This policy explains what the Beepo app and this website collect, why, who else sees it and how you control it. Beepo is run by [operator name], [address] (“we”). We are the controller of your personal data under the GDPR. Write to us at hello@thebeepo.com.
The short version
- We collect only what the app needs to work. No ads, and we never sell your data.
- Your location goes only to the friends you accept, and only while you share it.
- Your drive routes stay on your phone. The server gets the totals: time, distance and top speed.
- You can delete your account and data at any time.
What we collect and why
Account
Your phone number (for sign-in with an SMS code) or, if you sign in with Google, your Google account email and name. Your display name, username, profile photo and invite code. We need these to create and run your account.
Location
While you use the app and, if you allow it, in the background: your precise position, speed and heading, whether you are driving or parked, a place type such as home or café, and your phone’s battery level. We use it to show you on the maps of the friends you accepted, to record your drives and to navigate. The server keeps only your latest position and overwrites it as you move. Friends stop seeing it when you turn sharing off, hide from them or switch on ghost mode. You can withdraw the location permission in your phone’s settings at any time.
Drives
When a drive ends, the app sends its start and end time, distance, moving time, top speed, the XP it earned and which of your cars you drove. The route line itself stays on your phone. Friends see your drives, levels and achievements in their activity feed and on the weekly board.
Friends, chats and reports
Friend requests, your friends list, who may see your location, the people you block, reports you send, and your chats: messages, stickers and places you send. We keep messages so the people in the chat can read them.
Contacts (optional)
If you allow it, the app reads the phone numbers in your address book and turns each one into a SHA-256 hash on your phone. Only these hashes are sent. The server keys them again with a secret and uses them only to show which of your contacts already use Beepo. Names and other contact details never leave your phone.
Cars and photos
The make, model, year, colour and nickname of your cars, and the car photos you add. Friends see the photos only if you turn this on. When you use car recognition, the photo is sent to Google’s Gemini model through Firebase AI Logic, which suggests the make and model.
Device and app
An installation ID, platform, app version, language, time zone and a push notification token, so we can send notifications to the right phone. Firebase App Check confirms that requests come from the real app. Your interests and onboarding answers help us suggest places.
Legal bases
We process this data to provide the service you signed up for (Art. 6(1)(b) GDPR), with your consent for location, contacts, photos and notifications (Art. 6(1)(a)), and for our legitimate interest in keeping the service safe, for example handling reports and preventing abuse (Art. 6(1)(f)).
Who else receives data
We use these providers to run Beepo. They process data on our behalf and only for this purpose:
- Supabase: database, sign-in, file storage and live updates.
- Google Firebase: App Check, push notifications (Cloud Messaging) and car photo recognition (Firebase AI Logic with Gemini).
- Google Sign-In, if you sign in with Google.
- Mapbox: maps, search and directions. It receives your location and searches when you use the map.
- Wikipedia and Wikimedia: descriptions and photos of places. They receive the name of the place you open.
- An SMS provider that delivers sign-in codes to your phone number.
Some of these providers are based outside the European Economic Area, mainly in the United States. Transfers there rely on the EU–US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses. Besides them, only the friends you accept see what you share. We may disclose data when the law requires it.
How long we keep it
- Account, drives, cars and chats: while your account exists. When you delete it, we erase your data within 30 days, and backups roll over within another 30 days.
- Location: only your latest position, overwritten as you move.
- Reports: as long as needed to handle them and prevent abuse.
Your rights
You may access your data, correct it, delete it, restrict or object to its processing, take it with you, and withdraw consent at any time. Write to hello@thebeepo.com. You can also complain to a data protection authority: in Poland this is the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or the authority in your own country.
This website
This site uses no cookies and no analytics. It remembers your language choice in your browser’s local storage. The Google Play badge loads from Google’s servers, which receive your IP address. Our hosting provider may keep standard server logs for security.
Children
Beepo is not for people under 16. We do not knowingly collect data from them. If you believe a child uses the app, write to hello@thebeepo.com and we will delete the account. See also our child safety standards.
Changes
When this policy changes, we update this page and the date above. If the change is significant, we tell you in the app first.