This Privacy Policy explains how Aasim Nawaz Sheik ("DriveDex," "we," "us," or "our") collects, uses, and shares information when you use the DriveDex mobile application (the "App").
When you create an account, we collect your email address, a password (stored securely by our authentication provider and never visible to us in plain text), and the username you choose. Your username is shown publicly to other users on leaderboards and friends lists.
DriveDex's core feature requires access to your device's camera. When you scan a car:
We collect data related to your use of the App's features, including: points balance, daily scan counts, streak history, badges/achievements earned, collection ("Dex") progress, raffle entries, and friend connections you create.
The App displays ads and rewarded video ads through Google AdMob. AdMob and its partners may collect device identifiers (such as your advertising ID), IP address, and other technical data to serve and measure ads, and — subject to your consent — to personalize them. See Section 2.3 and Section 6 for more on your choices.
Like most apps, we and our service providers may automatically collect certain technical information, such as device type, operating system, app version, and crash/error logs, to keep the App running reliably.
We use the categories of data above to operate, maintain, and improve the App. We share data with the following categories of third parties, each acting as an independent processor or controller of the data they receive:
We use Supabase to host our database and to store your account data, gameplay data, and uploaded car photos. Supabase processes this data on our behalf to operate the App.
When you scan a car, the photo is sent to Gemini's Vision API to identify the vehicle and read the license plate. This transmission happens through our backend (a Supabase Edge Function) — the image is not sent directly from your device to Google Gemini. Gemini processes this image to return the identification result; please refer to Gemini's own privacy practices for how they handle API data.
We use Google AdMob to serve banner ads and rewarded video ads (used to grant bonus scans and raffle entries). Where required (for example, under the EU/UK GDPR), we present a consent form (via Google's User Messaging Platform) before showing personalized ads or collecting related data, and honor the choices you make there. You can review Google's own privacy policy at https://policies.google.com/privacy and their partners at https://www.google.com/about/company/publisher-partners/.
Your username, badges, streak, and garage value / collection completion percentage may be visible to other users through the Leaderboard feature, and to users you add as friends. You can change your username at any time, but historical leaderboard snapshots may not update retroactively.
We may disclose information if required by law, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
We do not sell your personal information to third parties for their own independent marketing purposes.
We retain your account data, garage photos, and gameplay data for as long as your account is active. If you delete a car from your Garage, we also delete the associated stored image from our storage provider. If you delete your account (see Section 7), we will delete or anonymize your personal data within 30 days, except where retention is required for legal, tax, fraud-prevention, or raffle-recordkeeping purposes (for example, keeping a record of raffle entries for the current draw).
DriveDex is not directed to children under the age of 16, and we do not knowingly collect personal information from children under that age. Furthermore, participation in paid or rewarded raffles within the App is restricted to users aged 18 and older. If you believe a child under 16 has provided us with personal information, please contact us at aasim.sheik.988@gmail.com so we can delete it.
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing (for example, under the EU/UK GDPR or the Swiss FADP). California residents may have similar rights under the CCPA/CPRA, including the right to opt out of the "sale" or "sharing" of personal information (which, under California law, can include certain advertising data shared with ad partners like AdMob).
To exercise any of these rights, contact us at aasim.sheik.988@gmail.com. We will respond within the timeframe required by applicable law.
You can also manage certain choices directly:
On iOS, the App will request your permission via Apple's App Tracking Transparency (ATT) framework before accessing your device's advertising identifier for tracking purposes, in addition to the separate AdMob/UMP consent flow shown to users in applicable regions. You can change your choice at any time in your device's Settings.
You have the right to request the complete deletion of your DriveDex account and all associated personal data at any time.
profiles).scans, user_cars).raffle_entries).We use commercially reasonable technical and organizational measures — including row-level security policies on our database and encrypted connections — to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Our service providers (including Supabase, Gemini, and Google) may process and store data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
We may update this Privacy Policy from time to time. We will indicate the "Last Updated" date above and, for material changes, provide additional notice (such as an in-app notification) where required by law.
If you have questions about this Privacy Policy or how we handle your data, contact us at: