Legal
Privacy policy
How Cruze collects and uses your data.
Last updated 31 August 2026
Who we are
Cruze is operated by Cruise Media Group Ltd, 71-75 Shelton St, London WC2H 9JQ, United Kingdom (company registration 17075800). Cruise Media Group Ltd is the data controller for the personal data described here.
Cruise Media Group Ltd also operates the advertising platform that brands book campaigns through. Those brands, and any agency or reseller booking on their behalf, receive only aggregated, anonymised campaign results — distance covered in an area, time, estimated views. They never receive your name, your contact details, or your routes.
Contact us about anything in this policy at hello@cruze.ad.
The short version
- If you fill in the form on this website, we keep your details so we can call you back about campaigns.
- In the app, Cruze records where you drive, continuously and in the background, while you have tracking switched on.
- It does this to work out how far you drove so advertisers can pay you, and to suggest campaigns that suit how you drive.
- It starts before you join any campaign — that is how we know which campaigns fit you.
- Tracking is opt-in, and you can switch it off at any time in the app.
- We do not sell your data, and we do not use your location for advertising targeted at you.
- You can delete your account and your data from inside the app.
What we collect on this website
This site is a public marketing page. You can read all of it without giving us anything. Two things collect data:
| What | Why |
|---|---|
| The application form | Your name, email address, mobile number, main postcode, and your car's make, model, year of first registration and colour. We use it to contact you about driving with Cruze and to judge whether your car is eligible for a wrap. It is stored in HubSpot, our customer relationship system. |
| A language cookie | One cookie, cruze_lang, remembering whether you chose English, French or Dutch. Nothing else is stored on your device, and there is no analytics or advertising tracking on this site. See the cookie policy. |
The legal basis for the form is your consent (Art. 6(1)(a)), which you give by ticking the box before submitting. You can withdraw it by emailing hello@cruze.ad and we will delete your details. The language cookie is strictly necessary for a setting you asked for, so it does not require consent.
What the app collects
| Category | What it is |
|---|---|
| Account | Your name, email address and phone number. |
| Location | Precise GPS position, speed, heading and accuracy, recorded repeatedly while you are driving — including when the app is closed or in the background. |
| Trips | Journeys built from those positions: the route travelled, distance, duration, start and end times. |
| Vehicle | The vehicles you add, and which one is being tracked. |
| Payment | Your bank account holder name, IBAN and BIC, so we can pay you, and records of payments made. |
| Device | An identifier generated by the app for your device, plus the make, model, manufacturer, operating system version and app version, whether the device is an emulator, and a notification token. |
| Diagnostics | Whether tracking is working: permission states, battery-optimisation and power-saving settings, whether notifications are enabled, and whether the tracking service is running. If our support team needs to investigate a specific problem, we can switch on a more detailed diagnostic log for your device. |
Why we use it, and our legal basis
Article references are to the UK GDPR.
| Purpose | Legal basis |
|---|---|
| Contacting you about driving with Cruze, after you submit the form on this website | Your consent (Art. 6(1)(a)) |
| Recording where you drive, to measure campaign mileage and to build a driving profile that matches you to campaigns | Your consent (Art. 6(1)(a)). You give it in the app and can withdraw it at any time. |
| Running your account, enrolling you in campaigns, calculating and making payments | Performance of a contract (Art. 6(1)(b)) |
| Keeping records of payments made to you | Legal obligation (Art. 6(1)(c)) — tax and accounting law |
| Detecting fraudulent or manipulated trips, and preventing a suspended account from simply being recreated | Legitimate interests (Art. 6(1)(f)) — protecting advertisers and honest drivers from fraud |
| Diagnosing why tracking has stopped working on a device | Legitimate interests (Art. 6(1)(f)) — the app does not work if tracking silently fails, and you do not get paid |
Location data, in detail
This is the most sensitive thing we collect, so it deserves its own section.
It runs in the background
Once you switch tracking on, the app records your position while you drive even when it is closed or not on screen. On Android it runs as a foreground service with a permanent notification; on iOS it uses background location updates. It is not recording continuously when you are stationary — position is only sent while you are moving above a driving speed.
