DRIVNPrivacy Policy

Privacy Policy

Effective date: August 8, 2026  ·  Last updated: August 8, 2026

Contents

  1. Who we are
  2. Quick summary
  3. The data we collect
  4. Location data
  5. Why we use data & legal bases
  6. Who we share data with
  7. International transfers
  8. Your rights
  9. How long we keep data
  10. Security
  11. Children
  12. Deleting your account
  13. Automated decisions
  14. Cookies, storage & push
  15. Third‑party services
  16. Changes & contact

1. Who we are

DRIVN ("DRIVN", "we", "us", "our") is a driving and car‑culture application that lets you record drives, earn points, join crews, take part in challenges and events, and connect with other drivers.

The data controller responsible for your personal data is DRIVN Technologies LLC, a limited liability company organised under the laws of the State of Wyoming, United States, with its registered address at 30 N Gould St Ste N, Sheridan, Wyoming 82801, USA. Contact: drivn@drivnapp.online.

Because we offer the Service to users in the European Economic Area (EEA) and the United Kingdom, the EU/UK GDPR applies to that processing even though we are established in the United States.

This Policy applies to the DRIVN mobile app, progressive web app (PWA), and website (together, the "Service"). Where the law requires consent (for example for precise location or push notifications), we ask for it separately in‑app.

2. A quick summary

3. The data we collect

3.1 Data you give us

3.2 Data created when you use the Service

3.3 Data from third parties

3.4 Payment data

3.5 Sensitive data

Precise location is treated as sensitive and is covered in Section 4. We do not intentionally collect special‑category data (such as health, religion, or biometric data). Please do not put such data into free‑text fields, chat, or images.

3.6 Device permissions

Some features ask for optional device permissions. You can grant or revoke each one in your device settings at any time; declining a permission only disables the related feature.

4. Location data — how it works (important)

Location is the most sensitive data DRIVN handles, so we describe it in full and in plain language.

When we collect it

We collect precise GPS location only while you have an active drive running that you started yourself. We ask for the operating‑system location permission before this happens. We do not collect your location when you are not on an active drive, silently in the background for tracking/advertising/profiling, or to follow your movements outside of the ride you chose to record. Background location permission, where used, exists only so a drive you started keeps recording accurately if the app is minimised during that drive. When the drive ends, ride location collection stops.

Why we collect it

How we protect it, and what we do NOT do

Honesty note (please read). To provide the features above, our servers do receive and store the location points of the drives you record (as your ride history/routes). This means DRIVN — and authorised staff, under the controls above — technically can access ride routes. We therefore do not claim that "we never see your location." What we commit to is the strict minimisation and non‑commercialisation described here. To remove a route, delete the ride or your account (Sections 8/12), or contact us.

You can revoke location permission at any time in your device settings; ride‑recording features will then stop working.

5. Why we use your data and our legal bases

Where the EU/UK GDPR applies, we rely on the following legal bases:

PurposeLegal basis (GDPR Art. 6)
Create and run your account; deliver core features (rides, scoring, crews, challenges, events)Performance of a contract — Art. 6(1)(b)
Precise location for ride featuresYour consent — Art. 6(1)(a), via the OS permission and in‑app prompts
Push notificationsYour consent — Art. 6(1)(a)
Payments, subscriptions, tickets, fraud preventionContract — Art. 6(1)(b); legal obligation — Art. 6(1)(c)
Security, abuse/anti‑cheat prevention, reliabilityLegitimate interests — Art. 6(1)(f)
First‑party analytics to improve the ServiceLegitimate interests — Art. 6(1)(f); consent where required
Service & safety communications; optional marketing emailsLegitimate interests / consent — Art. 6(1)(f)/(a); opt out anytime
Complying with legal obligations and lawful requestsLegal obligation — Art. 6(1)(c)

You may withdraw consent at any time (for example by turning off location or notifications); this does not affect processing done before withdrawal.

