Privacy Policy
Last updated: 14 July 2026
This Privacy Policy explains how SpotDex ("we", "us") collects, uses, and safeguards personal data when you use our website and mobile-optimised app (the "Service"). We are the data controller for information you provide through the Service.
1. Data we collect
- Account data: email address, display name, username, avatar.
- User content: photos of vehicles you upload, captions, tips, likes, follows, wishlist entries.
- Location data: optional latitude/longitude attached to sightings when you choose to include it.
- Payment data: processed by Stripe. We store subscription status and Stripe customer/subscription IDs only — never card numbers.
- Technical data: IP address, device/browser type, and diagnostic logs used to prevent abuse.
2. How we use your data
- Operate the Service (authentication, storing your collection, showing the feed).
- Run AI vehicle identification on photos you upload.
- Process subscription payments through Stripe.
- Protect the Service and enforce our Terms.
3. Legal bases (UK/EU GDPR)
Contract (delivering the Service), legitimate interests (fraud prevention, product improvement), consent (optional location, marketing where applicable), and legal obligation.
4. Sharing
We share data only with processors necessary to run the Service:
- Supabase (hosted database, authentication, storage).
- Stripe (payments).
- Our AI provider (image identification).
- Cloudflare (hosting, CDN).
5. Retention
Account and content data is kept while your account is active. Deleting your account removes your profile, sightings, and uploads within 30 days, except where retention is required by law (e.g. transaction records for tax).
6. Your rights
You may request access, correction, deletion, portability, or restriction of your data, and withdraw consent at any time. Contact us using the details below.
7. Cookies
We use strictly necessary cookies for authentication and, where enabled, analytics cookies. See our Cookie Policy.
8. Children
The Service is not directed at children under 13 (or under 16 in the EEA where a higher age applies). Do not use SpotDex if you are below this age.
9. International transfers
Our processors may store data outside your country. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards.
10. Contact
For privacy requests or questions, contact the SpotDex owner at the email address shown on the website. You also have the right to lodge a complaint with your local data protection authority (in the UK, the ICO).