Privacy Policy
Last updated: 10 September 2026
[operator name, address and IČO] ("we") operates the ApexStream app. This policy explains what we collect and why, under the GDPR.
What we collect
Email, name, password hash or Google/Apple sign-in identifier
Why: Your account
Kept: Until you delete the account
Location, speed, heading and lean angle during a ride
Why: Sharing the ride live and storing it in your history
Kept: Until you delete the ride or the account
Share link views
Why: Serving the ride page to people you sent the link to
Kept: Not stored beyond server logs (30 days)
App crash reports, screen views and in-app events (starting and finishing rides, turning sharing or the camera on, opening a share link, signing up, paywall steps), tied to an anonymous device identifier and, once you sign in, to your account identifier
Why: Fixing bugs and understanding which features matter
Kept: 12 months
Purchase state from Apple / Google via RevenueCat (subscription expiry, no card data)
Why: Unlocking Pro
Kept: Until the account is deleted
Raw sensor logs, only for accounts we mark as testers and only for rides they opt into
Why: Tuning the lean angle filter
Kept: Until the tester asks for deletion
Location is collected only while a ride is running. Background location is used solely to keep sharing when the screen is off; you can deny it and the ride will run in the foreground only.
Who sees what
•
People you send a share link to see your name, position, speed and lean angle for that ride.
•
Processors acting on our behalf: our hosting provider (EU), Resend (email delivery), RevenueCat (subscription status), Google Maps / OpenStreetMap (map tiles and speed limits; your coordinates are sent to look up tiles and limits), OpenObserve and Rybbit (self-hosted crash and usage analytics).
•
Apple and Google process payments under their own privacy policies. We never see card details.
We do not sell data and do not use it for advertising.
Legal basis
Contract (providing the service you signed up for), legitimate interest (crash reporting, abuse prevention) and consent (background location, which you grant in the system dialog).
Your rights
You can delete your data at any time: deleting the account in Settings removes everything except purchase records we must keep for accounting. To get a copy of your data, or to correct or restrict it, write to [contact email] and we will answer within one month. You can also complain to the Czech Office for Personal Data Protection (ÚOOÚ).
Contact
[operator name, address and IČO], [contact email].