ibitdrive Privacy Policy
Effective date: 16 June 2026
This Policy describes what personal data is processed in connection with the ibitdrive mobile app and related web panel (the “App”), for what purpose, on what legal basis, and what rights you have under the GDPR (Regulation (EU) 2016/679).
1. Data Controller
- Controller: Radosław Furman
- Contact: radfur00@gmail.com
The App is a private, non-commercial project (not a registered business).
2. What data we process
- Account data: email, password (Argon2 hash only — we don’t know it), nickname, profile photo.
- Vehicle data: make, model, year, power, odometer, photos and graphics, logbook entries.
- Location data: GPS while navigating, navigation history, parking location.
- Vehicle (OBD) data: bus parameters and logs — only if you use the feature.
- Driving measurements: acceleration results, trip stats.
- Community reports: speed-camera locations (approximate).
- Technical & security data: IP, device/browser info, login event time and type.
3. Purposes and legal bases
| Purpose | Basis (GDPR) |
|---|---|
| Account and data sync | Art. 6(1)(b) — contract |
| Location, navigation, parking, OBD | Art. 6(1)(a) — consent |
| Speed-camera reports | Art. 6(1)(a) — consent |
| Account security, login history | Art. 6(1)(f) — legitimate interest |
| System emails (password reset) | Art. 6(1)(b) and (f) |
4. Recipients and processors
We do not sell or share your data with third parties for their own purposes (e.g. marketing). No data brokers or advertisers. We use necessary infrastructure providers:
- Hosting (mydevil.net): database and file storage; the database is reachable only from within the hosting.
- Google Maps Platform / Places: maps and address suggestions — data needed for the request (coordinates, query) is sent to Google under its own policy.
5. Transfers outside the EEA
Using Google services may involve transfers outside the EEA (under the provider’s terms, e.g. SCCs). Account data stays on EU hosting servers.
6. Retention
- Account data — while the account exists.
- After deletion — erased/anonymised without undue delay (except data required by law).
- Logs and login events — as long as needed for security.
7. Your rights
Access and copy, rectification, erasure, restriction, portability, objection, consent withdrawal, and a complaint to the supervisory authority (in Poland: President of the PUODO, ul. Stawki 2, 00-193 Warsaw). Contact: radfur00@gmail.com.
8. Account deletion
Delete your account and data in the App or via radfur00@gmail.com (subject to section 6).
9. Security
HTTPS, password hashing (Argon2), token auth (JWT), rate limiting, restricted database access.
10. App permissions
- Location — navigation, parking, speed cameras.
- Bluetooth — OBD adapter.
- Camera / files — profile and vehicle photos.
- Internet — sync and maps.
11. Children
The App is not directed at persons under 16.
12. Changes
We will inform you of material changes in the App or by email.
13. Contact
radfur00@gmail.com