SELFROUTE / LEGAL
Privacy Policy
Your routes belong to you. This policy explains the information used to plan stops, connect your vehicle and operate SelfRoute.
Effective October 18, 2026
Who we are
SelfRoute is operated by Lion Adv, Inc., 25 SE 2nd Ave Ste 550, Miami, FL 33131, United States. This policy covers the SelfRoute website, iPhone and Apple Watch apps, and route-import API. References to “we” mean Lion Adv, Inc.
Information we handle
- Account information: an account identifier and, when supplied through Sign in with Apple, your name and email address. Apple may supply a private relay address. Guest sessions use a generated account identifier. We do not receive your Apple or Tesla password.
- Routes and destinations: route names, destination addresses, stop order, saved routes, address-search results or place references, and stop progress. Destinations can reveal personal locations even without live GPS tracking. Native address selections can include coordinates during address confirmation; the current backend stores the address and a place reference.
- Tesla connection: authorization and refresh tokens, vehicle identification number, display name, connection state, selected vehicle, authorization region, and navigation-command records such as timestamps and outcomes. Tokens allow the service to act within the permissions you authorize.
- Apple Watch connection: pairing records and limited access credentials. The paired Watch can fetch your routes and send a destination when you request it.
- Subscription information: Apple transaction identifiers, account association, subscription status, verification time and expiration. Apple processes payment details; SelfRoute does not receive your payment-card number.
- CRM integrations: connection names, API-key prefixes and hashes, expiration/revocation dates, usage timestamps, import identifiers and imported routes. We store a hash of each API key rather than the original key.
- Device and service information: local drafts, saved places, preferences and review-request history; authentication, request and error information needed to operate and protect the service. Hosting providers may process network information such as IP addresses and browser or device request details.
How we use information
We use this information to authenticate your account, save and synchronize routes, connect your selected vehicle and Watch, send destinations you request, calculate proposed route orders, verify membership, process API imports, respond to support requests and protect against abuse. We also use records needed to diagnose failures, honor your choices and meet applicable legal obligations.
SelfRoute does not continuously track your location or automatically determine that you have arrived. A completed stop reflects your confirmation. “Tesla accepted” records command acceptance, not proof of arrival.
Services that receive information
- Supabase provides authentication, database storage and backend execution.
- Tesla provides account authorization and vehicle integration. Sending a stop submits its destination and the relevant vehicle request to Tesla.
- Google Maps Platform receives destination addresses for requested travel-time optimization and, where used, address lookup.
- Apple provides sign-in, native address search, App Store purchases, review requests and device services. Address searches made through native Apple Maps are handled by Apple.
- Cloudflare provides website delivery and domain services and processes requests to this website.
- Your chosen CRM or automation provider receives the access you grant by supplying a SelfRoute API key. That key permits route imports and reading addresses and progress for routes imported with that same key.
These providers also operate under their own applicable terms and privacy notices. We may disclose information when required by law or when reasonably necessary to protect users, the service or legal rights. We do not sell personal information or use cross-app advertising tracking. This website does not include advertising pixels.
Your integration choices
API keys expire after 90 days and can be revoked in Settings → Software & AI connections (CRM & API in earlier builds). Revocation stops future access using that key; it does not delete imported routes or copies already held by your CRM. Contact that provider about its copies. A CRM key cannot access your Tesla credentials or issue vehicle commands through SelfRoute.
Disconnect Tesla or Apple Watch in app settings to remove their SelfRoute connection. To withdraw Tesla's authorization as well, revoke SelfRoute access in your Tesla account. Removing a destination from SelfRoute does not remove it from Tesla's navigation history.
Storage, security and retention
We use encrypted connections, server-side encryption for stored authorization tokens, hashed integration keys and account-level access controls. Native iPhone session credentials use Keychain-backed storage. No system can guarantee absolute security.
Account data is retained while needed to provide the service, maintain security and meet applicable legal obligations. An expired token or API key does not by itself erase related routes or historical records. Guest accounts are not automatically deleted just because you close or uninstall the app. If you lose a guest session, recovery may not be possible; linking Sign in with Apple helps preserve access.
Device drafts and preferences may remain locally. Cloud deletion does not erase independent copies on other devices, with a CRM, or held by Tesla, Apple or other providers. Service logs and backups can persist under provider retention practices after active account records are removed. We do not promise a fixed backup-deletion period. Service providers may process information in the United States and other countries.
Access, correction and deletion
You can review and edit routes in the app. To delete your account, open Settings → Delete account and follow the confirmation. During onboarding, use Account settings. Account deletion removes active cloud account records, saved routes, connected tokens, Watch access and API-key/import records. It may require resolving an in-progress send or retrying if an authorization provider is unavailable.
Deleting your account or uninstalling the app does not cancel an Apple subscription. Manage it separately in Apple subscription settings. If the app instructs you to remove an Apple or Tesla authorization after deletion, complete that step in the provider's account settings.
You may also email support@selfroute.app or write to the address below to request access, correction or deletion, or ask questions about data handling. Depending on your location, applicable law may give you additional rights, including a copy of your information, restrictions on certain uses or a complaint to a privacy regulator. We may need information sufficient to verify your identity before acting. Do not send passwords, authorization tokens or API keys.
Children
SelfRoute is intended for people authorized to manage routes for a vehicle, not for children under 13. If you believe a child has provided personal information, contact us so we can review and address it.
Policy updates and contact
We will update the effective date when this policy changes and provide additional notice of material changes where required. For privacy requests, email support@selfroute.app or write to:
Lion Adv, Inc. — SelfRoute Privacy25 SE 2nd Ave Ste 550
Miami, FL 33131
United States
For app instructions, visit Help. SelfRoute is an independent third-party application, not affiliated with, endorsed by or sponsored by Tesla.