6. Who we share data with

We share personal data only with the following categories of recipients, and only as needed:

Our providers act as processors on our instructions, except payment and sign‑in providers, which may act as independent controllers for their own parts (they have their own privacy policies). We do not sell your personal data and we do not share it for cross‑context behavioural advertising.

Visibility to other users

Parts of DRIVN are social, so some information is visible to other users:

You control much of this through your settings and by choosing what to join, share, or post.

7. International data transfers

We are established in the United States, and our servers are located in the European Union. Personal data is therefore processed in both the U.S. and the EU, and some providers may process data in other countries. Where personal data of EEA/UK users is transferred outside the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK Addendum/IDTA, and/or adequacy decisions or certification frameworks where applicable. Contact us for more information (Section 16).

8. Your rights

Depending on where you live, you have some or all of the following rights:

EEA/UK users: you may complain to your national data protection authority in your country of residence.

California users (CCPA/CPRA): you have the right to know, delete, correct, and to opt out of the "sale"/"sharing" of personal information. We do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we do not use sensitive personal information for purposes other than those permitted. We will not discriminate against you for exercising your rights.

Other U.S. states: residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) have rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, the "sale" of personal data, and certain profiling. Because we do not sell personal data, do not serve targeted or cross‑context behavioural advertising, and do not profile you for decisions with legal or similarly significant effects, there is nothing to opt out of in those categories; we honour access, correction, deletion and portability requests where the law applies.

Other regions (e.g. Brazil LGPD, Canada PIPEDA, Australia) provide comparable rights; we honour equivalent requests where the law applies.

To exercise any right, contact drivn@drivnapp.online. We will verify your identity and respond within the timeframe the law requires (generally 30–45 days). These rights are free to exercise, subject to legal limits.

9. How long we keep data

When you delete your account, we delete or irreversibly anonymise your personal data within a reasonable period, except where we must keep certain records to comply with legal obligations, resolve disputes, or enforce our agreements. Backups are purged on a rolling schedule.

10. How we protect your data

We use technical and organisational measures appropriate to the risk, including: encryption in transit (HTTPS/TLS), hashed passwords, authenticated APIs and access controls, isolation of sensitive endpoints, rate‑limiting and abuse protection, EU‑based hosting, and staff access limited to what is needed. No method of transmission or storage is 100% secure, but we work continually to protect your data and to respond to incidents, including notifying you and authorities where the law requires.

11. Children

The Service is not directed to young children. You must be at least 16 years old (or the minimum age of digital consent in your country, if higher) to use DRIVN. Driving features additionally assume you either hold a valid driving licence or are a passenger. If you believe a child has provided us personal data, contact us and we will delete it. We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and do not knowingly collect data from children under 13.

12. Deleting your account

You can delete your DRIVN account at any time from within the app (Profile → account settings → delete account). Deletion removes your profile and associated personal data as described in Section 9. If you cannot access the app, email drivn@drivnapp.online and we will process the deletion.

13. Automated decision‑making

Scoring, points, tiers, leaderboards and anti‑cheat checks are automated, but they do not produce legal or similarly significant effects on you within the meaning of GDPR Art. 22. If you disagree with an automated result (for example an anti‑cheat flag), you can contact us for human review.

14. Cookies, local storage and push

We do not use advertising cookies or third‑party ad trackers. Where local law requires a cookie consent banner, we present one. Because we do not track you across third‑party sites or apps and do not serve targeted advertising, we do not respond to browser "Do Not Track" signals — there is little cross‑site activity for them to affect.

15. Third‑party services and links

The Service integrates or links to third parties (maps, payments, sign‑in, Spotify, event organisers, and websites others post). Their processing is governed by their own privacy policies, which we encourage you to read. We are not responsible for third‑party practices.

16. Changes and contact

We may update this Policy as the Service evolves or the law changes. We will post the updated version with a new "Last updated" date and, for material changes, provide a more prominent notice in‑app or by email. Continued use after changes means you accept the updated Policy.

Contact us: