OVERDRIVE

OVERDRIVE — Privacy Policy

Last updated: July 11, 2026

Effective date: July 11, 2026

OVERDRIVE ("OVERDRIVE," "the app," "we," "us," or "our") is a driving-discovery game for iOS, built and operated by a solo independent developer. This Privacy Policy explains what data the app processes, where that data lives, when (if ever) it leaves your device, and the choices and rights you have.

The short version: OVERDRIVE is on-device by default. Your drives, your map discovery, your profile, and your stats are stored on your iPhone, not on our servers. The app has no account system and no analytics or advertising SDKs in its current release. Location data leaves your device only for optional features you trigger — getting directions to a destination, searching for a place, or turning on the off-by-default "Snap routes to roads" setting (details below). We do not sell your data, and we do not run third-party ad tracking.

Please read this alongside our Terms of Use / EULA, which govern your use of the app, and our Support page.

1. Who is responsible for your data

OVERDRIVE is operated by a solo independent developer. For any privacy question, request, or complaint, contact us at:

Email: [email protected]

We are the data controller for the limited data described in this policy. Because we are a small independent developer, the fastest and only channel for privacy requests is the email address above.

2. Summary of what we process

Data	Why	Where it lives	Leaves your device?
Precise location (GPS) — only while you are recording a drive (foreground by default; also in the background if you turn on the optional Background Recording setting)	Record your drive, paint the roads you discover, show your position, measure distance, and score smoothness ("Flow")	On your device	Stays on device by default. Full-resolution route coordinates are sent to routing/search services only when you use directions, place search, or enable "Snap routes to roads" (off by default) — see §4
Motion / accelerometer data	Score driving smoothness (gentle inputs, steady pace) for Flow — never speed	On your device	No. Raw motion never leaves your device
Drive history (routes, distance, Flow score, XP, discovery %)	Your progress, garage stats, and painted map	On your device	No (in the current release)
Profile you enter (display name, bio, photo, car make/model/year/color, optional social handles)	Personalize your garage	On your device	No (in the current release)
Zone reports you submit	Let you flag unsafe or inappropriate community content	On your device (in the current release)	No (in the current release)
Map tile requests	Draw the dark base map you see	Rendered from a map-tile service	Your IP address and the map area you view reach the tile provider (see §4)
Subscription / purchase status (only if in-app purchases are enabled)	Unlock paid features and validate your subscription	Handled by Apple and our purchase-management provider	Yes, when purchases are enabled (see §4 and §5)

OVERDRIVE does not collect: your contacts, your photos library (beyond a single image you deliberately pick for your profile), your microphone, your health data, your browsing history, or any advertising identifier (IDFA). We do not use App Tracking Transparency tracking because we do not track you across other apps or websites.

3. Location data — the detail (because driving apps deserve it)

Location is the heart of OVERDRIVE, so we want to be precise.

Precise ("full accuracy") location is required to paint roads accurately and to score Flow. Approximate location would make the core feature useless.
"While Using the App" (foreground) location powers live recording when the app is open. This is the default, and the app keeps your screen awake during a drive.
Background location is optional and off by default. If you turn on Background Recording (in Garage) and grant "Always" access, the app keeps recording your route during an active drive even when the screen is off or another app (like a navigation app) is in front. It runs only while a drive is in progress, iOS shows the blue location indicator the entire time, and recording stops the moment you end the drive. It is never used when you are not on a drive.
You are always in control. You can grant, downgrade (to "While Using" or "Approximate"), or revoke location access at any time in iOS Settings → Privacy & Security → Location Services → OVERDRIVE. Revoking it stops recording; the app does not work around your choice.
We never track you in the background outside of an active drive. We do not build advertising or location-history profiles, and we do not share your live location with other users.

Motion / accelerometer data is read from the device sensors *only* to compute how smoothly you drive (the change in acceleration, or "jerk"). Faster driving can never raise your Flow score — smoothness can. This computation happens entirely on your device, and the raw motion signal is never transmitted.

4. When data leaves your device — third-party services

OVERDRIVE keeps data local by default. The following are the only external services the app contacts, and exactly what each one receives.

a) OSRM routing & road-snapping (`router.project-osrm.org`)

The public Project OSRM service is used in two cases: (1) when you ask for directions to a destination in "Where are you going?", and (2) if you turn on the optional Snap routes to roads setting (off by default) to align a finished drive to real roads. In those cases the app sends the relevant route coordinates — at full resolution, and these can include where a drive started or ended, which is exactly why road-snapping is opt-in.

We send only coordinates — no name, no device identifier, no account (there is no account), and no profile data.
OSRM returns the route or matched road geometry, which we store on your device.
If the request fails, times out, or you are offline, the app gracefully falls back (raw local trace, or you simply drive without a route) and never blocks your drive.
Project OSRM is an open-source community mapping project. We do not control its infrastructure or logging. If you prefer that no coordinates ever leave your device, keep Snap to Roads off and don't request directions.

b2) Photon place search (`photon.komoot.io`)

When you type a destination in "Where are you going?", your search text and your approximate current location (to rank nearby results) are sent to the Photon geocoder, operated by Komoot, which returns matching places. No name, account, or profile is sent. If you never use destination search, nothing is sent to Photon.

b3) Apple location services (place names)

To label your map with a nearby place name, your device may convert coordinates to a place name using Apple's on-device/location services. This is handled by Apple under its own privacy policy.

