OVERDRIVE

OVERDRIVE — Privacy Policy

Last updated: October 21, 2026

Effective date: July 11, 2026

OVERDRIVE ("OVERDRIVE," "the app," "we," "us," or "our") is a driving-discovery game for iOS, built and operated by a solo independent developer. This Privacy Policy explains what data the app processes, where that data lives, when (if ever) it leaves your device, and the choices and rights you have.

The short version: your routes are stored on your iPhone, not on our servers. The painted map, the coordinates behind it and the full detail of every drive live on your device, and we never upload them to us. One feature does send them out: Snap to Roads is on by default (one switch in Garage turns it off) and sends each finished route's coordinates to the public OSRM road-matching service, so the painted line follows real roads. The app has no third-party analytics or advertising SDKs, and we do not sell your data or run third-party ad tracking. From version 2.0.1 it sends a small set of first-party usage events to our own server (never your location, route or speed; one switch in Garage turns it off — see §2).

Some things do go to our server, under an anonymous account created on your device with no password — and no email address, unless you choose to give one by entering a competition: a summary of each drive (date, distance, duration, Flow score — never speed, never coordinates), your profile, and the things you send to other people — crews, friend connections, direct messages and reports. If you switch on Convoy, your live position goes there too, and your accepted friends and current crew-mates can see it, whenever OVERDRIVE is open and in front of you — on the map as well as during a drive. If you have also turned on Background Recording, it can keep sharing during a drive while the screen is off. Details below.

Please read this alongside our Terms of Use / EULA, which govern your use of the app, and our Support page.

1. Who is responsible for your data

OVERDRIVE is operated by a solo independent developer. For any privacy question, request, or complaint, contact us at:

Email: hello@overdriveapps.com

We are the data controller for the limited data described in this policy. Because we are a small independent developer, the fastest and only channel for privacy requests is the email address above.

2. Summary of what we process

Data	Why	Where it lives	Leaves your device?
Precise location (GPS) — while you are recording a drive (foreground by default; also in the background if you turn on the optional Background Recording setting), plus a one-off fix when the map opens, to show where you are, and when you choose to send a location pin in a chat	Record your drive, paint the roads you discover, show your position, measure distance, and score smoothness ("Flow")	On your device	Your routes are never uploaded to our server. Your position reaches our server only through Convoy, if you turn it on, and a location pin you choose to send in a chat. Route coordinates are also sent out by Snap to Roads (on by default: finished routes go to OSRM) and by directions and place search — see §4
Motion / accelerometer data	Score driving smoothness (gentle inputs, steady pace) for Flow — never speed	On your device	No. Raw motion never leaves your device
Drive routes & painted map (coordinates, discovery %)	Draw your route and fill in your map	On your device only — never stored on our servers	Not to us. While Snap to Roads is on (the default), each finished route's coordinates are sent to OSRM for road-matching — see §4
Drive summaries (date, distance, duration, Flow score)	Leaderboard and crew totals	On your device and on our server	Yes, on save
Profile you enter (display name, bio, photo, car make/model/year/color, optional social handles)	Personalize your garage; let friends and crew-mates see who you are	On your device and on our server	Yes
Crews, friends, direct messages	Multiplayer: crews, friend connections and chat	On our server (they have to reach other people)	Yes
Live position (Convoy: off by default; while it is on, whenever OVERDRIVE is open and in front of you — on the map as well as during a drive — and, with Background Recording on, during a drive while the screen is off)	Let accepted friends and current crew-mates see you on the map (anyone can join a public crew)	On our server, as one row holding your latest position: refreshed about every 12 seconds while you record a drive and about once a minute otherwise. Other drivers can see it only while sharing is on and for at most three minutes after the last refresh. The row is overwritten each time, keeps no history, and is deleted with your account	Yes, while Convoy is on and the app is open or recording a drive
Usage data (from version 2.0.1; on by default, off with Garage → Your data → Share usage data) — when the app is opened or closed; whether it is open, recording a drive or in the background; finishing onboarding; your answer to the location prompt; starting and ending a drive, with a rough length only (under 1 km, 1–5, 5–20 or over 20 km) and whether it was your first, second or a later drive; opening the paywall, which plan you tap and whether the purchase went through; tapping share; opening or entering a competition; your answer to "how did you find us"; the app version and the time	See where the app breaks or where people get stuck, and count how many people are using it right now	On our server, against your anonymous account id (not your name or Apple ID). Only we see it, as counts on an internal dashboard. Deleted after 90 days	Yes, while the switch is on. Never your location, route, speed or anything you type
Reports you submit	Let you flag unsafe or inappropriate community content	On our server, so it can be acted on	Yes
Email address — only if you enter a competition	Run the competition and contact you if you place. Separately, and only if you tick a box that is unticked by default, tell you about future competitions and OVERDRIVE news	On our server, against your account. Never shown to other drivers	Yes, when you enter
Map tile requests	Draw the dark base map you see	Rendered from a map-tile service	Your IP address and the map area you view reach the tile provider (see §4)
Subscription / purchase status	Unlock the app and validate your subscription	Handled by Apple and our purchase-management provider	Yes (see §4 and §5)

OVERDRIVE does not collect: your contacts, your photos library (beyond a single image you deliberately pick for your profile), your microphone, your health data, your browsing history, or any advertising identifier (IDFA). We do not use App Tracking Transparency tracking because we do not track you across other apps or websites.

3. Location data — the detail (because driving apps deserve it)

Location is the heart of OVERDRIVE, so we want to be precise.

Precise ("full accuracy") location is required to paint roads accurately and to score Flow. Approximate location would make the core feature useless.
"While Using the App" (foreground) location powers live recording when the app is open. This is the default, and the app keeps your screen awake during a drive.
Background location is optional and off by default. If you turn on Background Recording (in Garage) and grant "Always" access, the app keeps recording your route during an active drive even when the screen is off or another app (like a navigation app) is in front. It runs only while a drive is in progress, iOS shows the blue location indicator the entire time, and recording stops the moment you end the drive. It is never used when you are not on a drive.
You are always in control. You can grant, downgrade (to "While Using" or "Approximate"), or revoke location access at any time in iOS Settings → Privacy & Security → Location Services → OVERDRIVE. Revoking it stops recording; the app does not work around your choice.
We never track you in the background outside of an active drive. We do not build advertising or location-history profiles. We share your live location with other people in exactly one case — the Convoy setting, which is off until you switch it on. While it is on it shares your position whenever OVERDRIVE is open and in front of you — not only during a drive — and only with friends you have accepted and crews you are in (anyone can join a public crew). It does not run in the background, with one exception: if you have turned on Background Recording, a drive that keeps recording with the screen off or another app in front can keep sharing until you end the drive. Otherwise, leaving the app, locking the phone or turning Convoy off stops it; your position disappears from their maps at once, or at most three minutes later if the app could not say so.

Motion / accelerometer data is read from the device sensors *only* to compute how smoothly you drive (the change in acceleration, or "jerk"). Faster driving can never raise your Flow score — smoothness can. This computation happens entirely on your device, and the raw motion signal is never transmitted.

4. When data leaves your device — third-party services

OVERDRIVE keeps data local by default. The following are the only external services the app contacts, and exactly what each one receives.

a) OSRM routing & road-snapping (`router.project-osrm.org`)

The public Project OSRM service is used in two cases: (1) when you ask for directions to a destination in "Where are you going?", and (2) when the Snap routes to roads setting aligns a finished drive to real roads — this is on by default, because the painted trail following real roads is the point of the map, and a single switch in Garage turns it off and keeps every trace on your device. In those cases the app sends the relevant route coordinates — at full resolution, and these can include where a drive started or ended.

We send only coordinates — no name, no device identifier, no account identifier, and no profile data.
OSRM returns the route or matched road geometry, which we store on your device. Neither the coordinates sent nor the matched line are stored on our servers.
If the request fails, times out, or you are offline, the app gracefully falls back (raw local trace, or you simply drive without a route) and never blocks your drive.
Project OSRM is an open-source community mapping project. We do not control its infrastructure or logging. If you prefer that no coordinates ever leave your device, keep Snap to Roads off and don't request directions.

b2) Photon place search (`photon.komoot.io`)

When you type a destination in "Where are you going?", your search text and your current location (only to rank nearby results) are sent to the Photon geocoder, operated by Komoot, which returns matching places. No name, account, or profile is sent. If you never use destination search, nothing is sent to Photon.

b3) Apple location services (place names)

To label your map with a nearby place name, your device may convert coordinates to a place name using Apple's on-device/location services. This is handled by Apple under its own privacy policy.

b4) Nearby places (OpenStreetMap Overpass)

To show fuel stations, chargers, viewpoints and mountain passes around you on the map, the app sends your position rounded to about 1 km to the public OpenStreetMap Overpass service (overpass-api.de, or one of its public mirrors overpass.kumi.systems and overpass.osm.ch if it is busy). Like any web request it also receives your IP address. No name, account, profile or route is sent, and results are cached on your device so the same area is not asked twice.

b) Map tiles — always used

The map is drawn from tiles served by Esri ArcGIS Online (server.arcgisonline.com) and, on some platforms, OpenFreeMap — both built on OpenStreetMap data. Loading tiles is a standard web request, so the tile provider receives your IP address and the tile coordinates (i.e. the map area) you are viewing. This is inherent to displaying any online map. Map data © OpenStreetMap contributors © Esri.

c) Supabase (accounts & online features) — active

Online features are live. When you use them, Supabase stores the data they need under an anonymous account created on your device — no password, and nothing linking it to your Apple ID. It holds no email address unless you enter a competition (see §2).

Profile — the display name you choose, an optional bio, vehicle type and car details, and a randomly generated friend code.
Drive summaries — distance, duration and Flow score for each drive. The route itself is never uploaded. Speed is never uploaded or ranked; it leaves your phone only on a route poster you choose to share.
Crews and friends — crew membership, join requests, and accepted friendships.
Direct messages — messages you send to an accepted friend, readable only by the two of you.
Location pins — if you choose to share where you are in a direct message or crew chat, the app takes one precise position, asks you to confirm and names who will see it, then stores it on our server as part of that message. It does not update after you send it.
Live position (Convoy) — see the dedicated section below.
Notification token — only if you allow notifications: your iPhone's push token, so you are told when someone adds you, messages you, messages your crew or joins it. Nothing else triggers a notification from our server. The token is deleted with your account.

You can delete your account and everything above from inside the app at any time (Garage → Delete account). It is immediate, needs no email or waiting period, and cannot be undone.

c2) Convoy — sharing your live position

Convoy is the only feature that shares your live position with other people. (A location pin you send in a chat is a single position that does not update — see c) above.) It is off by default and does nothing until you switch it on yourself.

It is a switch in Garage, with a matching chip on the map. Turning it off stops sharing immediately.
While it is on, it publishes your position whenever OVERDRIVE is open and in front of you — on any screen, parked or moving, not only during a drive. While you record a drive it refreshes about every 12 seconds; the rest of the time about once a minute, using the position the map last took.
It does not run in the background, with one exception: if you have turned on Background Recording, a drive that keeps recording with the screen off or another app in front can keep publishing about every 12 seconds until you end the drive. Otherwise, leaving the app, locking the phone or losing signal stops publishing, and the app tells our server you have stopped; if it cannot (no signal, or the app was force-quit), the three-minute limit below hides you anyway.
Your position is visible only to drivers you have accepted as friends, and to members of crews you are currently in. Crews are public by default, and anyone can find a public crew and join it instantly, which makes them a crew-mate who can see you; a private crew admits only drivers its founder accepts. Your position is never shown on a public map or to drivers who are neither your friends nor your crew-mates, and it is never sold or used for advertising. This limit is enforced by the database itself, not by the app, so a modified copy of the app cannot widen it.
Other drivers can only see a position that is less than three minutes old. If the app is force-quit or cannot reach our server to say you have stopped, you disappear from other people's maps on your own within three minutes.
Leaving a crew, or removing a friend, ends their ability to see you.
Only your current position is shared. Our server keeps a single row per driver holding the latest position you shared; each refresh overwrites it, so there is no history of where you have been, and other drivers cannot see your route. After you stop sharing, that last position stays in the row, hidden from everyone, until you share again or delete your account.

d) RevenueCat + Apple (subscriptions) — active

Subscriptions are live. RevenueCat manages subscription entitlements and validates purchases, sitting on top of Apple's In-App Purchase / StoreKit system. In that flow:

Apple processes the actual payment and is the merchant of record; Apple receives your purchase transaction data under Apple's own privacy policy. We never see or receive your card number or full payment details.
RevenueCat receives a pseudonymous app-user identifier and your subscription/receipt status so the app knows what you are entitled to. RevenueCat processes this as our service provider.

We have no advertising SDK, no third-party analytics SDK, and no social-media tracking pixel in the app.

e) This website (overdriveapps.com)

The website sets no cookies and runs no analytics. Its fonts, scripts and the map tiles behind the homepage's live 3D city are served from the site itself, so apart from our web host delivering the pages, a visit sends nothing to third parties. The App Store, Discord and email links leave the site only when you choose to open them. The homepage stores nothing on your device between visits.

5. Payments

Subscriptions are sold only through Apple's In-App Purchase. Apple handles billing, renewals, refunds, and receipts. We do not collect or store your payment card, bank details, or billing address — those stay with Apple. See our Terms of Use for pricing, auto-renewal, and cancellation terms.

6. How we use your data

We use the data described above solely to:

record your drives and measure distance;
paint the roads you discover and track your city-discovery percentage;
compute your smoothness-based Flow score, XP, and levels;
display the map and your position;
provide distance leaderboards and crew distance totals — ranked by distance only, never by speed or time — and social features you opt into;
provide and validate paid subscriptions;
understand, from first-party usage data, where the app breaks or where people get stuck, so we can fix it (from version 2.0.1, and only while Share usage data is on);
run competitions you enter and contact you if you place — and, only if you separately opted in, email you about future competitions and news.

We do not use your data for third-party advertising, cross-app tracking, profiling, or resale, and we never share your email with anyone else. We do not use your data to train advertising or third-party AI models.

7. Legal bases (for users in the EU/EEA/UK)

Where the GDPR or UK GDPR applies, we rely on:

Consent for precise and location access while using the app and for motion data — granted through the iOS permission prompts, revocable at any time in Settings.
Performance of a contract (our Terms) to provide the app's core functionality and any subscription you buy.
Legitimate interests to keep the app working, secure, and free of abuse — balanced against your rights. This includes the first-party usage data described in §2, which never includes your location, route or speed and which you can switch off at any time in Garage → Your data → Share usage data.
Performance of a contract — the competition's rules — to process the email you give when you enter a competition, and to contact you if you place.
Consent for marketing email: given only by ticking a separate box that is unticked by default, and withdrawable at any time by emailing hello@overdriveapps.com.

You may withdraw consent at any time by revoking permissions in iOS Settings or by deleting the app.

8. Data retention

On-device data (drives, profile, discovery, reports) persists on your iPhone until you delete it in the app or delete the app itself. Deleting the app removes this locally stored data from your device.
OSRM and map-tile requests are transient network calls; any logging is controlled by those providers, not by us. We never upload your route to our own server, so there is no server-side copy of it to retain — we store drive summaries only (date, distance, duration and Flow). Everything we do hold is deleted immediately when you delete your account in the app.
Server data (your anonymous account, profile, drive summaries, crews, friends, messages, reports, the last position you shared with Convoy if you have ever used it, and any competition entry and its email) is retained until you delete your account, after which it is removed immediately, except where we must retain limited records to comply with law.
Usage data (from version 2.0.1) is deleted automatically after 90 days, and immediately with your account. Turning Share usage data off stops new events and removes your live open/driving row.
Purchase records are retained by Apple and RevenueCat under their own policies.

9. Your rights and choices

Regardless of where you live, you can:

Access / export: Your routes and painted map live on your device and you can view them in the app. For a copy of what we hold on the server, email us and we will send it.
Delete: Deleting the app removes everything stored on your device. To delete what we hold on the server — profile, drive summaries, crews, friends, messages — use Garage → Delete account in the app: it is immediate, needs no email and cannot be undone. You can also email us and we will do it for you.
Restrict location/motion: Change or revoke permissions anytime in iOS Settings.
Withdraw consent / object: Revoke permissions or stop using the app.

If you are in the EU/EEA/UK, you also have the right to rectification, restriction, portability, and to lodge a complaint with your local data protection authority. If you are in California (CCPA/CPRA), you have the right to know, delete, correct, and to not be discriminated against for exercising these rights — and note we do not sell or "share" your personal information as those terms are defined.

To exercise any right, email hello@overdriveapps.com. We may need to verify your request. You can also delete your account and all associated cloud data yourself, instantly, from inside the app (Garage → Delete account). We aim to respond within 30 days.

10. Children

OVERDRIVE is a driving app intended for licensed drivers aged 17 and older. It is not directed to children, and we do not knowingly collect personal information from children under 13 (or under the applicable minimum age in your country). If you believe a child has provided us data, contact us and we will delete it.

11. Security

Data stored on your device is protected by iOS's app sandbox and device encryption.
Network requests (map-matching, map tiles, purchases and backend) use encrypted HTTPS/TLS connections.
No system is perfectly secure, but because OVERDRIVE keeps data local by default, the amount of your data exposed to any network is deliberately minimal.

12. International transfers

Map-matching (OSRM), map-tile (Esri / OpenFreeMap), place search (Photon), nearby places (Overpass), Apple, RevenueCat and Supabase may process requests on servers outside your country, including in the United States and the EU. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) offered by those providers.

13. Changes to this policy

We may update this policy as the app evolves — most notably when we enable accounts, backend features, or in-app purchases. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

14. Contact

Questions, requests, or complaints about privacy: