Privacy Policy

Last updated: March 2026

1. Controller

Hannes Heißmeyer
Ibykusweg 6f, 30629 Hannover, Germany
Email: hannesaushannover@gmail.com
Phone: +49 15751477145

2. Age Restriction

SpeedPilot is intended for users aged 16 and older. We do not knowingly collect personal data from persons under the age of 16. If you become aware that a minor has provided us with personal data, please contact us so we can delete it.

3. Data We Collect

When you use SpeedPilot, we collect the following personal data:

• Account data: Name or username, email address (via Apple Sign-In or email registration)
• Location data: GPS coordinates, speed, altitude, and heading recorded during active trips
• Trip data: Route history, maximum speed, average speed, acceleration values, trip duration and distance
• Device & usage data: Device type, OS version, app version, crash reports, and general usage analytics
• Payment data: Subscription status (processed exclusively by Apple; we do not store payment card details)
• Profile data: Optional vehicle information (make, model, year), city and country

4. Legal Basis (GDPR)

• Performance of a contract (Art. 6(1)(b) GDPR) – to provide the tracking and leaderboard features you signed up for
• Legitimate interests (Art. 6(1)(f) GDPR) – for app stability, crash reporting, and improving the service
• Consent (Art. 6(1)(a) GDPR) – for optional features such as sharing location-based leaderboard rankings

5. Third-Party Services

Supabase (EU region)
We store user accounts, trip data, and leaderboard data in Supabase, hosted within the European Union. Supabase acts as a data processor under a Data Processing Agreement. Supabase Privacy Policy

RevenueCat
We use RevenueCat to manage in-app subscription status. RevenueCat receives a pseudonymous user identifier and subscription data. RevenueCat is based in the USA; data transfers are covered by Standard Contractual Clauses. RevenueCat Privacy Policy

Mapbox
We use Mapbox to render maps within the app. Mapbox may collect anonymized map tile request data. Mapbox is based in the USA; data transfers are covered by Standard Contractual Clauses. Mapbox Privacy Policy

Apple App Store & Analytics
App downloads and payments are processed by Apple Inc. Apple may collect analytics data subject to your device privacy settings. Apple Privacy Policy

6. Location Data

SpeedPilot requests access to your precise location while the app is in use and, if you grant permission, in the background during an active trip. Location data is used exclusively for trip tracking and is never sold to third parties. You can revoke location permission at any time in your device settings, though this will prevent trip tracking from functioning.

7. Data Retention

Your account and trip data is retained for as long as your account is active. If you delete your account, all associated personal data is permanently deleted within 30 days.

8. Your Rights under GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise any of these rights, contact us at hannesaushannover@gmail.com. You also have the right to lodge a complaint with the competent supervisory authority (in Germany: Landesbeauftragte für den Datenschutz Niedersachsen).

9. Data Security

All data is transmitted via HTTPS. Our database is protected by Row Level Security (RLS), ensuring that users can only access their own data.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the app or by email. Continued use of SpeedPilot after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, contact us at:
hannesaushannover@gmail.com