b) CARTO / OpenStreetMap map tiles — always used

The dark map you see is drawn from raster map tiles served by CARTO (basemaps.cartocdn.com), built on OpenStreetMap data. Loading tiles is a standard web request, so CARTO receives your IP address and the tile coordinates (i.e., the map area) you are viewing. This is inherent to displaying any online map. Map data © OpenStreetMap contributors © CARTO.

c) Supabase (accounts & backend) — only if and when enabled

The current release has no accounts and no backend. If we later enable online features (leaderboards, crews, private convoys, shared/community zones), we intend to use Supabase to store the data needed for those features — for example a display name, a user identifier, and the specific stats you choose to make part of a leaderboard (discovery %, Flow, distance — never speed or time on public roads). We will update this policy, request any additional consent required, and surface an in-app account/sign-in flow before any such data is transmitted. Until then, none of your data is sent to Supabase.

d) RevenueCat + Apple (subscriptions) — only if and when enabled

In-app purchases are not active in the current release; the paywall you may see is a non-functional preview. When purchases are enabled, we intend to use RevenueCat to manage subscription entitlements and validate purchases, sitting on top of Apple's In-App Purchase / StoreKit system. In that flow:

Apple processes the actual payment and is the merchant of record; Apple receives your purchase transaction data under Apple's own privacy policy. We never see or receive your card number or full payment details.
RevenueCat receives a pseudonymous app-user identifier and your subscription/receipt status so the app knows what you are entitled to. RevenueCat processes this as our service provider.
We will update this policy and disclose these flows at the point of purchase before charging anyone.

We have no advertising SDK, no third-party analytics SDK, and no social-media tracking pixel in the app.

5. Payments

Subscriptions, when enabled, are sold only through Apple's In-App Purchase. Apple handles billing, renewals, refunds, and receipts. We do not collect or store your payment card, bank details, or billing address — those stay with Apple. See our Terms of Use for pricing, auto-renewal, and cancellation terms.

6. How we use your data

We use the data described above solely to:

record your drives and measure distance;
paint the roads you discover and track your city-discovery percentage;
compute your smoothness-based Flow score, XP, and levels;
display the map and your position;
(when enabled) provide leaderboards for discovery, Flow, and distance — never for speed or time on public roads — and social features you opt into;
(when enabled) provide and validate paid subscriptions.

We do not use your data for advertising, cross-app tracking, profiling, or resale. We do not use your data to train advertising or third-party AI models.

7. Legal bases (for users in the EU/EEA/UK)

Where the GDPR or UK GDPR applies, we rely on:

Consent for precise and location access while using the app and for motion data — granted through the iOS permission prompts, revocable at any time in Settings.
Performance of a contract (our Terms) to provide the app's core functionality and any subscription you buy.
Legitimate interests to keep the app working, secure, and free of abuse — balanced against your rights.

You may withdraw consent at any time by revoking permissions in iOS Settings or by deleting the app.

8. Data retention

On-device data (drives, profile, discovery, reports) persists on your iPhone until you delete it in the app or delete the app itself. Deleting the app removes this locally stored data from your device.
OSRM / CARTO requests are transient network calls; any logging is controlled by those providers, not by us. We do not retain a server-side copy of your route (we have no server in the current release).
Backend data (only if accounts are later enabled) will be retained until you delete your account or request deletion, after which we will delete or anonymize it within a reasonable period (target: 30 days), except where we must retain limited records to comply with law.
Purchase records are retained by Apple and RevenueCat under their own policies.

9. Your rights and choices

Regardless of where you live, you can:

Access / export: All your data currently lives on your device inside the app — you can view it in the app. If online accounts are later enabled, email us to request a copy of any server-side data.
Delete: Delete the app to remove locally stored data, or email us to delete any server-side data (if/when accounts exist).
Restrict location/motion: Change or revoke permissions anytime in iOS Settings.
Withdraw consent / object: Revoke permissions or stop using the app.

If you are in the EU/EEA/UK, you also have the right to rectification, restriction, portability, and to lodge a complaint with your local data protection authority. If you are in California (CCPA/CPRA), you have the right to know, delete, correct, and to not be discriminated against for exercising these rights — and note we do not sell or "share" your personal information as those terms are defined.

To exercise any right, email [email protected]. We may need to verify your request; because we have no account system today, this is usually straightforward. We aim to respond within 30 days.

10. Children

OVERDRIVE is a driving app intended for licensed drivers aged 17 and older. It is not directed to children, and we do not knowingly collect personal information from children under 13 (or under the applicable minimum age in your country). If you believe a child has provided us data, contact us and we will delete it.

11. Security

Data stored on your device is protected by iOS's app sandbox and device encryption.
Network requests (map-matching, map tiles, and — when enabled — purchases and backend) use encrypted HTTPS/TLS connections.
No system is perfectly secure, but because OVERDRIVE keeps data local by default, the amount of your data exposed to any network is deliberately minimal.

12. International transfers

Map-matching (OSRM) and map-tile (CARTO) providers, and — when enabled — Apple, RevenueCat, and Supabase, may process requests on servers outside your country, including in the United States and the EU. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) offered by those providers.

13. Changes to this policy

We may update this policy as the app evolves — most notably when we enable accounts, backend features, or in-app purchases. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

14. Contact

Questions, requests, or complaints about privacy: