Privacy Policy

1. Who we are

Drift ("Drift", "we", "us") sells a small GPS tracker for cars and runs the Drift app and membership. Drift is a small UK business. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Drift is the controller of the personal data described in this policy.

If you have any question about your data, email support@driftgps.app. We aim to reply within 5 working days.

2. The short version

• Your vehicle's location is encrypted and stored against your Drift account.
• Only you, and people you choose to share with, can see it in the app.
• We do not sell your data. We do not use your location for advertising.
• You can ask for a copy of your data, or ask us to delete it, at any time.

3. What we collect

Account data

Your name, email address, password (stored in hashed form, we cannot read it), and your account settings, such as alert preferences, saved places and who you share access with.

Vehicle and location data

When your tracker is fitted and your membership is active, the tracker sends data to our servers. This can include:

• GPS position, with date and time
• speed, direction of travel and journey start and end points
• movement and stop events, and technical status readings the tracker reports
• alerts you have set up, such as Guardian alerts and arrivals at or departures from saved places
• the vehicle details you add, such as a nickname, make, model or colour

Location data can show where you live, work and travel, so we treat it as the most sensitive data we hold.

Device data

The tracker's identifiers (for example its IMEI and SIM number), firmware version and connection status. When you use the app or this website, we and our hosting providers may also process your IP address, browser or device type, and basic technical logs needed to keep the service running and secure.

Order and payment data

Payments are handled by Stripe. We receive your name, email, delivery address, what you bought and your payment status. We do not see or store your full card number.

Pre-order interest

If checkout is ever unavailable, the site may show a "Pre-orders open soon" form instead. If you use it, your name and email are saved only in your own browser (local storage) and an email to us is prepared in your mail app. We only receive your details if you send that email.

Batch 3 early-access list

If you join the Batch 3 early-access list on our website, we keep your email address so we can tell you when Batch 3 opens. Your email is stored with our email provider, Resend (EU region). We only use it for Batch 3 and launch updates. You can unsubscribe anytime using the link in any of our emails, or email support@driftgps.app and we will remove you.

Messages

If you email us, we keep the email and our replies so we can help you.

4. Why we use it, and our lawful basis

5. How we protect location data

Location data is stored against your account on encrypted servers. The Drift app and this website only use encrypted (HTTPS) connections. Access inside Drift is limited to what is needed to run and support the service. We do not look at an individual's location history unless you ask us to (for example to fix a fault), or we are required to by law.

6. Who we share data with

We use a small number of trusted providers to run Drift. They act on our instructions and may only use your data to provide their service to us:

• Cloudflare: website and app hosting
• Supabase: database and sign-in
• Hetzner: hosting for our Traccar tracking server, which receives data from your tracker
• Stripe: payments
• Resend (EU region): order emails and the Batch 3 early-access list
• Mapbox: maps and place names in the app
• Apple iCloud Mail: forwarding of emails you send to our support address
• Google Fonts: web fonts on this website
• Umami: cookie-free visitor statistics on this website
• Microsoft Clarity: heatmaps and session recordings on this website, only if you accept cookies

We will also share data with people you choose to share access with in the app, and where the law requires it, for example a valid request from the police. If your vehicle is stolen, we can help you share information with the police at your request.

Some providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK law, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

7. How long we keep it

• Location and journey history: kept while your account is open so you can view past journeys. You can delete journeys in the app or ask us to. We will tell you in the app if we set a fixed history limit.
• Account data: kept while your account is open, then deleted within 30 days of closing it.
• Backups: deleted data may remain in secure backups for up to 90 days before it is overwritten.
• Order and payment records: kept for 6 years, as UK tax law requires.
• Support emails: kept for up to 2 years after your last contact.
• Pre-order interest emails: kept until launch, then deleted within 12 months if you do not become a customer.
• Batch 3 early-access list: kept until you unsubscribe or ask us to remove you.

8. Your rights

Under UK data protection law you have the right to:

• access your data and get a copy of it
• delete your data (we will delete your account and location history, except records we must keep by law)
• correct data that is wrong
• restrict or object to some uses
• take your data with you in a common format (portability)
• withdraw consent to marketing at any time

To use any of these rights, email support@driftgps.app from the address on your account. We may need to check it is you. We will reply within one month, and there is normally no charge.

If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Other drivers of your vehicle

If someone else drives a vehicle with a Drift tracker, the tracker will record their journeys too. You must tell regular drivers that the vehicle is tracked. Using Drift to track a person without their knowledge can be unlawful. See our Terms.

10. Cookies

This website does not use advertising cookies. We use Umami for cookie-free visitor statistics (pages viewed, where visitors came from, country and device type), and, only if you tap Accept on our cookie banner, Microsoft Clarity for heatmaps and session recordings that show how people use the site. You can change your choice at any time with the Cookie settings link at the bottom of every page. See our Cookie notice for more detail and for the small amount of browser storage we use.

11. Children

Drift accounts and purchases are for adults aged 18 and over. We do not knowingly collect data from children.

12. Changes

We will update this policy when the service changes. We will show the new date at the top, and tell account holders by email about important changes.