Privacy Policy
Last updated: 28 July 2026 · Effective: 28 July 2026
APEX shares your live location with people you choose. That is the most sensitive thing we handle, so this policy says plainly what we collect, why, who sees it, and how to get rid of it.
Contents
1. Who we are
APEX is a social driving app for iPhone. This policy covers the APEX app and apexdriving.app.
Data controller: Hayden Lynam, a sole proprietor based in Fort Wayne, Indiana, United States. Contact privacy@apexdriving.app and we will provide a postal address on request.
2. What we collect
You give us
| Data | Why | Required? |
|---|---|---|
| Email address | Your account, and to reach you about it | Yes |
| Display name and @handle | So your crew can find and recognise you | Yes |
| Car details — make, model, year, colour, body, modifications | Your garage profile | No |
| Photos of your car | Your profile and map pin | No |
| Meets you create or RSVP to | To run the meet and show who's going | No |
| Marketplace listings | To show what you're selling | No |
| Reports you file | To review and act on them | No |
| Business inquiries | To reply to you | No |
We collect automatically
- Live location while the app is open — see section 3.
- Drive routes, if you leave drive recording on. These stay on your phone. We never receive them.
- Purchase status — whether you have APEX Pro or a Founder's Club membership. Apple handles the payment; we never see your card.
We deliberately do not collect
- Your date of birth. The age check on first launch happens on your phone and only the yes/no result is kept.
- Your contacts, photo library, microphone, or camera roll. Picking a car photo uses Apple's picker, which hands us the one image you chose and nothing else.
- Your top speed, or any record of how fast you drove. APEX does not measure it and has no scoreboard.
- Advertising identifiers. There are no advertising or analytics SDKs in APEX.
- Background location. APEX cannot see where you are when the app is closed.
3. Location — the detail
- When: only while APEX is open on your screen. There is no background location permission, so the app cannot follow you around.
- Who sees it: only mutually-accepted crew members. Not the public, not other APEX users, not people who merely requested you.
- How it travels: over a live channel and straight to their phones. We do not write your live position to a database or keep a history of where you've been.
- Turning it off: Settings → Share my live location while driving. You can also revoke location entirely in iOS Settings; the rest of the app still works.
- Meets have a location because that's the point of a meet — that address is visible to signed-in drivers nearby.
- Blocking stops location sharing both ways, immediately.
4. How we use it
- Run the app: show your map, your crew, your garage, meets and listings.
- Keep you signed in across devices.
- Deliver what you paid for, and restore it on a new phone.
- Review reports and enforce the community guidelines.
- Reply to your support and business emails.
- Fix bugs and keep the service working.
We do not sell your data, and we do not use it for advertising or profiling. There is no ad network in APEX.
5. Who else sees it
Other users
Your display name, @handle, car details, car photo, meets and listings are visible to signed-in APEX drivers. Your live location is visible only to mutual crew. Your email address is never shown to anyone.
Service providers
| Who | What they handle |
|---|---|
| Supabase (hosted on AWS) | Our database, sign-in and file storage. Everything in section 2 that isn't local to your phone. |
| Apple | App distribution, Sign in with Apple, purchases, and the maps. Apple's own privacy policy applies to their services. |
| Only if you choose Sign in with Google — they confirm who you are and give us your email. | |
| Stripe | Only if you buy an event ticket. They handle the card; we never see it. Not yet active. |
We require these providers to protect your data to the same standard set out here, and they may not use it for their own purposes.
Legal
We will disclose data if legally required, or where necessary to prevent serious harm — a credible threat to someone's safety, or harm to a child.
6. How long we keep it
| Data | Kept |
|---|---|
| Account, profile, garage | Until you delete your account |
| Live location | Not stored — it passes through and is gone |
| Drive routes | On your phone, until you delete them or the app |
| Meets and listings | Until you delete them, or your account |
| Reports | 2 years, so we can spot repeat behaviour |
| Business inquiries | 2 years |
| Purchase records | 7 years, where tax law requires it |
7. Your rights and controls
In the app, right now
- Delete your account: Settings → Delete my account. Erases everything above from our servers and your phone. It cannot be undone.
- Stop location sharing: Settings → Share my live location while driving.
- Stop drive recording: Settings → Drive recording.
- Block someone: the ⋯ button on any listing, meet or profile.
- Edit or remove your profile, cars, photos and listings at any time.
By email
Write to privacy@apexdriving.app from your account address to access, correct, export, restrict, or object to our use of your data. We respond within 30 days, free of charge. We will never treat you differently for exercising a privacy right.
8. Security
- Everything is encrypted in transit (TLS) and at rest.
- Database access is governed by row-level security: the rules are enforced by the database itself, not by the app asking nicely.
- Nobody can read another person's crew, private data, reports, or inquiries through the app.
- We hold no payment details at all.
Car photos are served from a public URL so they load quickly on other people's maps. Anyone with the exact link can view that image — so don't upload a photo you wouldn't want seen. No other data works this way.
No system is perfectly secure. If a breach affects you, we will tell you and the relevant regulator as the law requires.
9. Children
APEX is for adults. You must be 17 or older, and we check your age before you can create an account. We do not knowingly collect data from children. If you believe a child has an account, email privacy@apexdriving.app and we will remove it.
10. California, EU & UK
California (CCPA/CPRA)
Precise geolocation counts as sensitive personal information. We use it only to provide the features you asked for, never to infer anything about you, and never for advertising. You have the right to know, delete, correct, and limit our use of sensitive information; section 7 explains how. We do not sell or share personal information as those terms are defined, and we have not in the past 12 months.
EU & UK (GDPR)
Our lawful bases are contract (running the app you signed up for), consent (location sharing and drive recording, both revocable at any time), and legitimate interests (security, abuse prevention, and replying to your emails). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority. Data is processed in the United States under Standard Contractual Clauses.
11. Changes
If we make a material change we'll tell you in the app before it takes effect, not just by editing this page. The date at the top always reflects the current version.
12. Contact
Privacy: privacy@apexdriving.app
Support: support@apexdriving.app