Privacy Policy
Last updated: October 12, 2026
Privacy First.
Your drive history stays on YOUR phone. We don't keep your routes or a log of where you've been on our servers, and we never sell your data.
Guardian Alerts are opt-in. You choose who gets them, and they only go out when you drive far over the limit or stop suddenly. No live map. No live location tracking.
Your data is yours. We built it that way on purpose.
What Leaves Your Phone
The short version, in one table. Details are in the sections below.
| What | What is sent | Who gets it | Identifies you? |
|---|---|---|---|
| Your drives (route, speeds, readings) | Nothing. They stay on your phone. Only the last 2 minutes of a session are kept, and unsaved sessions are deleted within about 24 hours. | Nobody | No |
| Speed-limit lookup | GPS coordinates | HERE Technologies | No |
| Street names and the report map | GPS coordinates or map region | Apple | No |
| Guardian Alert | Street, time, and speed, plus the limit if speeding. ONLY when you trigger an alert: driving 20% or more over the limit, or stopping suddenly, with a guardian added. | Only the guardians you choose (delivered through Firebase and Apple push). A copy is kept on our server for 7 days, then deleted. | Yes. Linked to your account for 7 days. |
| Anonymous safety record | Location, street, speed, limit, and the hour (never the exact time). No user ID. | Our database (Firebase) | No |
| Time stamp on a report | A fingerprint (hash) of the record, only when you are online | Sectigo (or FreeTSA.org if Sectigo is unavailable) | No |
| App check | Once, a random key and a random code made on your phone, so Apple can confirm the app is genuine. No name, email, location or drive data. | Apple | No |
| Account and subscription | A random anonymous ID, your Apple transaction ID and plan. Name and email only if you use guardian features. | Firebase and Apple | Yes. Not linked to your routes or drives. |
| Crash reports | Device model and iOS version | Firebase Crashlytics | No |
| Verifying a report on speedmark.app | Nothing. The check runs in your browser and the file is never uploaded. | Nobody | No |
Information We Collect
On Your Device (Speed Tracking)
When you drive with SpeedMark and have granted location permission, the app uses your phone's GPS and motion sensors to measure your speed. This includes GPS coordinates, speed, timestamps, and location accuracy. This data is processed and stored on your device.
The app keeps the last 2 minutes of each driving session so you can replay or export it. Sessions you don't save are deleted automatically (within about 24 hours). Sessions you choose to save stay on your device until you delete them.
Speed Limit Lookups
To show the posted speed limit, the app sends GPS coordinates to HERE Technologies. No name, email, or other identifier is sent with those requests.
Account and Subscription Information
- Anonymous sign-in (everyone): The app signs you in to our backend with a random anonymous ID. No name or email is needed to track your speed.
- Guardian features: If you invite guardians or become one, you sign in with Apple and we collect your name, email, notification (push) token, guardian relationships, and invitation codes.
- Subscription status: If you subscribe, we record your Apple transaction ID, plan, whether it is active, app version, and when you last used the app, so we can honor your plan and count customers. Our analytics copy of this information does not include your name or email.
Alerts
When an alert is triggered (driving 20% or more over the limit, or a sudden stop from speed), your guardians get a notification with the street name, time, and speed, plus limit if speeding. We also keep an anonymous speeding record (location, street, city, state, speed, limit, and hour of day, never the exact time) for aggregate safety analysis. This record contains no user identifier. Because it holds only the hour, it cannot be matched to an individual alert.
Device Information and Diagnostics
We collect basic device information (model, OS version, app version) and crash reports through Firebase Crashlytics to keep the app stable.
Website
If you use the contact form on speedmark.app, we receive the information you submit (hosted by Netlify). The website loads fonts from Google Fonts, which receives your IP address when the page loads.
How We Use Your Information
- Speed tracking and warnings: processed on your device to show your speed and the posted limit and to warn you when you are over.
- Guardian Alerts: to deliver notifications to the people you choose.
- Your records: to let you replay and export a verified record of your own drives.
- Subscriptions: to provide the plan you purchased.
- Improving SpeedMark: crash reports and anonymous, aggregate usage and safety statistics.
