Privacy Policy

Effective: July 6, 2026

Speedio ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information Speedio collects, how it is used, and the choices you have. It applies to the Speedio iOS application ("Speedio" or "the App") and any related services we operate.

If you do not agree with this policy, please do not install or use the App.

Summary

Information We Collect

Account Information (only if you create an account)

Creating an account is optional. If you do create one, we collect:

• Email address — used to sign you in and to send important service notifications.
• Display name (username) — for in-app greetings and identity.
• Authentication provider metadata — your Firebase user ID, and, if you use Sign in with Apple, the email and name Apple returns the first time you sign in.
• Password — only if you create an email/password account. Passwords are stored by Firebase using salted one-way hashing; we never see your plaintext password.

We do not request or collect a phone number, real name (other than what Apple returns), profile photo, or any government identifier.

Location Data

Speedio uses GPS location exclusively to display your speed, your position on the map, posted speed limits and (in Arizona) nearby speed cameras, and to enable CarPlay navigation.

• Location is processed on-device to compute and display speed and to pick a current speed limit.
• If you record a drive session, location readings (latitude, longitude, timestamp) are saved on the device. If you are signed in, those readings are also synced to our cloud database when the session ends so you can see the same session on another device. If you are not signed in, no cloud copy is ever created.
• If you are signed in, your most recent location is also written to your account to support future cross-device features.

You can disable Speedio's location access at any time in iOS Settings. Doing so will break the core speed display and navigation features.

Drive Session Data

When you press Record, Speedio captures, once per second: timestamp, latitude, longitude, instantaneous speed, and the posted speed limit in effect at that instant. If your speed exceeds the limit at that instant, an over-limit flag is also recorded. The reverse-geocoded names of your start and end points are saved alongside the session.

Drive session data is stored in on-device SwiftData storage and, if you are signed in, also uploaded to our cloud database under your user ID.

Settings & Preferences

Preferences such as your speed-buffer tolerance, audio-alert toggle, voice-navigation toggle, units (mph / km/h), and GPS accuracy mode are stored via iOS UserDefaults (the same @AppStorage system the App uses) on your device. If you are signed in, the same values are mirrored to your cloud profile so they follow you to other devices.

Device & App-Instance Identifiers

Firebase automatically generates an app-instance identifier (a per-install random ID; no IDFA) when the SDK initializes, and may also receive device-class information needed to deliver its services. See Firebase's privacy policy for the details.

Crash Detection (On-Device Only)

Speedio's Crash Detection feature uses the device's motion coprocessor entirely on-device. No motion, accelerometer, gyroscope, or crash-detected event data is ever transmitted anywhere by this feature.

How We Use Your Information

We use the information above only for these purposes:

• To display your current speed, posted speed limit, position on the map, and the CarPlay interface while you use Speedio.
• To provide turn-by-turn navigation, voice prompts, and audio alerts you have enabled.
• To record, store, and display your drive sessions locally and (when signed in) across your devices.
• To honor your preferences (units, alert tones, GPS precision).
• To authenticate you and protect your account from unauthorized access.
• To diagnose bugs and improve app stability — not for advertising or marketing.

What We Do Not Collect

• No advertising identifiers (IDFA), no cross-app tracking, no fingerprinting.
• No contacts, calendars, photos, microphone audio, or camera data.
• No purchase or financial information — Speedio is free and contains no in-app purchases or subscriptions.
• No marketing or behavioral advertising analytics.

Third-Party Services Your Data Touches

To deliver the App's functionality, certain information is sent to the third-party and Apple-platform services below. We do not sell or rent any personal information to anyone, and we do not share your data with advertisers or analytics companies.

Firebase (Google)

Firebase is used for account authentication and cloud storage of drive sessions, last-known location, user profile, and preferences. Although the FirebaseAnalytics SDK is bundled with the App (a transitive dependency of Firebase), analytics data collection is turned off via the IS_ANALYTICS_ENABLED=false key in the embedded GoogleService-Info.plist, and Speedio does not log any Firebase Analytics events. Service data handled by Firebase is detailed in firebase.google.com/support/privacy.

Apple MapKit & Geocoding (CoreLocation)

For map display, address search, turn-by-turn navigation, and reverse-geocoding your start and end locations, Speedio uses Apple's MapKit framework and CoreLocation geocoder. These calls are subject to Apple's privacy practices, described in apple.com/legal/privacy.

Speed-Limit Data Sources

• ArcGIS HPMS Feature Server (services6.arcgis.com) — for posted speed limits on Arizona state highways. When Speedio looks up a speed limit near your current location, your coordinates are sent to this public ArcGIS endpoint. Coverage is Arizona-only.
• OpenStreetMap via the Overpass API (overpass-api.de) — for posted speed limits outside ArcGIS coverage (most U.S. roads and many international roads). Your coordinates are part of each live query. The Overpass instance is operated by the OpenStreetMap community.

These endpoints receive only your current latitude/longitude and a standard user-agent string. No account or device identifier is shared with either service.

Arizona 511 (az511.com)

The Arizona Department of Transportation operates az511.com. Speedio can fetch its public speed-camera catalog so the App can warn you about known cameras on your route. No Speedio account is required to fetch this list, and nothing identifying you beyond your IP address (a normal part of any HTTPS request) is sent to az511.com.

Apple CarPlay

CarPlay is an Apple-provided framework, not a third-party data processor. When you use Speedio in CarPlay, the same on-device data described above is rendered in your car's display. Apple's privacy policy applies to the CarPlay framework itself.

Data Sharing

We never sell, rent, or trade your personal information. The only entities that receive your data are the service providers listed above (Firebase, Apple platforms, ArcGIS, Overpass, az511.com), each receiving only the minimum data needed for the function you asked for. We do not share your account or drive data with third parties for marketing, advertising, profiling, or any commercial purpose.

We may disclose information only when compelled by valid legal process, or when necessary to protect the safety, rights, or property of our users or the public.

Data Storage, Retention & Deletion

• On-device data — drive sessions and preferences remain on your device until you delete them (via the App's session list or by uninstalling the App). Reverse-geocoded location names are stored only at the start and end of each session, not for every reading.
• Crash-detection data — never persisted anywhere; detection is on-device and ephemeral.
• Cloud account data — retained while your account is active. To request deletion of your account and all associated cloud data (user record, drive sessions, last-known location, preferences), email us at the address below. We complete verified requests within 30 days. We may retain only what is strictly necessary to comply with legal obligations (e.g. tax-record retention) and we will tell you what, if anything, we retain and why.
• Backups — reasonable backups of cloud data may persist for up to an additional 60 days after deletion before being purged.

Security

Account credentials are stored in iOS Keychain. Cloud data is transmitted over HTTPS using TLS. Account access requires the password or Apple ID for the account — we cannot bypass this even with server-side credentials. Despite these measures, no system is perfectly secure; please use a strong, unique password and protect your device.

Children's Privacy

Speedio is designed for general audiences and is not directed to children under 13. We do not knowingly collect personal data from children under 13 (or under the age defined by your local law). If you believe a child has provided us with personal data, contact us and we will delete it.

International Users

Speedio is operated from the United States. If you use the App from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States and in the locations of our service providers listed above. Data-protection laws in those jurisdictions may differ from those of your home country.

Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the rights below under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to Know — request a copy of the personal information we have collected about you in the past 12 months, including the categories of information, the sources, the business purposes, and the categories of recipients.
• Right to Delete — request deletion of the personal information we have collected about you, subject to limited exceptions (e.g. completing a transaction you requested, complying with a legal obligation, security incident investigation).
• Right to Correct — request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing for Cross-Context Behavioral Advertising — Speedio does not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of. We do not currently honor universal opt-out signals, but because we never sell or share data for cross-context advertising, the practical effect of an opt-out signal would already be the default.
• Right to Limit Use of Sensitive Personal Information — California Civil Code §1798.140(ae) classifies precise geolocation as sensitive personal information. Speedio collects precise geolocation and uses it solely to operate the core service (speed display, map, navigation, CarPlay, and drive recording) — not for any of the secondary sensitive-purpose uses enumerated in California Civil Code §1798.121(a), such as inferring personal characteristics, targeted advertising, or sale. You may request that we further limit our use of this data to those core-service purposes by emailing us; we will respond within 15 business days.
• Right to Non-Discrimination — we will not deny service, charge a different price, or provide a lower quality of service for exercising any of these rights.

To exercise any of these rights, email us at the address below. We will respond within 45 days as required by California law (extendable by an additional 45 days with notice). You may designate an authorized agent to act on your behalf, subject to verification.

Your Choices & Controls

• Location — iOS Settings → Privacy & Security → Location Services → Speedio.
• Motion & Fitness — iOS Settings → Privacy & Security → Motion & Fitness.
• Notifications — iOS Settings → Notifications → Speedio.
• Account — sign out from the App's Settings. To delete your account and all associated cloud data, email us.

Changes to This Policy

If we make material changes, we will update the "Effective" date above. For significant changes, we may also notify you in-app and via email associated with your account.

Contact

Privacy questions, deletion requests, and CCPA / California rights requests:

• Email: speedsenseapp@gmail.com
• Subject line: Speedio Privacy
• We acknowledge deletion and rights requests within 10 business days and complete verified requests within 30 days (45 days where California law so requires).

© 2026 Speedio.