Privacy Policy

Last updated: [EFFECTIVE DATE]

SPTTD (“we”, “us”) is a car-spotting app operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. This policy explains what we collect, why, and who we share it with. Questions: [SUPPORT EMAIL].

1. Information we collect

You provide

• Account: your email address and a username (and an optional display name).
• Profile: an optional photo, bio, website, and social-media links.
• Spots: photos of cars you take, and the identified vehicle details.

Collected as you use the app

• Location: the precise GPS location of each spot, and — during a drive you record — your precise location continuously, including in the background, to trace the route.
• Drives: route, speed, elevation, time, and motion/accelerometer readings.
• Social & activity: friends, votes, swipes, achievements, notifications, and reports you file.
• Device & technical: push token, device model and platform, IP address, and crash/diagnostic data.

2. How we use it

• To identify cars, build your collection, and run the map, leaderboards, and social features.
• To record and back up your drives.
• To send notifications you’ve enabled.
• To keep the service safe (rate limiting, moderation, abuse prevention) and to fix crashes.

We do not use your data for advertising and we do not sell it.

3. Who we share it with

We use the following service providers (processors) to run the app:

• OpenAI (United States) — receives the car photo you take to identify the vehicle. Location is not sent to OpenAI.
• Supabase — our database, accounts, and file storage.
• Expo (United States) — delivers push notifications and app updates.
• Apple — push delivery and App Store distribution.
• Vercel (United States) — hosts this website, including public spot-verification pages.
• Sentry (United States) — crash and error reporting.
• Instagram — only if you choose to share a spot to Instagram Stories.

4. What’s public

Some content is visible to other users and, in places, to anyone on the web: your rare spots on the map and in Gas-or-Pass (photo, an approximate offset location, the car, your username and avatar), leaderboard rankings, and your public profile. Each spot also has a public verification page at spttd.app/c/<serial> showing the photo, the car, the place name/country, and your username. Your exact coordinates are never shown publicly — only an offset location.

5. Permissions

We ask for camera (to photograph cars), location (to tag spots and record drives, including in the background during a drive), photo library (to set an avatar and save spots), notifications, and motion (for drive g-force). You can change these anytime in your device settings; the app still works with them declined, with reduced functionality.

6. Retention & deletion

We keep your data until you delete it or delete your account. You can delete your account in the app (Settings → Account → Delete account) or request help at spttd.app/delete-account. Deletion removes your spots, collection, drives, profile, and stored photos after a 30-day grace period, during which you can restore the account by signing back in. [RETENTION PERIODS for backups/logs/moderation records — LEGAL TO SPECIFY.]

7. Your rights

Depending on where you live (including under the EU/UK GDPR and California’s CCPA), you may have the right to access, correct, delete, or export your data, and to withdraw consent. To exercise these rights, contact [SUPPORT EMAIL]. Our providers above are located in the United States; where required we rely on appropriate transfer safeguards such as Standard Contractual Clauses.

8. Children

SPTTD is not directed to children and is intended for users aged [MINIMUM AGE] and over. We do not knowingly collect data from children under that age.

9. Changes

We’ll update this policy as the app changes and revise the date above. Material changes will be highlighted in the app.

Contact: [SUPPORT EMAIL] — [COMPANY LEGAL NAME], [REGISTERED ADDRESS].