It starts before you join a campaign
We build a picture of how and where you drive — distances, times of day, areas covered — before you are enrolled in anything. That is what lets us tell you which campaigns you would actually earn from. If you would rather not be profiled this way, do not switch tracking on; you can still use the rest of the app.
Photographs of your vehicle
While a campaign is running, we or the advertising platform may photograph or film your vehicle displaying the advertisement, and use those images to promote the service — for example in case studies or on social media. Your number plate may be visible in them. Tell us at hello@cruze.ad if you would rather your vehicle was not used this way, and we will exclude it.
You can turn it off
Tracking can be switched off in the app at any time, and withdrawing consent stops collection from that moment. Data already collected is not automatically erased by switching off — use account deletion, or contact us, if you want it removed. If you are enrolled in a campaign, turning tracking off means your mileage stops being measured and you stop earning.
Who we share it with
| Who | What they receive, and why |
|---|---|
| HubSpot | Stores what you submit through the form on this website, so our team can follow it up. HubSpot is a US company; the transfer is covered by the safeguards described below. |
| Google (Firebase) | Location readings are sent to Google's Firebase Realtime Database, hosted in the EU (europe-west1), where our servers collect them and turn them into trips. Readings are deleted from Firebase once processed. |
| Mapbox | When you view a trip, we ask Mapbox to render a map image of that route. |
| Resend | Sends your sign-in codes and account emails. Receives your email address. |
| Advertisers | Receive aggregate campaign results — distance covered in a target area, time, estimated impressions. They do not receive your identity, your routes, or your address. |
| Our hosting provider | Stores the database and application on our behalf. |
We do not sell personal data, and we do not share it with advertising networks or data brokers.
Transfers outside the UK
We are a UK company, so this policy is governed by the UK GDPR and the Data Protection Act 2018. Our database and location processing are hosted in the European Economic Area, which the UK recognises as providing an adequate level of protection. Some of the providers above are based in the United States; where data reaches them it is covered by the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or applicable adequacy regulations.
How long we keep it
| Data | Kept for |
|---|---|
| Details submitted through the form on this website | Until you ask us to delete them, or until we have not heard from you for two years, whichever comes first. |
| Raw location readings | Deleted as soon as they are processed into a trip — normally within minutes. |
| Trips and their routes | 24 months, then automatically deleted. |
| Aggregate campaign results | Kept indefinitely. These contain no route and nothing identifying you — they are totals per campaign. |
| Account details | Until you delete your account. |
| Payment records | Kept as long as tax and accounting law requires, even after you delete your account — with everything identifying you removed. |
| Fraud markers | If an account was flagged for fraud, a one-way fingerprint of the email and phone number is kept after deletion so the account cannot simply be recreated. It cannot be reversed to identify you. |
Deleting your account
You can delete your account in the app under Profile → Delete account. We email you a confirmation link, so nobody can delete your account from an unlocked phone. Once confirmed, your account closes immediately and is permanently erased after 30 days — signing in again before then restores it.
If you only ever filled in the form on this website and never created an account, email hello@cruze.ad and we will delete what we hold.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- ask what we hold about you, and get a copy;
- have inaccurate details corrected;
- have your data erased;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent for location tracking at any time, without affecting what was lawful before;
- complain to a data protection authority.
Email hello@cruze.ad to exercise any of these. We respond within one month. You can also complain to the Information Commissioner’s Office (ICO), ico.org.uk.
Cruze is offered to drivers in the European Economic Area, so the EU GDPR applies to that processing as well. If you are in the EEA you may instead complain to the supervisory authority where you live — in Belgium that is the Data Protection Authority (dataprotectionauthority.be).
Security
Data is transmitted over encrypted connections and access to our systems is restricted to staff who need it. No system is perfectly secure, and we do not claim otherwise; if a breach affects your data we will notify you and the relevant authority as the law requires.
Children
Cruze is for licensed drivers and is not intended for anyone under 18. We do not knowingly collect data from children.
Changes
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.