What We Don't Do
- We don't sell, rent, or trade your personal information.
- We don't store your routes or a history of your trips on our servers.
- We don't track your real-time location. Guardians never see a live map.
- We don't use advertising trackers or follow you across other apps and websites.
Data Storage and Retention
- Your device: recent sessions are kept for about 24 hours unless you save them. Saved sessions stay until you delete them or uninstall the app.
- Guardian alert logs: deleted automatically after 7 days.
- Guardian invitations: expire after 7 days.
- Account and relationship data: kept in Firebase (Google Cloud) until you delete your account.
- Anonymous analytics records: kept in aggregate. They are not linked to you, so they can't be looked up or deleted individually.
Data Sharing
We share information only with the service providers that make SpeedMark work:
- Firebase / Google Cloud: sign-in, our database, push delivery, crash reports, and analytics.
- Apple: Sign in with Apple, push notifications, and subscriptions. We also send GPS coordinates to Apple to look up street names, and a map region to Apple Maps to draw the map on your report.
- HERE Technologies: speed limit data (GPS coordinates only, no user identification).
- Sectigo (and FreeTSA.org as a backup): time-stamp verification of your driving records. When a session is recorded and you're online, the app sends a cryptographic fingerprint (hash) of the record to get a trusted time stamp. The fingerprint contains no location, name, or other personal information.
- Apple (app check): the first time you use the app while online, it asks Apple to confirm that this is a genuine copy of SpeedMark. Only a random key and a random code made on your phone are sent, with no personal information. Apple's confirmation is stored on your phone and included in the reports you export.
- MailerSend: Guardian invitation emails.
- Netlify: website contact form.
Like any internet service, these providers can see your device's IP address when the app connects to them.
Checking a report on speedmark.app/verify happens in your browser. The file is never uploaded to us.
Guardians you invite see only what is in an alert: speed, speed limit, street name, and time. They cannot see your routes, live location, or history.
Your Rights and Controls
- Location: you control location access in iOS Settings. Without it, SpeedMark cannot measure speed.
- Your sessions: delete any session in the app, or uninstall to remove everything stored on your device.
- Export: export your sessions in several formats (such as PDF, CSV, JSON, and GPX).
- Guardians: add or remove guardians at any time, accept or decline invitations, or sign out to stop Guardian Alerts.
- Delete your account: use Delete Account in the app to remove your profile, guardian relationships, invitations, and alert logs. Contact us if you need anything else removed.
Security
Data on your device is protected by iOS encryption. Exports are signed with a cryptographic key stored on your device so tampering can be detected. Data stored in Firebase is protected by Google Cloud's security infrastructure, including encryption in transit and at rest, and access is restricted by Firebase Authentication rules. Sign in with Apple lets you hide your email address if you prefer.
Children's Privacy
SpeedMark is not intended for use by children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us immediately.
International Data Transfers
SpeedMark is operated from the United States. If you use SpeedMark from outside the U.S., your data may be transferred to and processed in the United States, where Firebase/Google Cloud servers are located.
California Privacy Rights (CCPA)
If you are a California resident, you have the right to request information about personal data we collect and to delete your data. We do not sell or share personal data for advertising. To exercise your rights, contact us at the email below.
GDPR Rights (European Users)
If you are in the European Economic Area, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to processing of your personal data
- Request data portability
To exercise these rights, contact us using the form below.
Cookies and Tracking
The SpeedMark app does not use cookies. Our website (speedmark.app) uses only essential cookies required for basic functionality. We do not use advertising or analytics trackers on the app or the website.
Data Controller
SpeedMark is operated by 1807 LLC, DBA SpeedMark
160 Mine Lake Ct, Ste 200
Raleigh, NC 27615
USA
support@speedmark.app
Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated through the app or via email. Continued use after changes constitutes acceptance.
Questions About Privacy?
If you have questions about this privacy policy or how we handle your information:
Contact UsPrivacy by Design
Remember: SpeedMark is built to collect as little as possible. The less data we hold, the less there is to share. Your drive history belongs to you, and we've built our system to keep it that way.