Privacy Policy

The controller of personal data is the operator of the ApeDrive digital service available at https://apedrive.eu (“Controller”, “we”, “us”).

Privacy contact: privacy@apedrive.eu. General contact: ahoj@apedrive.eu.

When the Controller operates as a registered company, these Policies will be updated with legal name, company ID and registered address. Until then, these Policies apply in full to the entity that actually operates ApeDrive and is identifiable via the contacts and domain above.

ApeDrive is social mobility for people you already know: a live map, crew / convoy, meets, feed, chat and related features. It is not a taxi, marketplace or stranger-driver service.

The app is available on iOS and Android; the marketing site may collect an email for the waitlist.

Account and profile: email, password (hashed by the auth provider), display name, username, profile photo, privacy settings and in-app identifiers.

Third-party sign-in: if you use Google or Apple, we process identifiers and basic profile data those providers share with us (typically email, name, account id).

Social graph: friendships, invites, blocks, crew / club membership, event and convoy participation.

Location: device GPS / location — only while you turn sharing on or run an active trip / convoy. With sharing off, we do not send live location.

User content: feed posts, comments, reactions, chat messages, photos, routes, share links, event ratings and similar content you create.

Crew group calls: when you choose to join, LiveKit transmits audio between participants. ApeDrive does not start recording or transcribing live calls. You enable your own microphone; a call may continue while the phone is locked until you leave.

Voice messages: audio recorded and sent in chat is stored in private Supabase storage. Access is restricted to authorised Crew members according to membership and blocking rules. A local draft is not sent without your confirmation.

Chat safety: server rules check prohibited text and links. A report stores its reason and the necessary message context; an authorised moderator may review the reported content, including attachments. Reporting a call participant does not create an audio recording.

Device and technical data: device type, OS, push tokens, IP address, error and diagnostic logs needed for security and reliability.

Payments / donations: for App Store / Google Play IAP (e.g. project support) we process purchase confirmations and related ids via Apple, Google and optionally RevenueCat. We do not store your full card details.

Waitlist / web: email you submit on apedrive.eu and ordinary server / CDN logs.

Providing the service (account, map, crew, chat, feed, events): performance of a contract (Art. 6(1)(b) GDPR).

Sharing location with people you choose: contract performance and your clear in-app choice (turning sharing on). You can turn it off anytime.

Security, abuse prevention and rule enforcement: legitimate interests (Art. 6(1)(f)) and legal obligations where applicable.

Push notifications and product email: consent and/or legitimate interests depending on message type; marketing only with consent where required.

Donations / IAP and related accounting: contract performance and legal obligations.

Reliability diagnostics: legitimate interests, in a proportionate scope — we do not sell your data for ads.

Waitlist: consent (submitting email) and/or legitimate interest to notify you when the app launches.

Live location is visible only to people or groups you grant (e.g. friends, crew / convoy members), and only while sharing or an active trip is on, per in-app settings.

The public and strangers do not see you on the live map merely because you have an account.

Live location is ephemeral: when sharing or a trip ends, live sharing stops and current traces are deleted or anonymised according to product rules. Trip history may keep a summary (route / stats), not an always-on trail.

ApeDrive is not a substitute for navigation or emergency services. Follow traffic laws; do not use the phone in a way that endangers safety while driving.

We use trusted providers as needed to run the service, including:

• Hosting / database / auth (e.g. Supabase)

• Maps / geolocation (e.g. Mapbox)

• Email (e.g. Resend) for transactional mail

• Push delivery (Apple, Google, Expo)

• Google / Apple sign-in if you choose them

• LiveKit Cloud for audio transmission and technical connection data during group calls

• Payments / donations (Apple, Google, optionally RevenueCat)

• Website hosting (e.g. Vercel) for apedrive.eu

These parties act as processors or independent controllers depending on their role. We do not sell personal data.

Some providers may process data outside the EU / EEA. Where that happens, we rely on appropriate GDPR safeguards (e.g. Standard Contractual Clauses or an adequacy decision) as applicable.

We aim to keep operations and data in the EU where infrastructure allows.

Account data is kept while you have an account and as needed to provide the service.

Live location is kept only for the duration of active sharing / a trip (plus short technical buffers).

Content is kept until you delete it, we remove it for rule violations, or you delete your account — unless law requires longer retention (e.g. transaction evidence).

Sent voice messages follow the deletion rules for chat content. Safety reports are restricted to authorised moderators and may retain a copy of reported text after the original message is removed to investigate abuse.

Waitlist emails are kept until unsubscribe, launch notification, or deletion request.

Security and diagnostic logs are kept for a proportionate period (typically months), longer only if an incident requires it.

You have the right of access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent where processing is consent-based.

In the app you can typically turn location sharing off, edit your profile, export data and request account deletion (Privacy Centre / settings).

You may also email privacy@apedrive.eu. We respond without undue delay within GDPR deadlines.

You may lodge a complaint with the Slovak Data Protection Authority (https://dataprotection.gov.sk) or another EU supervisory authority where you live.

apedrive.eu uses necessary technical cookies / storage for the site to work and stay secure. Third-party analytics are only used if disclosed on the site and under applicable consent rules.

The waitlist form processes the email you voluntarily submit.

ApeDrive is not directed at children under 16. Do not create an account if you are under 16. If we learn an account belongs to a child under that age, we will delete it and related data.

We may update this Policy. The current version is published at https://apedrive.eu/privacy (and /en/privacy) with the effective date. For material changes we may notify you in-app or by email.

Privacy: privacy@apedrive.eu

General: ahoj@apedrive.eu

Web: https://apedrive.eu