personal data is protected under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares ("LFPDPPP") and its regulations. You have the following ARCO rights:

• Acceso (Access): Request information about the personal data we hold about you and how it is being used;
• Rectificación (Rectification): Request correction of inaccurate or incomplete personal data;
• Cancelación (Cancellation): Request deletion of your personal data from our records, subject to applicable legal exceptions;
• Oposición (Opposition): Object to the processing of your personal data for specific purposes.

To exercise your ARCO rights, send a written request to legal@roaddawg.com. Your request must include: (a) your full name and contact information; (b) a description of the personal data involved and the right(s) you wish to exercise; and (c) any documentation that supports your request. We will respond within 20 business days of receiving a verifiable request.

You may also file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), the Mexican data protection authority, if you believe we have not handled your personal data in accordance with applicable law.

8. International Data Transfers

Road Dawg is a U.S.-based company. Your information is stored and processed in the United States and potentially other countries where our service providers operate. These countries may have data protection laws that differ from those in your country.

By using the Service, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

For transfers of personal data from the EEA or UK, we rely on appropriate transfer mechanisms including Standard Contractual Clauses approved by the European Commission.

For transfers of personal data from Mexico, we comply with the requirements of the LFPDPPP regarding cross-border data transfers, including ensuring that recipient parties maintain equivalent data protection standards to those required by Mexican law.

9. Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and security monitoring.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and are not responsible for the actions of third parties who obtain your information in an unauthorized manner despite our safeguards.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

10. Children

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately at legal@roaddawg.com and we will promptly investigate and delete any such information.

11. Third-Party Services and Links

The Service integrates with third-party platforms, APIs, and data sources. These third parties have their own privacy policies, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you interact with through Road Dawg.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will notify you by email or through a prominent notice in the Service prior to the changes becoming effective. The "Last Updated" date at the top of this policy reflects the most recent revision.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our privacy practices, please contact us at:

Road Dawg, Inc. legal@roaddawg.com

We will respond to your inquiry within a reasonable timeframe and, for rights requests, within the time period required by applicable law.

This Privacy Policy was last updated on May 11, 2026. Prior versions are available upon request.