Privacy Policy

1. Who we are

The App is published by Sarafand Tech LLC, a New Mexico limited liability company. Sarafand is the business responsible for the App and, for users in places that use the term, the "controller" of the personal information described in this policy. You can reach us at info@sarafandtech.com or by post at the address in the Contact section.

2. Your anonymous account

When you first open the App it creates an anonymous account: a random ID with no name, email address, phone number, Apple ID or Google account attached. It exists so the App can check your trial or subscription and keep usage within fair limits. Deleting the App and installing it again normally creates a new, unrelated ID; restoring a phone backup can bring the previous one back.

Unused accounts. An anonymous account with no active subscription that has not been used for 18 months is deleted automatically, with everything our server stores with it.

3. How your location is used

Location is the product: the App cannot tell you the speed limit without knowing which road you are on. It uses location only while speed alerts are switched on, including in the background, which is why it asks for "Always" permission.

Your consent. Before the App asks your phone for background location ("Always" or "Allow all the time"), it shows a dialog that explains how location is used when the App is closed or not in use, with the choice of Continue or Not now. If you continue, we record the date you agreed on your anonymous profile.

When you are moving faster than 15 mph, the App sends your current position, direction of travel and previous position over an encrypted connection to our server. The server asks HERE Technologies for the posted speed limit on the road ahead and sends the answer back. The App does not contact HERE directly.

The server keeps your current and previous positions, your direction and the route HERE returned in a shared speed-limit cache, so the next driver on the same road gets an answer without a new request to HERE. Cache entries do not contain your account ID or any other identifier. An entry is deleted within 30 days of when its speed limit was fetched from HERE, however often the road is looked up in that time.

The server also keeps a log of lookup times, whether a lookup used the cache and how long the lookup took, for 90 days. It does not record the speed limit, contains no location and is not linked to your account ID.

To notice when you start and stop driving, the App uses your phone's geofencing and, on Android, activity recognition. These run on your phone; nothing is sent to us until a speed limit is needed.

We do not sell your location, share it for advertising, or build a history of where you have driven.

4. What we store with your anonymous ID

• Trial and subscription status: start and end dates, which store and plan, and the purchase, renewal and cancellation notices the store sends through RevenueCat. A notice includes the plan, the price and currency, the store's transaction IDs and the country RevenueCat derives from the store, but no location. Before we store a notice we remove the customer attributes RevenueCat attaches to it, which include any Apple Ads campaign details.
• Your consent: the date you agreed to background location use, and the version of our Terms of Service you accepted when you bought a subscription, with the date.
• App version, whether your phone is iPhone or Android, and when the App last checked in.
• Your location permission setting (for example "Always" or "While using") — the setting, not your location. It tells us when the App cannot run in the background.
• Daily totals: miles and minutes driven, how many speed limits were looked up, and how many times you went over the limit, grouped by how far over. No places and no times of day.
• The monthly number of requests sent to HERE, used to enforce the service's fair-use limit. It contains no location or individual lookup times.
• On iPhone, which of our Apple Ads campaigns, if any, led to your install, with the details Apple returns about it (such as the campaign, ad group, keyword and ad, the country, and whether it was a first download or a redownload). RevenueCat holds this with your anonymous ID until you ask us to delete your data.

We do not collect your name, email, phone number, contacts, photos, files, microphone, camera, device model, advertising ID or precise speed.

IP address. Like any internet service, our servers and the services below receive your device's IP address when the App connects. In addition, our sign-in provider, Supabase, keeps the IP address and App version (the "user agent") recorded for your sign-in session, linked to your anonymous ID, for as long as your account exists or until it is deleted. We use this only for security, such as spotting abuse. It is never used for advertising and never sold, and it is not stored with your driving data.

5. What stays on your phone

Your settings (such as the alert margin), the trial summary the App shows you, and the current drive are kept in the App's private storage on your phone and are removed when you delete the App.

Renewal reminders. The App may show a reminder on your phone before an annual subscription renews, and once a year for a monthly one. Reminders are scheduled on your phone; nothing is sent to us, and we do not ask for your email address.

Device backups. Your phone's own backup services, such as iCloud Backup or Google's Android backup, may include this data, depending on your settings. Those backups are made and stored by Apple or Google under their own terms and privacy policies; we cannot access or control them.

6. Permissions the App asks for

• Location, including "Always" and precise location — to look up the limit for the road you are on, and to start monitoring by itself when you drive. The App cannot work without it.
• Notifications — on Android, to show the ongoing notification Android requires while the App monitors in the background; on iPhone and Android, for the renewal reminders described above. The App sends no marketing or promotional notifications.
• Physical activity (Android) — to notice, on your phone, when you start driving.
• Battery optimization exemption (Android, optional) — so the phone does not stop monitoring in the background.

You can change any of these in your phone's settings at any time. The App tells you what stops working without them.

7. Services we use

• Supabase — hosts our server, database and anonymous sign-in.
• HERE Technologies — provides speed-limit data. It receives positions from our server, never your account ID.
• RevenueCat, Inc. — manages subscriptions. It receives your anonymous ID; purchase, transaction and receipt information from Apple or Google; and basic technical information such as device type, operating system, App version, store country, locale and currency. On iPhone it also receives the ad-attribution information described below.
• Apple App Store and Google Play — process payments.

Each handles information under its own privacy policy: https://supabase.com/privacy, https://legal.here.com/privacy, https://www.revenuecat.com/privacy, Apple's Privacy Policy and Google's Privacy Policy. The App shows no ads and contains no ad networks, analytics or crash-reporting tools; the one exception, on iPhone, is the Apple Ads attribution described next.

Apple Ads attribution. On iPhone, the App passes Apple's ad-attribution token to RevenueCat, which asks Apple whether your install came from one of our Apple Ads campaigns and, if so, the details Apple returns about it, such as the campaign, ad group, keyword and ad. It uses no advertising identifier and no tracking permission, and Apple does not treat it as tracking. We use it only to see which of our own ads bring subscribers. The Android App does nothing like this.

8. Information you choose to send us

If you email us, we receive your email address, any name shown by your email provider, the content of your message and anything you attach. We use it only to respond to you, handle your request and improve the App. Please do not send us sensitive personal information.

9. How we use information

We use the information described above only to:

• provide the App: look up speed limits, give alerts, and check and restore your trial or subscription;
• keep the service affordable and within fair-use limits;
• prevent fraud, abuse and security incidents;
• understand overall usage and reliability, and improve the App;
• on iPhone, measure which of our own Apple Ads campaigns lead to installs and subscriptions;
• respond to your messages and requests;
• comply with law, enforce our Terms of Service, and protect the rights, property and safety of Sarafand, our users and others.

We do not use your information to show you advertising, for profiling, or for automated decisions that produce legal or similarly significant effects on you. The only advertising-related use is the Apple Ads attribution described above, which measures our own ads and does not follow you anywhere.

We do not collect, use or sell personal data to train large language models.

10. How information is disclosed

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws. We disclose information only:

• to service providers that process it for us under contract, such as Supabase, HERE Technologies, RevenueCat and our email provider;
• to Apple and Google, as needed to process and verify purchases, and on iPhone to Apple, through RevenueCat, to learn which of our Apple Ads led to an install;
• for legal reasons: to comply with law, a subpoena, court order or other legal process; to respond to lawful requests from public authorities; or to protect the rights, property or safety of Sarafand, our users or others;
• in a business transfer, such as a merger, acquisition, financing, reorganization or sale of assets, subject to this policy;
• with your consent or at your direction.

11. Where your data is kept

Our server and database run in the United States (Ohio). The App is operated from the United States. If you use it from another country, your information is transferred to, stored in and processed in the United States and other countries where our service providers operate, whose data-protection laws may differ from those where you live.

12. Payments

Subscriptions are bought and billed through the Apple App Store or Google Play. We never receive your card number, billing address or store password. You manage, cancel and request refunds for your subscription in your Apple or Google account settings.

13. How long we keep data

• Speed-limit cache: deleted within 30 days of the fetch from HERE.
• Lookup log (no speed limits, no location): 90 days.
• Account, subscription, consent records and daily totals: while your anonymous account exists, until you delete them, or until the account is deleted after 18 months unused with no active subscription.
• Sign-in session (IP address and App version), held by Supabase: for as long as your anonymous account exists.
• Messages you send us: as long as needed to respond and keep reasonable business records, then deleted unless the law requires us to keep them.
• Purchase records held by Apple, Google and RevenueCat: as their policies and legal obligations require.
• Apple Ads attribution held by RevenueCat (iPhone only): while your anonymous account exists, and deleted with it when you delete your data in the App or ask us to.

14. Deleting your data

In the App. Open the Privacy Policy screen in the App and tap "Delete my data." This deletes your anonymous account and everything our server stores with it.

By email. Or email info@sarafandtech.com with the anonymous ID shown at the bottom of the Privacy Policy screen in the App. We will delete your account and everything stored with it within 30 days and confirm by email.

Automatically. An anonymous account with no active subscription that has not been used for 18 months is deleted automatically, with everything stored with it on our server.

The shared speed-limit cache holds no account ID, so it cannot be traced to you; its entries expire on their own. A store notice that arrives after the deletion, such as a refund, is kept without your ID. Deleting the App removes what it keeps on your phone.

Deleting your data does not cancel a subscription. Cancel it in the store first: on iPhone in Apple ID → Subscriptions, on Android in Google Play → Payments & subscriptions.

15. Security

All traffic between the App and our server is encrypted. The database only lets each account read its own records, and the HERE key and RevenueCat's secret key are held on the server, never in the App. However, no method of storage or transmission is completely secure, and we cannot guarantee absolute security. If a breach affects your data, we will give the notice the law requires, including through the App.

You are responsible for the security of your phone, its passcode, your store accounts and your backups. To the maximum extent permitted by law, we are not responsible for unauthorized access that results from the loss, theft or compromise of your device or accounts, or from the acts of third parties we do not control.

16. Your choices and rights

Location. Switch speed alerts off, or change location and other permissions in your phone's settings, at any time.

Privacy rights. Depending on where you live, you may have the right to know about, access, correct, delete or get a copy of the personal information we hold about you, to opt out of certain processing, and to appeal our decision on a request. To exercise any of these rights, email info@sarafandtech.com with your anonymous ID. We will verify requests as the law permits and will not discriminate against you for exercising your rights. You may use an authorized agent where the law allows; we may ask for proof of the agent's authority.

Appeals. If we decline your request, in whole or in part, you can appeal: reply to our decision with the word "Appeal." We will answer within 60 days and explain what we decided and why. If we deny your appeal, you may contact your state Attorney General; in Connecticut, at https://portal.ct.gov/AG/Common/Complaint-Form-Landing-page.

Tracking signals. We do not track users across other companies' apps or websites, so we do not treat "Do Not Track" signals differently, and the App does no processing that a Global Privacy Control signal would opt you out of.

Users in the EEA and UK. Where the EU or UK General Data Protection Regulation applies, we rely on performance of a contract (providing the speed limits, alerts and subscription you asked for), our legitimate interests (keeping the service secure, affordable and working, preventing fraud, responding to messages, improving the App and measuring our own advertising), legal obligation, and consent where required. You may lodge a complaint with your local data protection authority.

17. Children

The App is for drivers and is not directed to children under 16. Under our Terms of Service, you must be at least 16 or hold a learner's permit to use it, and anyone under 18 needs a parent's or legal guardian's consent. We do not knowingly collect personal information from children under 13. If you believe a child has used the App or sent us information without that consent, contact us and we will delete it.

Where the law requires it, the App asks Apple or Google, on your phone, for your age range and, for a minor, whether a parent has approved the App. It uses the answer only to check that you are 16 or older, or have a parent's approval. The App keeps only whether the check passed and the date; your age range is never stored and never sent to us.

18. Third-party services and links

The App relies on, and may link to, services operated by others, such as Apple, Google, RevenueCat, HERE Technologies and Supabase. Their collection and use of information is governed by their own policies, not this one. We are not responsible for the content, privacy practices or security of third-party services.

19. Changes to this policy

We may update this Privacy Policy, for example to reflect changes in the App or in the law. We will publish the updated version and change the date above. If a change materially expands how we collect or use personal information, we will give additional notice, for example in the App, and ask for your consent where the law requires it. Your continued use of the App after an update takes effect means the updated policy applies to you.

20. Contact

Sarafand Tech LLC
6001 Menaul Blvd NE #1012
Albuquerque, NM 87110
United States
Email: info@sarafandtech.com
Website: https://sarafandtech.com/limitbeep