Privacy Policy

Last updated: April 3, 2026

ScrapeSafe ("we", "us", or "our") operates the ScrapeSafe mobile application (the "App"). This policy explains what personal data we collect, how we use it, your rights, and who we share it with. By using the App you agree to this policy.

1. Who We Are

For privacy questions, contact us at hello@scrapesafe.app.

2. Data We Collect

Account data

• Email address and password hash (via Supabase Auth)
• Username, biography, and profile photo you choose to add
• Speed unit preference
• Referral / influencer code if you enter one

Garage & car data

• Car nickname, model, ground clearance (mm), and modification notes
• Car photos you upload

Community content

• Feed posts (photos, videos, captions) you publish
• Stories (photos visible for 24 hours)
• Comments and likes
• Groups you create or join, and posts inside them
• Meets (events) you create or attend, including the location you set
• Road hazard reports (speed bumps, ramps, inclines) you submit, stored with location
• Direct messages you send to other users

Location data

We request foreground-only location access (while the app is open). We use it to show hazards near you, place meets on the map, and calculate clearance routes. We do not track your location in the background or when the app is closed. Location data is not stored on our servers beyond what you explicitly submit as a hazard report or meet location.

Subscription & payment data

Pro subscriptions and in-app purchases are handled by Apple App Store and Google Play via RevenueCat. We receive anonymised entitlement status (is the user Pro, how many credits) but we never see or store your card number or payment details. See RevenueCat's Privacy Policy.

Advertising data

The free tier of the App displays native ads served by Google AdMob. AdMob may collect device identifiers (IDFA on iOS, GAID on Android) and usage data to serve relevant ads. We present a GDPR/CCPA consent prompt on first launch so you can choose whether to allow personalised advertising. If you decline, you will still see ads but they will not be personalised. See Google's Privacy Policy. Pro subscribers do not see ads.

Crash & performance data

We use Sentry for crash reporting. Sentry may collect device model, OS version, app version, and a stack trace when the app crashes. No personally identifiable information is intentionally included in crash reports. See Sentry's Privacy Policy.

Technical data collected automatically

• App version, device OS and model
• Timestamps of actions (post creation, meet RSVPs, etc.)

3. How We Use Your Data

• Provide and improve the App and its features
• Let you share builds, posts, and stories with the community
• Calculate safe routes and show hazards relevant to your car's clearance
• Process Pro subscriptions and enforce feature access
• Show ads to free-tier users (with consent where required)
• Debug crashes and fix bugs
• Comply with legal obligations

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, we process your data under the following bases:

• Contract: to provide the services you signed up for
• Legitimate interests: to improve the App, prevent abuse, and ensure security
• Consent: for personalised advertising (you can withdraw consent at any time in the app's ad consent settings)
• Legal obligation: where required by law

5. What We Share

We do not sell your personal data. We share it only with:

• Supabase (database and storage hosting, EU region available): Privacy Policy
• RevenueCat (subscription management): Privacy Policy
• Google AdMob (advertising, free tier only): Privacy Policy
• Sentry (crash reporting): Privacy Policy
• Law enforcement or authorities: if required by law or to protect the safety of users

Content you post publicly (feed posts, your username, profile photo, hazard reports, public meets) is visible to other users of the App.

6. Data Retention

• Account data is kept as long as your account is active.
• Stories are automatically deleted 24 hours after posting.
• If you delete your account we remove your personal data within 30 days.
• Anonymised hazard data may be retained to maintain map quality for other users.

7. Your Rights

Depending on your location you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent for personalised ads at any time via the in-app consent prompt
• Lodge a complaint with your local data protection authority (for EEA users: your national DPA; for Netherlands residents: Autoriteit Persoonsgegevens)

To exercise any of these rights, email hello@scrapesafe.app.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect and share, the right to delete your personal information, and the right to opt out of the "sale" of personal information. We do not sell personal information. To exercise your rights, contact hello@scrapesafe.app.

9. Children

ScrapeSafe is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

10. International Transfers

Your data may be processed in countries outside your own. We use service providers (Supabase, RevenueCat, Google, Sentry) that operate under appropriate data transfer mechanisms (Standard Contractual Clauses for EEA transfers).

11. Changes to This Policy

If we make material changes we will update the "Last updated" date above and, where appropriate, notify you by email or an in-app notice. Continued use of the App after changes take effect constitutes acceptance.

12. Contact

For any privacy questions: hello@scrapesafe.app