Privacy Policy

The short version

• Your drives stay on your phone. Evenpace measures your average speed on the phone itself. Your location, trips and speeds are never sent to us or to anyone else.
• No account, no ads, no tracking, no data sales. Instead of an account, each installation of the app gets a random anonymous identifier.
• A few things do reach a server, each for a single purpose: downloading zone data, zones you choose to contribute, anonymous zone confirmations, crash reports, app updates and your subscription status. Each is described below.

1. Who we are

Evenpace is made by SIA “Digital Development Services” (“we”, “us”), a company registered in Latvia (registration No. 40203351930) with its registered address at Briežu iela 26, Lapsas, Babītes pag., Mārupes nov., LV-2107, Latvia. We are the controller responsible for the personal data described in this policy. You can reach us at privacy@digitaldevelopmentservices.com.

This policy covers the Evenpace apps for iPhone, Apple Watch and Android.

2. What stays on your phone

Evenpace does its work on your phone. Everything in this section is created and kept only there; we never receive it.

• Your location. Evenpace uses your phone’s location (GPS) to work out your running average speed: while the app is open, to show zones near you and notice when you enter one; while you measure a zone, including with the screen locked or another app in front; and in hands-free mode (below).
• Your trips. For each trip: when it started and ended, the zone, the distance and duration, your average speed and the speed limit, the start and end positions, a short series of speed samples for the result chart, and statistics about GPS quality. The complete GPS track of a trip is kept only if you switch on Keep trip points (debug) in Settings.
• Zones you log. The name you give a zone and the positions and directions of its cameras.
• Your settings, including the countries you chose, and a log of hands-free decisions, which contains no positions.

You can delete trips in History, and uninstalling the app deletes everything it stored. Like other app data, this information can be included in your phone’s own backups (for example iCloud or Google backups), which Apple or Google keep for you under their terms.

Hands-free mode lets Evenpace wake up when you approach a known entry camera, even when the app isn’t open. It is on by default and can be turned off in Settings. It uses your phone’s geofencing: the app registers circular regions around nearby entry cameras and around your current position, and your phone’s operating system tells the app when you cross one. The app then reads your precise location for up to a few minutes to check whether you are entering a zone. Hands-free mode needs location access set to “Always”. The regions and every location reading stay on your phone.

Apple Watch, widgets and voice. The Apple Watch app, widgets and Live Activities get the numbers they display directly from your iPhone. Spoken announcements are recordings built into the app; Evenpace has no access to your microphone.

Your location itself comes from your phone’s operating system. Apple (on iPhone) and Google (on Android) may process location information under their own privacy policies, independently of Evenpace.

3. What leaves your phone, and why

3.1 Your anonymous identifier

When Evenpace connects to our server, it signs in anonymously: our backend creates a random identifier for this installation of the app. It isn’t linked to your name, email address, phone number or Apple or Google account, and the app uses no advertising identifiers.

We use it to keep your contributions linked to your installation, so that you can follow their status and withdraw them, and as the customer identifier for your subscription with RevenueCat (section 3.6), so that purchases can be restored. The sign-in service of our backend provider, Supabase, records technical details of the anonymous session, such as when it was created and last used, and the IP address and type of software it connected from.

Legal basis: our legitimate interests in running the service securely and preventing abuse, and, for purchases, the performance of our contract with you (Article 6(1)(f) and (b) GDPR).

3.2 Zone data

Evenpace downloads the average-speed camera zones of the countries you choose, so our server sees which countries’ zone data is requested. If our server has not prepared a country yet, the app may instead download its zones directly from public OpenStreetMap servers (the Overpass API) run by independent organisations. They receive the country code, the app’s version and your IP address, but nothing about your location.

You can switch Shared zone data off in Settings. The app then downloads no zone data and sends no confirmations (section 3.4), and you measure with manual Start and Stop.

Shared zone data is offered only in countries where showing camera locations is lawful. It comes from OpenStreetMap contributors (© OpenStreetMap contributors, available under the Open Database License) and from drivers who chose to contribute zones.

Legal basis: the performance of our contract with you, by providing the app’s features (Article 6(1)(b) GDPR).

3.3 Zones you choose to contribute

Nothing is contributed automatically. When you tap Contribute on a zone you logged, the app sends the positions and directions of its entry and exit cameras, the zone’s name and road name as you entered them, the length you measured, the speed limit and the country, together with your anonymous identifier and the time of submission. It sends nothing about the drive itself: no track, speeds or trip times.

Our moderators review each contribution. Approved zones join the shared database that every Evenpace user downloads, without your identifier. Because a contribution describes a road you drove, it indirectly shows that your phone was there at some point. That is why it is linked only to your anonymous identifier, and why you can withdraw it.

To withdraw, use Settings → Delete my contributions: pending and rejected contributions are deleted, and approved zones stay in the shared database but are no longer linked to your identifier.

Legal basis: carrying out the contribution you ask us to make, and our legitimate interest in keeping the shared zone data accurate (Article 6(1)(b) and (f) GDPR).

3.4 Anonymous zone confirmations

When you drive through a shared zone from camera to camera, the app later sends a confirmation that helps us keep the zone accurate: the zone, the length you measured rounded to 10 metres, and the date. The confirmation waits on your phone and is sent after a random delay of one to six hours, so that it cannot be matched to your drive. It is sent and stored without any identifier: not even the request carries your anonymous identifier. Confirmations are only sent while Shared zone data is on.

