Privacy Policy

Last updated: April 19, 2026

Velox ("we", "our", or "us") is a trip-tracking app for drivers. This policy explains what data we collect, how we use it, and your rights. By using Velox you agree to this policy.

1. Data we collect

We collect only what is necessary to deliver the app's features:

• Account data — email address and password (hashed) used to create your account.
• Profile data — username, country, speed unit preference, and vehicle information (type, make, model) that you provide during onboarding or in settings.
• Location & trip data — GPS coordinates, speed, altitude, and timestamps recorded while a trip is active. This data is used solely to generate your driving stats and route replay.
• Derived driving metrics — driving score, top speed, distance, duration, turn counts, g-force, and similar statistics computed from your GPS data.
• Purchase data — subscription status managed via RevenueCat. We do not store payment card details; those are handled by Google Play.

2. How we use your data

• Provide and personalise the app (trip history, stats, weekly insights).
• Maintain and authenticate your account.
• Process and verify your subscription through RevenueCat and Google Play.
• Improve app reliability and performance (aggregated, non-identifiable analytics only).

We do not sell your data, share it with advertisers, or use it for any purpose beyond delivering the app.

3. Location data

Velox requests precise location access (foreground and background) so it can record GPS tracks during a trip. Location is only collected while you actively start a trip inside the app — it is never collected in the background outside of an active trip session.

Your location data is stored on our secure servers (Supabase) and is never shared with third parties.

4. Third-party services

• Supabase — cloud database and authentication provider. Data is stored in EU-region servers. See supabase.com/privacy.
• RevenueCat — subscription management. Handles purchase receipts and entitlement verification. See revenuecat.com/privacy.
• Google Play Billing — payment processing. Subject to Google's Privacy Policy.

5. Data retention

Your data is retained for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us at the email below. Deletion requests are processed within 30 days.

6. Children's privacy

Velox is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

7. Your rights

Depending on your location you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain types of processing.
• Data portability (receive your data in a structured format).

To exercise any of these rights, email us at velox-app@zohomail.eu.

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and row-level security policies on our database. No method of transmission over the internet is 100% secure, but we strive to protect your data using best practices.

9. Changes to this policy

We may update this policy occasionally. When we do, we will update the "Last updated" date at the top. Continued use of the app after changes constitutes acceptance of the updated policy.

---

© 2026 Velox. All rights reserved.