Privacy Policy for Backseat Driver

Operated by Backseat Media

Last updated: 17 June 2026

Backseat Driver (“the App”) is developed and operated by Backseat Media (“we”, “us”, “our”). This Privacy Policy explains what information the App collects, how it is used, where it is stored, and the choices you have. It reflects how the App actually works today — please read it in full.

1. Two kinds of users

The App has two usage modes, and what we collect depends on which applies to you:

• Fans (no account). You can browse schedules, set reminders and use most features without signing in. Your preferences (favourite series, units, reminder settings) are stored locally on your device.
• Organisers (account required). Series, championship and venue organisers can create an account to publish and manage events. This involves a sign-in and the collection of the limited personal data described below.

2. Information We Collect

2.1 Organiser account information

When you register an organiser account we collect and store:

• Email address (used for sign-in, account verification and password resets)
• Password (handled and stored in hashed form by Google Firebase Authentication — we never see or store your raw password)
• Your chosen username and organisation/venue name
• Content you create (events, schedules, channel posts, branding such as a logo URL and accent colour)

2.2 Push notification tokens

If you enable session reminders, the App registers a Firebase Cloud Messaging (FCM) push token so we can deliver notifications. For organiser accounts this token is associated with your account so we can manage your devices; for fans, reminders are delivered via topic subscriptions.

2.3 Location

If you use location-based features (for example “events near you”), the App accesses your device’s location with your permission to calculate distances to events. This calculation happens on your device. We do not store your location on our servers, and we do not use it for advertising or tracking. You can decline or revoke the location permission at any time in your device settings.

2.4 Diagnostics and analytics

We collect limited, non-advertising technical data to keep the App stable and understand usage:

• Crash reports and performance data (via Firebase Crashlytics)
• Basic usage counters such as app opens and screens viewed
• Device type and operating-system version

3. What We Do NOT Collect

We do not collect your name (beyond an organisation/username you choose), phone number, postal address, payment card details, photos/contacts, or hardware identifiers such as IMEI/IMSI/SIM data. We do not sell your data, and we do not share it with third-party advertisers.

4. How We Use Your Data

• To provide and operate the App and organiser features
• To deliver session reminders you have opted into
• To verify accounts, reset passwords and secure the service
• To monitor stability, diagnose crashes and improve performance

We do not use your data for advertising or sell it to anyone.

5. Where Your Data Is Stored & Third-Party Processors

Organiser accounts, events and related data are stored on Google Firebase services (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging and Crashlytics). Our Firestore database is hosted in the europe-west2 (London) region. We also use:

• Google Firebase / Google Cloud — authentication, database, notifications, crash reporting
• Cloudflare — hosting of public schedule data and a weather lookup service
• OpenF1 — source of live timing/championship data (we request data from them; we do not send them your personal data)

These providers process data on our behalf under their own security and privacy commitments.

6. Data Retention & Deletion

Fans: your preferences live only on your device — uninstalling the App or clearing its data removes them.

Organisers: you can delete your account and its associated events from within the App (Organiser settings → delete account). You may also email us to request deletion. We will action verified deletion requests within 30 days, except where we are required to retain certain records by law.

For any privacy request, contact backseatdriverdevs@gmail.com.

7. Children’s Privacy

The App is intended for a general audience aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Security

• All data in transit is encrypted using HTTPS/TLS
• Database access is restricted by server-side security rules
• App attestation (Firebase App Check) is used to limit access to our backend to genuine app instances

9. Your Rights (GDPR / UK GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, delete, export or object to the processing of your personal data, and to withdraw consent. To exercise any of these rights, contact backseatdriverdevs@gmail.com. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office, ico.org.uk).

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a revised “Last updated” date.

11. Contact

Backseat Media
Email: backseatdriverdevs@gmail.com