Legal basis: our legitimate interest in accurate zone data (Article 6(1)(f) GDPR).

3.5 Crash reports

If the app crashes or runs into an error, it can send a report to Sentry, our error-monitoring provider. A report describes what went wrong and includes the app version, the device model and operating system, the screens used before the error, and performance measurements. Before a report leaves your phone, the app removes location coordinates, speeds and headings from it, and we have configured Sentry not to attach your IP address or any user identifier.

Legal basis: our legitimate interest in finding and fixing faults (Article 6(1)(f) GDPR). You can object at any time (section 8).

3.6 Evenpace Pro purchases

Evenpace Pro is sold and billed by Apple (App Store) or Google (Google Play); we never see your payment details or your store account. RevenueCat manages subscription status for us. It receives your anonymous identifier, your purchase and subscription history (products, dates, renewals and expiry), the store and storefront country, and technical details such as the app version, device platform and IP address. The app keeps a copy of your subscription status on your phone so that Pro features also work offline.

Legal basis: the performance of our contract with you (Article 6(1)(b) GDPR).

3.7 App updates

Evenpace checks Expo’s update service (EAS Update) for the updates we publish between app store releases. Each check sends a random update-client identifier, the app’s version and platform, and your IP address.

Legal basis: our legitimate interest in keeping the app working and secure (Article 6(1)(f) GDPR).

3.8 Server logs

Our backend and our service providers keep short-lived technical logs of requests, such as the IP address, the time and the request made, for security and troubleshooting.

Legal basis: our legitimate interest in keeping our systems secure (Article 6(1)(f) GDPR).

3.9 What you share yourself

If you email us, we use your email address and your message to answer you. If you share something from the app, such as the hands-free diagnostic log, your phone’s share sheet sends it only where you choose.

4. Permissions

• Location, to measure your average speed. With “While Using” you can measure with the app open; “Always” keeps the measurement running with the screen locked or another app in front, and makes hands-free mode possible. You can change this at any time in your phone’s settings.
• Notifications, for alerts such as a zone ahead or a measurement starting. They are created on your phone; we don’t send push notifications.
• Background activity (Android): a foreground service, shown as an ongoing notification, keeps the measurement and its sound cues running while the screen is off.

Evenpace does not access your microphone, camera, contacts or photos, does not use advertising identifiers and does not track you across other companies’ apps or websites.

5. Who receives data

We don’t sell your data or share it for advertising. We use these service providers, who process data on our behalf under data processing agreements:

• Supabase: backend database and anonymous sign-in
• RevenueCat: subscription management
• Sentry: crash reporting
• Expo: app updates

Apple and Google process purchases and provide location services as independent controllers under their own privacy policies, and the public OpenStreetMap servers described in section 3.2 act independently. Our moderators see contributed zones in order to review them. We disclose data to authorities only where the law requires us to.

6. International transfers

Some of our providers are based in the United States or may process data outside the European Economic Area. Such transfers are protected by the European Commission’s Standard Contractual Clauses or by the provider’s certification under the EU–U.S. Data Privacy Framework.

7. How long we keep data

• On your phone: until you delete it or uninstall the app.
• Anonymous identifier and session details: while the app keeps using them. They are deleted automatically once the app has not connected for 12 months, and you can ask us to delete them sooner (section 8). Your contributions stay, no longer linked to anyone.
• Contributions: pending ones until they are reviewed, and rejected ones until you delete them. Approved zones stay in the shared database for as long as the zone exists, linked to your identifier until you withdraw them or the identifier is deleted.
• Confirmations: kept as part of the zone’s statistics; they contain no identifier.
• Crash reports: up to 90 days.
• Subscription records: for as long as your subscription runs, and afterwards as long as the law requires, for example for accounting.
• Server logs: a few days.
• Emails: as long as needed to handle your request.

8. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on our legitimate interests, such as crash reporting.

You can exercise many of these rights directly: delete trips in History, withdraw contributions in Settings → Delete my contributions, switch off Shared zone data, or revoke location and notification access in your phone’s settings. For anything else, email privacy@digitaldevelopmentservices.com. Because Evenpace has no accounts, we usually cannot tell which data on our server belongs to you; we will do our best with the details you can give us (Article 11 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU or EEA country where you live or work or where you believe your rights were infringed. In Latvia, this is the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).

You don’t have to give us any personal data to measure with Evenpace; contributing zones and buying Pro are optional. We do not make decisions about you based solely on automated processing.

9. Children

Evenpace is a driving aid made for drivers and is not directed at children. We do not knowingly process children’s personal data. If you believe a child has contributed data, contact us and we will delete it.

10. Security

All connections between the app and our services are encrypted (HTTPS). Access to our database is restricted by row-level security, and moderators sign in with personal accounts. Data on your phone is protected by your phone’s own security, so we recommend keeping a passcode on your device.

11. Changes to this policy

We update this policy when the app or the law changes, and change the “Last updated” date above. If a change affects how we use your data, we will tell you in the app or in the release notes before it applies.

12. Contact

For questions or requests about your privacy, email privacy@digitaldevelopmentservices.com.