Your journeys. Your data.

Schpin is the controller of personal information processed for the Service. The legal operator name, address and registration details have not yet been provided; see Business details for the temporary status. Privacy enquiries and rights requests can be sent to support@schpin.app.

This policy does not govern information independently processed by Apple, map providers, social platforms or websites you choose to visit.

• account identity, display name, username and profile details;
• route titles, comments, visibility, participants, reactions and reports;
• settings, consent choices and support communications; and
• information included in account access, correction, export or deletion requests.

Please do not include unnecessary sensitive information in titles, comments or support messages.

When you deliberately start a Schpin and grant device permission, the app may process latitude, longitude, timestamps, accuracy, route points, distance, duration, device-reported speed and related motion or journey metrics. While recording, supported iPhones may also sample the device's gravity-removed motion acceleration. Schpin stores an approximate magnitude with route samples to show a private after-drive motion-load chart; it does not identify vehicle-axis G-forces or provide calibrated vehicle telemetry. The app may continue an active recording in the background as described by the operating system.

We use this information to create your requested route journal, calculate metrics, recover interrupted recordings, synchronise devices and provide sharing features. We do not use Schpin as an emergency-location service, sell precise journey history or record drives merely because the app is installed.

We may receive IP address, device and operating-system type, app version, language, time zone, request timestamps, identifiers needed for notifications, and session and security events. The iPhone app uploads Apple MetricKit diagnostics only if you enable Analytics in app settings. The website loads Google Analytics only after you allow optional analytics. The homepage also requests map tiles from OpenStreetMap for a fixed illustrative route, not a member's recorded GPS.

We use this information to deliver requests, protect accounts, diagnose failures, prevent fraud and understand aggregate service reliability. We do not seek to create an advertising profile from your journeys.

Depending on the context, our lawful bases under applicable data-protection law include:

• Contract: providing accounts, recording, synchronisation, journal, sharing and support features you request;
• Legitimate interests: securing the Service, preventing abuse, improving reliability, moderating content and establishing or defending legal claims, balanced against your rights;
• Consent: optional device permissions and non-essential website analytics where consent is required; and
• Legal obligation: responding to valid legal demands and meeting regulatory, accounting or safety duties.

You can withdraw consent at any time, without affecting processing that was lawful before withdrawal.

Private, followers and public visibility settings determine who can see a shared Schpin. A visible activity may include your profile, route shape, time, title, comment, chosen metrics, participants and reactions. Endpoint privacy tools reduce exposure but cannot guarantee that a place will be unidentifiable.

People who can view content may capture, copy or reshare it outside Schpin. Consider passengers, household members and frequently visited places before publishing. Blocking limits future interactions but may not erase information another person already lawfully received.

We may share information with:

• people you select through visibility, follow, participant and sharing controls;
• hosting, database and storage providers (AWS and Supabase), authentication provider (Auth0), Apple push and map services, OpenStreetMap tile services for the public illustrative route, Google Analytics only after opt-in, and security/support providers acting under contract or their service terms;
• Apple MapKit when the iPhone app requests map imagery for a route card; the requested map area can reflect that drive. Apple describes map requests and visible map boundaries in its Maps privacy notice;
• professional advisers, insurers, auditors, prospective business purchasers and group entities where necessary and protected;
• courts, regulators, police or other authorities when disclosure is legally required or reasonably necessary to protect rights, safety and security; and
• another organisation involved in a merger, acquisition, financing or transfer, subject to appropriate confidentiality.

We do not sell personal information or precise route history.

Some suppliers may process information outside the UK. Where UK data-protection law requires safeguards, we use an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another recognised safeguard, together with supplementary measures where appropriate. Contact us for information about safeguards relevant to your data.

We keep account and active service data while your account exists. Deleted activities and accounts are removed from active systems within a reasonable operational period, subject to synchronisation, moderation, fraud prevention, backups and legal obligations. Backup copies are overwritten on a rolling schedule.

Security logs are generally kept only as long as needed to investigate threats and maintain the Service. Support records and transaction evidence may be retained for limitation, tax or regulatory periods. We review retention according to purpose, sensitivity, legal requirements and risk rather than keeping precise location indefinitely without reason.

We use proportionate technical and organisational measures designed to protect information, including encrypted transport, access controls, environment separation, protected device storage and restricted administrative access. We review dependencies and service activity for reliability and abuse.

No service can guarantee absolute security. Protect your device and app account, install updates and contact us promptly if you suspect unauthorised access. Do not send passwords or secret credentials by email.

Subject to applicable law, you may ask for access, correction, deletion, restriction, portability or an objection to certain processing. Where processing is based on consent, you may withdraw it. You may also ask us to explain a decision that has a significant legal or similar effect if it was made solely by automated means; Schpin does not currently use solely automated decisions of that kind.

Your right to object: you may object at any time to processing based on legitimate interests, including related profiling. We will stop unless we demonstrate compelling legitimate grounds or need the information for legal claims.

Send requests to support@schpin.app. We may need to verify identity and clarify scope. We normally respond within one month, subject to lawful extensions.

You can deny or revoke location permission in iOS Settings. Without location access, drive recording cannot function, but unrelated account features should remain available where technically possible. You can control notifications through device settings and optional sharing metrics inside Schpin.

Deleting local app data may not delete information already synchronised to your account. Use account deletion or contact us if you want server-held information erased, subject to lawful retention.

Schpin accounts are limited to people aged 16 or older who meet any higher minimum age that applies where they live. The app asks users to confirm this before opening sign-in and does not ask for or store a date of birth for that check. Schpin is not designed for children under 16. If you believe a child has provided information improperly, contact us so we can investigate and take appropriate action.

Schpin uses browser storage to remember your analytics choice. Google Analytics is loaded only after you opt in and may set first-party analytics cookies. You can change or withdraw your choice using Cookie settings at any time. Read the Cookie Policy for cookie names, purpose and controls.

Schpin does not currently operate a marketing mailing list. We use email for support, account-related matters and responses to requests you make; those service messages are not a newsletter subscription.

Please contact us first so we can address a concern. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or another competent supervisory authority where applicable.

We may update this policy as the Service, suppliers or law changes. We will publish the revised date and provide additional notice where a change materially affects your rights or use of precise location data.