Privacy Policy
In short. Your drives and GPS routes are stored on your phone. For leaderboards and the territory game, the app sends drive totals and the ids of the map hexagons you passed, never GPS coordinates, unless you switch on the optional cloud backup. There is no sign-up, no ads, no tracking and no analytics. Our server runs in Germany.
Controller
Codext GmbH, Frankenstraße 10, 74549 Wolpertshausen, Germany. Email: kontakt@codext.de, phone: +49 7904 5203106. Represented by the managing director Daniel Ehrhardt.
On your device
The app stores your recorded drives on your phone: for each drive the location points (time, latitude, longitude, altitude, speed, heading, accuracy), the metrics computed from them, start and end place names, and your settings, cars and the photos you pick. This data stays on your device unless you share it yourself or switch on cloud backup.
Location and motion
With your permission, the app uses your location to record drives, also in the background, so recording starts without you touching the phone. It also uses motion activity (iOS) or activity recognition (Android) to notice when you start and stop driving. On Android a notification is shown while a drive is recording. You can revoke these permissions in the system settings at any time and start drives by hand instead.
Place names
To show where a drive started and ended, the app uses your operating system's geocoding service: Apple's on iPhone, Google's on Android. Your device sends the start and end coordinates and, for technical reasons, data such as your IP address to Apple (Apple Distribution International Ltd., Cork, Ireland) or Google (Google Ireland Limited, Dublin, Ireland), who process it under their own privacy policies; a transfer to the USA is possible. Legal basis: Art. 6(1)(b) GDPR.
Maps
Maps and Ride Replay use Apple Maps on iPhone and Google Maps on Android. To display map and satellite imagery, your device loads map tiles for the visible area from Apple or Google, which receive your IP address and the requested map region. Your recorded route is drawn by the app and not sent to them. Legal basis: Art. 6(1)(b) GDPR.
Your account on our server
There is no sign-up form. On first launch the app creates an anonymous account. No email address, phone number or name is required. Unless you keep everything on your device (see below), our server stores:
- account data: a random user id, an access token, a recovery key, platform and language;
- profile: username, display name, avatar colour, your car (make, model, colour), home city and country if you set them, your privacy settings;
- drive summaries: start and end time, distance, duration, moving time, maximum and average speed, elevation gain and loss, counts of brake presses, turns, lane changes and stops, and the city and country code of the drive;
- territory: the ids of the H3 hexagons (about 300 m across) a drive passed through, and which cells you hold;
- social data: friends, friend requests, invite codes, club memberships and clubs you create, trophies;
- AI car mods you create (see below).
We never receive GPS coordinates or your route, unless you switch on cloud backup. Purpose: providing leaderboards, territory, friends, clubs and trophies. Legal basis: Art. 6(1)(b) GDPR.
What other users see
Your public profile (display name, username, avatar colour, car, home city, club, season stats and trophies) and your cells on the territory map are visible to other users. With "Hide from leaderboards" you no longer appear on public boards; your friends still see you.
Keep everything on this device
With this setting on, the app uploads nothing: no drives, no cells. Territory, leaderboards, friends and clubs are then not available.
Cloud backup (optional, off by default)
If you switch on cloud backup, complete drive files including GPS coordinates are stored on our server so you can restore them on a new phone. They stay there until you delete them in the app or delete your account. Legal basis: your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time by switching backup off and deleting the backups.
AI car mods
Only when you create a mod, our server sends the chosen style, your prompt, the car name and colour and, if you added one, your car photo to the Gemini API of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA) to generate the image. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework. The generated images are stored on our server so they appear in your gallery, until you delete them or your account. Please don't use photos that show people or readable number plates. Legal basis: Art. 6(1)(b) GDPR.
Hosting
The Roadclaim server runs on our own server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany, under a data processing agreement (Art. 28 GDPR). When the app talks to the server, technically necessary data such as IP address, time and request is processed to deliver the service and protect it against abuse (Art. 6(1)(f) GDPR). These logs are only used to operate and secure the service and are deleted regularly.
Website
This website is served via Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, certified under the EU-US Data Privacy Framework). Cloudflare processes technically necessary data such as IP address, time and requested page to deliver the site securely (Art. 6(1)(f) GDPR). The website sets no cookies and contains no analytics or third-party content; fonts are served from our own domain. If you use the account deletion form, your recovery key is sent directly to our server to find and delete your account.
Notifications and sharing
Notifications such as "Drive finished?" are local notifications created on your device. Share cards and mod images only leave your device when you share them through the system share sheet; the service you choose is responsible for its processing.
App stores and email
The app is distributed via the Apple App Store and Google Play, which process data under their own privacy policies. We only receive aggregated statistics and, if you agreed to it, anonymous crash reports. If you email us, we process your address and message to reply (Art. 6(1)(b) and (f) GDPR) and delete them when no longer needed.
No ads, no tracking, no selling
Roadclaim contains no advertising, no analytics and no tracking SDKs. We don't sell data and don't share it with third parties beyond the services named here.
Deletion
You can delete your account at any time in the app (Profile, Settings, Delete account) or on the website with your recovery key at roadclaim.codext.de/delete-account. This deletes your profile, drive summaries, cells, friendships, club ownership, trophies, mods and backups from our server. Drives stored on your phone are removed when you delete the app.
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw consent at any time with effect for the future. Contact kontakt@codext.de. As the account is anonymous, we may ask you for your username or recovery key to find it. You can also lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
Changes
We update this policy when the app or the law changes. The version published here applies.