Drove Terms of Service

Last updated: 29 April 2026

These are the terms under which you can use Drove, a live bike-ride tracking application. By creating an account or joining a ride, you agree to these terms.

If you have a question about anything below, email petrepopescu21@gmail.com before using the service.

1. Who you are agreeing with

You are agreeing with Petre Popescu, the operator of Drove, based in Romania. Throughout this document, "we", "us", and "Drove" mean Petre Popescu acting as the operator of Drove.

2. What Drove does

Drove lets organisers run group bike rides — they create an event, invite riders by QR code or invite link, and watch every rider live on a shared map until the ride ends. Riders see each other on the same map in real time. There is also a "free ride" mode where you track your own ride without an event around it.

The service exists primarily for cyclists in Romania, but it is available to anyone in the EU.

3. You must be 16 or older

You may not use Drove if you are under 16. Romanian law sets the digital age of consent at 16, and we do not have a parental-consent flow. When you create an account or join a ride, we ask you to confirm you meet the minimum age. If you are under 16, stop using the service and ask a parent or guardian to email us so we can delete your data.

4. Accounts

There are three ways you might be signed in to Drove. The Privacy Policy explains the data we hold at each tier; this section explains what they are from your point of view.

• Anonymous mobile user (the default on iOS and Android). When you first install the app and open it, Drove creates an anonymous account for you in the background — no email, no sign-in screen, no password. That account is what lets you join rides, see your own history, and persist settings on the device. You can use Drove like this indefinitely. If you uninstall the app you lose access to that anonymous account; we cannot recover it.
• Signed-in mobile user. From inside the app you can choose to link a Google or Apple identity to your anonymous account (Profile → Sign in). This lets you recover your account on a new device, and is required for some features that need a stable identity (for example, riding under the same name across devices, or organising private events).
• Organiser web user. Event organisers sign in to the admin dashboard at drove.vercel.app via Google or Microsoft single sign-on. This is the only way to access the organiser tools.

We do not handle your password — sign-in is delegated to Google, Apple, or Microsoft. You are responsible for keeping your underlying Google/Apple/Microsoft account secure. If your Drove account is used without your permission, email us as soon as you notice. We will help you regain control.

If you join a ride anonymously by QR code, you are using a short-lived authentication token bound to that one ride, on top of whichever account tier you are at. The token expires when the ride ends. You can use the same QR code to rejoin if you lose your phone signal mid-ride.

5. The service is location tracking — that is the whole point

When you join a ride, your live GPS position is sent to our servers and shown to the ride organiser and to the other riders for the duration of that ride.

There is no version of Drove that does not collect your location. Sharing your live location with the organiser and the other riders is the service. If you do not want to share your live location, do not join the ride. You can stop sharing at any time by tapping "Leave" in the app, which immediately stops uploads from your device.

This use of your location is processed on the legal basis of performance of a contract under GDPR Art. 6(1)(b). It is not based on consent, because you cannot meaningfully use the app without it.

What we collect, how long we keep it, and what your rights are is set out in the Privacy Policy.

6. What you may not do with Drove

You agree that you will not:

• Use Drove to track other people without their knowledge — for example, by giving someone your phone, or by signing them up under a fake name.
• Pretend to be someone else, including someone you have invented.
• Try to break into other accounts, evade rate limits, scrape the service, or attack the infrastructure.
• Use the service for illegal purposes, including unsafe or illegal road behaviour, organising activities prohibited under Romanian law, or any activity that would put participants in foreseeable danger.
• Upload abusive, illegal, or rights-infringing content to any text or image field, including display names, ride names, broadcast messages, and ride-story videos.
• Attempt to identify or de-anonymise other riders beyond what the service shows you.
• Use Drove for commercial purposes (such as paid guided rides) without our written agreement. [LEGAL REVIEW]

We may suspend or delete an account that violates these rules. If we delete the account, the deletion is permanent and follows the erasure rules in the Privacy Policy.

7. Riding safely

Drove shows you a map and tells you where other riders are. It does not:

• give you turn-by-turn navigation,
• tell you whether the road ahead is safe,
• warn you about traffic, weather, or hazards,
• replace your responsibility to ride safely and follow the rules of the road.

You are responsible for your own safety and the safety of those around you. Always follow Romanian traffic law, wear appropriate equipment, and pay attention to the road, not your phone.

We are not liable for any consequences of your use of the service while cycling, including but not limited to injuries, accidents, fines, or property damage. Cycling is a physical activity that carries inherent risk, and using Drove does not change that.

8. The service is provided "as is"

Drove is operated as a small project by a single person. We try hard to make it work well, but:

• We do not guarantee that the service will be available at any particular time.
• We do not guarantee that GPS tracking will be accurate. GPS accuracy depends on your device, the weather, and your surroundings.
• We do not guarantee that the live map will update in real time if your network connection is poor.
• We do not guarantee that data we have promised to delete is deleted from every backup, replica, and cache instantly — but we will delete it from the live system on the timescales given in the Privacy Policy and from backups within a reasonable additional period.

To the maximum extent permitted by law, we exclude all warranties, express or implied. We do not exclude liability where Romanian law does not allow us to.

9. Things you upload

If you upload an avatar image, a tenant logo, or a ride-story video, you keep ownership of it. By uploading it, you give us the right to store it and serve it to other users of the service in the way the feature is meant to work. You confirm you have the right to upload it.

If you upload illegal or rights-infringing content, we may remove it without notice and may delete the account that uploaded it.

10. Free service, paid features

Drove is currently free to use. We may introduce paid features later. If we do, we will explain clearly which features cost money and how to pay for them, and we will not retroactively put paid gates around features you were already using.

11. Closing your account

You can delete your account at any time, from Settings → Privacy → Delete my account. The deletion is immediate, complete, and irreversible:

• Your account, profile, GPS tracks, ride history, and any rides you organised lose your authorship attribution.
• You will be removed from any tenant memberships.
• You will be signed out of every device.

The exceptions are explained in the Privacy Policy: a small log of the fact that you deleted (a one-way hash, no identifying information) is kept for 1 year so that we can answer audit questions.

If you are the only owner of a tenant with other members, you must transfer ownership before you can delete. If you are the only super-admin of the platform, the deletion will be refused.

12. We can also close your account

We can suspend or delete your account if:

• you have violated these terms (especially section 6),
• a competent authority has asked us to,
• the account has been inactive for more than 3 years (in which case we email you first if we have an address on file).

If we suspend your account, we will tell you why and give you a path to appeal, except where doing so would break the law.

13. Sub-processors

We use a small number of third parties to run the service. They are listed in sub-processors.md and bound by Data Processing Agreements with us. We try to keep that list short.

14. Changes to these terms

We will update this document if it needs to change, bumping the version: field at the top. If a change is material — meaning, it affects what data we collect, how we keep it, what you may do, or how disputes are resolved — we will re-prompt you to accept the new version on your next session.

You can always see the change history on GitHub.

15. Governing law and jurisdiction

These terms are governed by Romanian law. Any dispute that we cannot resolve by talking to each other will be brought before the competent courts of Bucharest, Romania, except where the law gives you, as a consumer, the right to bring a claim in your country of residence. [LEGAL REVIEW]

Nothing in these terms takes away your statutory rights as a consumer under Romanian or EU law.

16. Contact

For anything to do with these terms, your account, or the service in general:

Email: petrepopescu21@gmail.com

For data-protection matters specifically, see the Privacy Policy.