Privacy policy

Effective and last updated: 30‑10‑2026 · Goldmend Studio, a company registered in Singapore, UEN 53534524X

1. Who we are

Arrivo is a family location-sharing app. Family members join a private group, see each other on a map and get alerts when someone arrives or leaves a place. It is provided by Goldmend Studio, a company registered in Singapore, UEN 53534524X ("Arrivo", "we", "us"). This policy explains what personal data we collect when you use the Arrivo app and arrivofamily.com, why we collect it, and the choices you have. We handle personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA).

2. Information we collect

Information you give us

• Account details: your name, phone number or email address and, if you add one, a profile photo.
• Groups: the groups you create or join, and your role in them.
• Places: places you save, such as Home or School, and their alert settings.
• Content you create: check-ins, chat messages, personal notes and outing plans.
• Emergency contacts: the names and phone numbers you add, so we can alert them when you use SOS.
• Messages to us: what you send when you contact support.

Information collected by the app

• Precise location, including in the background. Arrivo collects your phone's location even when the app is closed or not in use, so your group can see where you are and get arrival alerts. You can pause sharing in the app, or turn off location for Arrivo in your phone's settings at any time.
• Battery level and charging state, so your group knows if your phone is about to run out.
• Motion and driving information (only if you turn on driving features): whether you are walking or driving, speed, hard braking and phone use while driving, and possible crashes.
• Device and app information: app version, device model, operating system, language and notification token.
• Technical logs: basic records such as time and error codes, used to keep the service running and secure.

Information from others

• Group members: when someone invites you, we receive the phone number or email address they enter.
• App stores: when a subscription is bought, Google Play or the App Store tells us its status. We never receive your card details.

3. How we use information

• To provide Arrivo: show your location to your groups, send arrival and leaving alerts, low-battery alerts, check-ins and SOS alerts.
• To show location history and driving reports to you and your group, if your plan includes them.
• To run plans and subscriptions.
• To answer your questions and send important service messages, such as security or account notices.
• To keep Arrivo safe: prevent abuse, fraud and unauthorised access.
• To fix problems and improve features, using counts and technical logs rather than your location history.
• To meet legal obligations.

We do not sell personal data, show adverts, or share your location with data brokers or advertisers.

4. Your location and who sees it

• Your groups: members of each group you join can see your live location, battery level, arrival alerts and, depending on the plan, your recent history.
• Pausing: you can pause sharing at any time. Your group then sees "Location paused", so nobody is misled.
• Outings and share-for-a-while links: people you invite by link see your live location only until the outing or link ends.
• SOS: when you press SOS, your location is sent to your group and to the emergency contacts you added.
• No secret tracking: every member can see the list of people who can see them. Arrivo must not be used to track anyone without their knowledge (see our Terms of use).

5. How information is shared

Outside your groups, we share personal data only with service providers that help us run the service, under contracts that require them to protect it, or when the law requires it.

Provider	Purpose	Location
Google Firebase	Database, sign-in and push notifications	Singapore (main database) and global
Google Maps Platform	Maps and place search in the app	Global
Cloudflare	Website hosting and security	Global network
Zoho Mail	Support email	Global
Google Play, Apple App Store, RevenueCat	Subscriptions and billing status	United States and global

If Arrivo is ever involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that deal. We will tell you before your data becomes subject to a different privacy policy.

6. International transfers

Our main database is in Singapore. Some providers above process data outside Singapore. When that happens we take appropriate steps, such as contractual protections, so that your data receives a standard of protection comparable to the PDPA.

7. How long we keep data

Data	How long
Live location	Only the latest position is kept while you share
Location history	The period your plan shows (2, 7 or 30 days), then deleted
Driving reports	Up to 90 days
SOS and crash alerts	90 days
Account, places, notes and chat	While your account is active
After you delete your account	Deleted or anonymised within 30 days
Backups	Cleared on a rolling schedule within 90 days
Records the law requires us to keep	Only as long as required

8. Security

Data is encrypted in transit and at rest. Access rules in our database limit each group's information to its members, and our team's access is restricted to what is needed to run the service. No system is completely secure. If a data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commission as the PDPA requires.

9. Your choices and rights

• Access and copy: ask what personal data we hold about you and how it has been used.
• Correction: update your details in the app, or ask us to correct them.
• Pause or stop sharing: pause sharing in the app, leave a group, or turn off location for Arrivo in your phone's settings.
• Withdraw consent: you can withdraw consent at any time. Some features, such as arrival alerts, will then stop working.
• Delete: delete your account in the app or follow these steps.

To make a request, email [email protected]. We may need to confirm your identity first. We respond within 30 days. If you are not satisfied with our answer, you may contact the Personal Data Protection Commission (PDPC) in Singapore.

10. Children

Arrivo is made for families, so children may use it, but only with a parent or guardian. Children under 13 may use Arrivo only when a parent or guardian adds them to the family group and gives consent for them. Users aged 13 to 17 should use Arrivo with the permission of a parent or guardian. A parent or guardian can ask us at any time to see or delete their child's data. If you believe a child has given us personal data without a parent's consent, contact us and we will delete it.

11. Cookies and this website

arrivofamily.com does not use advertising or tracking cookies. Our hosting provider, Cloudflare, may set strictly necessary cookies to protect the site from abuse. The website's lettering comes from Google Fonts, so your browser fetches it from Google, which sees your IP address. The Arrivo app stores your sign-in on your phone so you stay signed in.

12. App permissions

• Location ("Always" / "Allow all the time"): to share your location with your groups and send arrival alerts, including when the app is closed.
• Motion and fitness / physical activity: to tell walking from driving and save battery. Only if you turn on driving features.
• Notifications: for arrival, battery, check-in and SOS alerts.
• Battery optimisation exemption (Android): so your phone does not stop Arrivo in the background.
• Bluetooth: only if you add a tag for items or pets.
• Contacts: only if you choose to pick an emergency contact or invite someone from your contacts. We do not upload your address book.
• Photos and camera: only when you choose a profile photo.

Arrivo asks before using each permission, and you can turn any of them off in your phone's settings.

13. Changes to this policy

We will update this page when our practices change and show the new date at the top. If a change is important, we will also tell you in the app before it takes effect.

14. Contact us