Privacy Policy

1. Who is responsible

The app is developed and published by:

Mgr. Martin Krček
Šmilovského 336/6, 627 00 Brno, Czech Republic
Business ID (IČ): 64281736
Email: martin@krcek.cz

drovee is published by one person, not a company.

We have no Data Protection Officer and are not required to have one: we don't process personal data on a large scale and we monitor no one systematically. Write to the address above — you'll reach the same person who writes the app.

2. How this is built

Most apps work like this: you create an account, your data goes to the developer's server, and the developer then explains how they treat it. drovee is built differently — there is no server.

The app stores everything in its own database inside your iPhone, in an area other apps can't see. We have no access to it. Not even in principle: there is no address the app would send data to, and no call in its code that would send any.

In practice this means that for the data created inside the app we are not a controller in the GDPR sense. We can't hand it over to you and we can't delete it, because we don't have it — that is the point. You can delete it yourself, at any time and without asking (section 8).

There is exactly one place where we genuinely receive personal data from you: when you send us an email. That's section 9.

3. What the app stores on your phone

To be useful, drovee has to remember a few things. This is the complete list:

About a drive

• start and end date and time, duration,
• approximate distance (and your manual correction, if you make one),
• the route as a simplified line of GPS points,
• the name of the start and end place, when it can be resolved (section 5),
• the weather during the drive, when it can be fetched,
• your own note about the drive, if you write one.

About how it went

• the mood you pick,
• the experiences you tick (“first time in the rain”, “roundabout”, “car wash”),
• who rode with you — the name or nickname of your passenger, if you enter one,
• an optional rating of your passenger, which is meant as a joke between two people and feeds into no calculation whatsoever.

About you

• the nickname you choose,
• your situation (driving with an accompanying adult / newly licensed / returning to driving),
• how the app should address you,
• your XP, Experience Level and unlocked trophies,
• app settings, such as the calmer-celebration switch or the iCloud backup toggle.

What the app doesn't have at all

• speed — it is never displayed and enters no calculation,
• any driving-style rating, score or grade,
• your email, phone number, legal name or driving licence number,
• your contacts, photos, health data or anything else from your phone.

A passenger's nickname may be someone else's personal data. It stays on your phone like everything else — but it's fair that you know you're writing it down.

How long it stays

Until you delete it. There is no automatic clean-up after a year and no retention period we invented — it's your data on your phone. Delete the app and the data goes with it. (One exception: the iCloud copy, if you enabled backup. See section 6.)

4. Location

Location is the most sensitive thing drovee touches, so it gets its own section.

• It is used only to record your route, and only while a drive is running. It starts when you tap Start Drive and ends when you finish the drive — or when the app ends it for you after half an hour without movement.
• We ask for “While Using the App”, never “Always”. Recording continues with the phone locked, but only because you started it and the system keeps the app running for that reason. With no drive in progress, drovee doesn't look up your location at all.
• Your location goes nowhere. Route points are stored in the on-device database, simplified into the line you later see on the map. We don't send them anywhere, to anyone.
• Decline location and the app still works. You can log a whole drive by hand, distance included. That's a full mode, not a fallback.
• While a drive is running, iPhone shows the location indicator at the top of the screen. When you end the drive, it goes out.

Coordinates leave your phone in two cases only — for weather and for a place name. Both go to Apple, and both are described in the next section.

5. Apple's role

drovee runs on iPhone and uses three Apple services. Apple acts on its own behalf there, not as someone processing data for us.

Weather (Apple WeatherKit)

When a drive starts, the app asks for the weather. That request passes a coordinate and a time to Apple. Back comes temperature and conditions, stored with the drive. If the weather can't be fetched (a garage, airplane mode), the drive is saved without it and the app tries again later. Wherever WeatherKit data is shown, the Apple Weather mark is shown with it — Apple's terms require this.

Place names (Apple MapKit; CoreLocation on older systems)

So a drive can say “Brno” instead of two numbers, the start and end coordinates are sent to Apple and a place name comes back. Nothing else is passed.

Maps

Map tiles for a drive are fetched from Apple at the moment the map is displayed.

Optional iCloud backup has its own section 6.

How Apple handles such requests is described in Apple's own policy: www.apple.com/legal/privacy

Apart from Apple, drovee uses no other service, server or third-party library that sends anything anywhere. The post-drive tip and the suggestions of what to try next are produced on your phone from the experiences already stored there — nothing is transmitted for them.

6. iCloud backup

Your Profile has a Back up to my iCloud toggle. It is off by default, it is not offered during onboarding, and it never turns itself on.

When you turn it on:

• your data is mirrored into the private database of your own iCloud (CloudKit, private scope);
• it is your iCloud, protected by your Apple Account. We cannot reach it — we have no key, no account and no interface that would allow it;
• with backup on, your drives follow you to other devices signed in to the same Apple Account and survive changing phones;
• turning backup off does not delete the iCloud copy. To remove it, go to Settings → your name → iCloud → Manage Account Storage;
• if backup fails for any reason (iCloud full, signed out, iCloud disabled), the app keeps working and your data stays safely on the phone.

Backup is the one place where data leaves your phone other than by your own hand. Even then it doesn't come to us — it goes to your iCloud. Processing inside iCloud is governed by Apple's policies.

7. What drovee does not do

• No analytics. There is no Google Analytics, Firebase, Amplitude, Mixpanel or anything similar. We don't know which screen you opened, or whether you opened the app at all.
• No ads and no advertising identifiers.
• No tracking SDKs and no cross-app profiling. drovee will never show you the “Allow tracking?” prompt, because there is nothing for it to track.
• No sharing or selling of data to third parties. We have nothing to share.
• No automated decision-making about you. The app calculates no driver score and sorts no one into categories.

The only thing we know about the app is the aggregate figures Apple shows in App Store Connect — how many times it was downloaded, how it is rated. They are anonymous and aggregated; they don't lead to any individual and we can't recognise anyone in them.

Notifications. drovee sends exactly one: “Still driving?” after ten minutes without movement, so a finished drive doesn't keep running. It is created on your phone, passes through no server, and permission is requested only at your first drive. Decline it and recording still works.

Sharing a trophy. A trophy or level can be sent as an image — but you always send it yourself and you see it first. The card never carries a map, coordinates, a place name or speed; the app has no way to put them there. What happens to the image afterwards depends on where you send it.

8. Deleting your data

Your Profile has a Delete all data button. Confirm it and every drive, route, XP point, trophy and your profile are removed from the phone. It can't be undone and we hold no copy anywhere else.

The second route: delete the app. Its entire database goes with it.

9. When you email us

This is the one place where we genuinely receive personal data — and here we are a controller.

• What we receive: the email address you write from, plus whatever you put in the message or attach to it.
• Why we process it: to answer you and, where relevant, to fix the bug you ran into. The legal basis is our legitimate interest in answering a user's question (Art. 6(1)(f) GDPR); for a complaint about a paid app, performance of a contract (point (b)).
• How long: we keep correspondence while the matter is open, and for at most a year after that so a follow-up still makes sense. Then we delete it.
• Who else sees it: no one but us. Email runs on Google Workspace (Google Ireland Limited), which acts as a processor for that part.

Don't send us more than you need to. For most problems, the app version, your phone model and a description of what happened are enough. A screenshot of your route map doesn't help us — and it shows where you drive.

10. Your rights

Under the GDPR you have the right of access to your data, and rights to rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interests, and not to be subject to automated decision-making.

Here's what that looks like for an app with no server:

For correspondence (section 9) you exercise these rights by writing to martin@krcek.cz. We reply within one month at the latest, free of charge.

If you believe we're handling your data badly, you can lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (Czech Data Protection Authority), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, www.uoou.gov.cz. We'd rather you wrote to us first — but it's your right, not a favour.

11. Children and young people

drovee is for people who are already allowed behind the wheel — in the Czech Republic that means 17 and over, the age at which you may drive accompanied under the national L17 scheme. It is not an app for children and we do not submit it to the App Store Kids Category.

In the Czech Republic, the age at which a young person can validly consent to the processing of personal data in information-society services is 15. Our audience is above it.

Processing a child's personal data has nowhere to happen here in any case: the app has no account, doesn't ask for an age, collects no contact details and sends nothing out. If someone younger opened it, we would have no more access to their data than to anyone else's.

A practical note for parents: drovee is not a monitoring tool. There is no parent account, no location sharing and no report about where your child drove. That's deliberate, not a gap.

12. Security

The data sits in the app's storage on your iPhone, protected the way the system protects app data — which mostly means: your phone is locked and encrypted. Set a passcode and turn on Face ID or Touch ID; that's the one measure that genuinely matters here. With iCloud backup on, your Apple Account's security applies; we recommend two-factor authentication.

That removes most of the risks such documents usually deal with: there is no database of ours that could leak, and no passwords of ours that could be stolen.

13. Changes to this policy

If the app changes so that this text stops being true, we change the text — not the other way round. The last-updated date is at the top. Any substantial change (say, if a feature that sends data out ever appeared) will be announced in the app, not by quietly rewriting this page.

14. Contact

Anything about privacy, data or this document: martin@krcek.cz. One person replies, not a department. Usually within a few days.

More on the contact page. Related document: Terms of Use.