Privacy policy

Last updated: 26 September 2026

1. Who is responsible

This policy covers the Scenic Drives mobile app and scenicdrives.app website. The operator and data controller is Kamil Maliszewski.

Or email help@scenicdrives.app.

2. Information the app handles

• Account and profile: email address, authentication information, user ID, display name, username, date of birth, country, home town or region, preferences and an optional profile photo.
• Location and journeys: precise location when permission is given; route waypoints, saved places, navigation progress, trip distance and duration, and trip records. Active navigation may use location while the screen is locked or the app is in the background. This is distinct from sharing a public Drive.
• Your Garage: vehicle details, photos, notes, modifications and related Drive statistics that you choose to add.
• Content and community: Drives, Spots, photos, posts, comments, likes, ratings, reports and blocks. Publishing or posting makes the selected content visible to other members according to the app’s controls.
• Support and technical information: correspondence and technical information necessary to operate, secure and troubleshoot the service, such as IP addresses and service logs.

3. Why we use it

We use account and content information to provide the service you request; location to find nearby places and guide your selected journeys; and reports and technical information to maintain safety and security. Optional permissions let you choose whether to use location and photo features.

Where UK or EEA data-protection law applies, the relevant grounds include performing our agreement with you, consent where required, legitimate interests in maintaining and protecting the service, and legal obligations. You can withdraw permission or consent for optional processing without affecting earlier lawful processing.

4. Services and sharing

Scenic Drives uses Supabase for account authentication, database and photo storage, Mapbox for maps, routing and navigation, and Cloudflare for website delivery. These providers process information needed for their services. Map and navigation requests may include coordinates, device and network information. Optional Apple or Google sign-in, when enabled, exchanges account identifiers and the information you authorise.

Provider details: Supabase privacy, Mapbox privacy, and Cloudflare privacy. Information may also be disclosed where required by law or necessary to protect people and the service. We do not sell personal information.

5. What other members can see

Saved Drives and Spots are private until you choose to publish them. Community posts share your author information and the content you choose. Do not include your home address, private route segments, someone else’s personal information or sensitive details in public descriptions and photos. Copies already saved by other people are outside our direct control. Previously issued image links can remain available until they expire.

6. Retention and deletion

Account information and saved content are kept while needed to provide your account and chosen features. Archiving a Drive or Spot, removing a photo from an editor or hiding a trip from history may not erase the underlying stored data.

You can request deletion of your account and associated information through the account-deletion page, or ask to delete particular data. Account deletion includes authentication, profile, saved routes and places, Garage information, journeys, uploaded media and associated community content. Necessary legal or security records may be retained only for the applicable purpose; any exception and its retention period must be explained when handling a request.

Before launch: the operator must confirm deletion timing, backup expiry and any specific legal or security retention periods. This draft must match the actual deletion process.

7. Your choices and rights

You can change permissions in your device settings, edit profile information and choose what you publish. Depending on your location, you may request access, correction, deletion, restriction or portability of your information, object to certain processing, and withdraw consent. Contact us to make a request. We may verify account ownership, but will not ask for your password.

You may complain to your local data-protection authority. In the UK, this is the Information Commissioner’s Office.

8. Security and international processing

We use authentication, access controls and encrypted connections to protect information. Service providers may process data outside your country. Where required, international processing must use an appropriate legal transfer mechanism. No online service can guarantee absolute security.

9. Age requirements

Scenic Drives is intended for people aged 16 and over. Using the app does not give permission to drive: drivers must meet local licensing, insurance and road-safety requirements. Contact us if you believe someone under 16 has supplied personal information.

10. This website and updates

This website does not set advertising or analytics cookies, load third-party fonts or run advertising trackers. Website hosting processes network information to deliver and protect pages. Email links open your own email service; no request is sent merely by visiting a page. External links are governed by the destination’s policies.

We update this page when our practices change and update the date above. Material changes will be communicated where required.