Privacy Policy for Tespit Social

This privacy policy applies only to Tespit Social, a new, separate app that comes with Tespit 1.1.15 as an additional app on the App Store and Google Play. Tespit Social lets you share and compare your trips with friends. Using it is optional.

The Tespit app itself remains covered by the Privacy Policy for Tespit (https://tespitapp.com/en/datenschutz). Tespit does not send your trip data to a server, and Tespit Social does not change that.

Tespit Social is provided by:

Email: TespitApp@gmail.com

VAT ID: CHE-405.472.785

• Without an account, your trips stay on your device and Tespit Social shows them only to you.
• With an account, you share only the figures you choose in the settings, and only with confirmed friends.
• Places, speed, battery level, VIN, vehicle name and your location are never shared.
• You share routes only one trip at a time. They are shortened at the start and end by your privacy zone (unless you choose 0 m) and end-to-end encrypted on your device. Neither I nor Google can read them.
• Global statistics: only if you join. Then everyone signed in sees your user name, profile picture, country and totals per week, month and year, but no single trips.
• Reactions and groups: a reaction to a friend's trip is seen only by you and that friend. In a group, the members see your user name, profile picture, country and your totals per week, month and year, but no single trips.
• Badges, challenges and records are worked out by the app on your device only.
• Shared data is stored with Google Firebase in Frankfurt am Main (Germany).
• No ads, no tracking, no analytics, no sale of data.

Tespit hands over finished trips through protected storage that only Tespit and Tespit Social use on the same device. This includes the trip data (for example time, distance, route, speed, energy, battery level, places and, from Tespit 1.1.15, elevation and outside temperature) and display settings such as unit, currency and electricity prices. This data stays on your device as long as you do not share it. Replay, driving profile, records, review, badges and challenges are worked out by the app on your device; nothing is uploaded for them.

Your sharing settings, the chosen language and the private key that opens routes your friends share are also stored locally. The key is kept in the iOS Keychain or the Android Keystore. On iOS it can sync with your other devices through iCloud Keychain, so you can open shared routes on a new device too.

Tespit Social shows maps with Apple Maps on iOS and with Google Maps on Android. Your device loads the map tiles directly from Apple or Google; the map service receives technical data such as your IP address and the area shown, but no account or trip data from Tespit Social.

Sample trips in the app are simulated and are never uploaded.

Friends and rankings need an account. You sign in with Apple or Google through Google's Firebase Authentication.

• With Apple: Tespit Social asks for neither your name nor your email address. Firebase receives an identifier for your account from Apple.
• With Google: Firebase receives the details Google passes on when you sign in, usually your email address and name. Tespit Social does not show them to others.
• Firebase also stores technical account data such as an account ID, the sign-in provider and sign-in times, and processes your IP address, among other things to prevent abuse.
• User name and profile picture: You choose a user name and, as your profile picture, initials or a vehicle model with a colour, or a photo of your own. You pick a photo in the system photo picker; Tespit Social receives only that one picture and no access to your library. You choose the crop yourself; the photo is then shrunk to 200 × 200 pixels and compressed on your device before it is uploaded. If you switch back to initials or the vehicle, the photo is deleted from the server. Signed-in people who find you, receive a request from you or are your friends can see your user name and profile picture.
• Country and bio (optional): You can name your country and write a short bio (at most 200 characters, no links). Signed-in people who find you, receive a request from you, are your friends or see you in the global statistics can see both.

The following is stored in Cloud Firestore (Google Firebase), region europe-west3 (Frankfurt am Main):

• Profile: user name, country and bio (if given), profile picture (initials or a vehicle model with a colour, or your photo shrunk to 200 × 200 pixels), whether you can be found by your user name, whether you accept requests from anyone or only through your link, whether you appear in rankings, and the public part of your route key.
• Friendships: requests, accepted friendships, blocked people, your personal invite code and reports you send.
• Invite link: Your link leads to tespitapp.com/u/<user name> and contains your personal code. With Tespit Social installed, the app opens it. Otherwise the website shows an invite page that only displays the name in the link and stores nothing; as with any page request, the web server processes the requested address.
• Shared trips: for each trip only the figures you switched on: start time (or only the day if you hide the time), driving time, distance, energy, average consumption and cost with currency. Plus a random marker of your device, so a device only takes back its own trips.
• Global statistics (only if you join): your totals per week, month and year (distance, number of trips, average consumption from 10 km, days in a row) with user name, profile picture and country, worldwide and, with a country, also in your country's ranking. The app works out the totals on your device from all trips from Tespit. Also a list of your entries that only you can read, so you can remove them again from any device. All signed-in users of Tespit Social can see these entries.
• Reactions: when you react to a friend's shared trip, the trip owner's account stores the trip, your account ID, the chosen sign (👍 🔥 ⚡ 🌱) and the time. There is no free text. Only you and the owner of the trip can see the reaction.
• Groups: the group's name, who created it, the code of its invite link and, per member, user name, profile picture and country. In addition your totals per week, month and year (as in the global statistics, from all trips from Tespit) and a list of your groups that only you can read. Only the group's members see all this. Someone with the invite link sees only the group's name before joining. Group links lead to tespitapp.com/g/<code>.
• Never shared: places, speed, battery level, VIN, vehicle name and your location.

Your shared trips are visible only to people whose friend request you accepted or who accepted yours. When a friendship ends, they no longer see your trips.

You share a route only when you explicitly choose this for a single trip. Before that, the start and end are shortened by the privacy zone you chose (0, 50, 200, 500 or 1,000 m). With 0 m nothing is shortened, so your friends also see the start and destination. Place names are not sent.

The route is encrypted on your device with a new key (ChaCha20-Poly1305). That key is sealed for each of your friends with their public key (HPKE according to RFC 9180). The server only holds encrypted data. Neither I nor Google can read the route; only your friends can open it on their devices.

For accounts and storage I use Firebase Authentication and Cloud Firestore by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA). Google processes the data on my behalf under the Firebase data processing terms.

• Stored data is kept in Frankfurt am Main (Germany).
• Firebase Authentication is a global service; data may also be processed in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework; standard contractual clauses apply in addition.
• Google Analytics is not linked, and the use of Firebase service data for other Google services is switched off.
• Google's information on privacy in Firebase: https://firebase.google.com/support/privacy

I process this data to provide the Tespit Social features you use: account, friends, shared trips, rankings and routes (Art. 6(1)(b) GDPR). Reports, blocking and abuse prevention are based on my legitimate interest in a safe service (Art. 6(1)(f) GDPR). For people in Switzerland, the Swiss Federal Act on Data Protection (FADP) applies as well.

• If you stop sharing a trip, it is removed from the server.
• Delete all shared data in the settings removes all shared trips and routes; your account and friends remain.
• If you switch off the global statistics or choose Delete all shared data, your entries in the global statistics are deleted.
• If you stop sharing a trip or a friendship ends, the reactions to it are deleted.
• If you leave a group, your membership and your totals in it are deleted. If the person who created the group ends it, the whole group with all its entries and its invite link is deleted.
• To delete your account, open Settings › Delete account in Tespit Social. Without the app, you can request deletion by e-mail to TespitApp@gmail.com with your user name; the account and the data listed in the next point are then deleted within 30 days.
• Delete account removes your user name, profile and profile photo, entries in the global statistics, shared trips and routes, your reactions and the reactions to your trips, your group memberships, the groups you created, friendships, requests, blocks and your invite code, and then your Firebase account. If you signed in with Apple, the connection to Apple is revoked as well.
• Reports are kept only for review and deleted afterwards.
• You delete the data on your device by removing Tespit Social.

Tespit Social contains no ads, no tracking across apps and websites, no Google Analytics or Firebase Analytics and no analytics backend of its own. Personal data is not sold.

Depending on the applicable law, you can request access, rectification, erasure, restriction of processing and data portability, and object to processing. You can change or delete much of it directly in the app. For requests, use the email address above. You can also lodge a complaint with a data protection authority; in Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC).

This privacy policy may be updated when Tespit Social's features, the services it uses or legal requirements change.