Privacy

Controller

Collin Ilgner, Mehlpfad 1B, 40789 Monheim am Rhein, Germany, c.ilgner@code-sphere.de.

What the app records

While you drive, Speedster records location data: coordinates, speed, altitude, accuracy and timestamps. From these it builds the drive, its figures and the heatmap.

This data stays on your device only as long as you leave cloud sync switched off. Without a cloud account, no drive ever leaves your phone.

What reaches the cloud

With cloud sync switched on, kept drives are uploaded to the server: their figures and the full route. This serves as a backup, gives you access in the browser, and enables comparison with friends.

The legal basis is your consent (Art. 6(1)(a) GDPR). You give it by switching cloud sync on, and you may withdraw it at any time by switching it off or deleting your account.

Location data is particularly sensitive

Routes reveal where you live, where you work and what your habits are. Therefore: drives and routes are shown to nobody but you — not even to friends.

Friends only see figures: total distance, total time, number of drives, longest drive and longest time. No individual drives, no routes, no heatmap.

Account and friendships

An account holds a name, an email address, a username and optionally a display name and a country. The username is public — it is the handle by which others find you.

A friendship requires both sides: a request has to be accepted. Declining leaves no trace — the request is deleted, not stored as declined.

Leaderboard

You only appear in the worldwide and country rankings if that is enabled in your account. They show your username and the respective figure.

In the friends ranking you appear regardless — the accepted friendship is your consent towards that particular person.

Signing in with Apple or Google

If you sign in with Apple or Google, the token they issue is verified against that provider’s keys. What is stored is the provider’s name, your identifier there and, where supplied, your name and email address.

No password is set in that case; you may set one later.

Map material

Maps are loaded from OpenStreetMap and Esri. In doing so, the respective tile server learns your IP address and the section you are looking at. That is technically unavoidable if a map is to be shown.

No analytics services, no advertising networks and no crash reports are sent to third parties.

Retention

Drives are kept until you delete them or your account. Deleting the account deletes all its drives with it.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw a consent you have given.

Access and portability you exercise yourself: under Account you download all stored data as JSON, and you delete your account there as well. For anything else an email is enough.

You may also lodge a complaint with a data protection supervisory authority; the competent one is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.