Privacy Notice

What we collect and why

• Account data — email address, phone number (if you sign in by SMS), password (stored only as a secure hash) and, if you use Google sign-in, the basic profile your provider returns. Used to create and secure your account and to send you service messages. Legal basis: performance of our contract with you.
• Location and trip data — GPS coordinates, speed, heading, timestamps, GPS accuracy readings, route geometry and any destination you search for. This is the core of the product: it is what produces your speed records and evidence reports. It is only recorded while you are running a trip or navigating. Legal basis: performance of our contract with you.
• Subscription data — your plan, status, billing period and payment history records used to give you access to Pro features and show your billing history. Legal basis: performance of our contract with you.
• Support messages — what you send us by email when you ask for help. Legal basis: our legitimate interest in supporting customers.
• Technical and security data — IP address, device and browser information, and error logs. Used to keep the Service secure, prevent fraud and abuse, and diagnose faults. Legal basis: our legitimate interest in operating a secure and reliable service.

We do not sell your personal data, and we do not use your location history for advertising.

Where your location data goes

Trips are recorded on your device first. They are only uploaded to our cloud storage so that they sync across your devices while you have an active Pro subscription. If you discard a trip when prompted at the end of a drive, nothing is stored.

When you search for a destination or request a route, the address text or coordinates you entered are sent to Google Maps Platform to return results. Your recorded trip history is never sent to Google.

Who we share data with

• Stripe — our payment provider and Merchant of Record, for the sale of subscriptions, payments, subscription management, invoicing and tax compliance.
• Hosting and infrastructure providers — who run our application, database and authentication on our behalf as processors.
• Google Maps Platform — for address search and route directions, as described above.
• Email delivery providers — to send account, receipt and renewal emails.
• Professional advisers and authorities — legal or accounting advisers, and public authorities where we are required by law to disclose.

International transfers

Some of our providers process data outside the UK and European Economic Area. Where that happens we rely on appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision covering the destination country.

How long we keep it

Trip records are kept until you delete them or delete your account. Account and subscription records are kept while your account is active. When you delete your account, your account and trip data are permanently deleted. We keep a minimal record of transactions for as long as tax and accounting law requires, after which it is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive a portable copy, and withdraw consent where we relied on it. You can delete your account and all of its trip data yourself from the account settings inside the app, or write to us at speedproof247@gmail.com. We respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority.

Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls, and database rules that restrict each account to its own records. No system can be guaranteed completely secure, but we treat location history as sensitive and handle it accordingly.

Cookies and local storage

We use only essential cookies and browser storage — to keep you signed in, remember your unit and recording preferences, and hold trips offline until they can sync. We do not use advertising or third-party tracking cookies. Our checkout provider, Stripe, may set its own cookies necessary to process a payment. You can clear this storage through your browser settings, though doing so will sign you out.

Changes and contact

We will update this notice as the Service changes and revise the date at the top. For any privacy question or request, contact speedproof247@gmail.com.