Privacy Policy

Your route is never stored outside your phone. Your account only holds the totals of each drive, the start and end place names, and how much experience you have per condition. Many users are expected to be learner drivers under 18. For that reason the Service is designed to keep as little personal data as possible, for as short a time as possible.

2.1 The data controller for the Never Driven app and these web pages (the "Service") is the student who develops the Service as coursework at the Norwegian University of Science and Technology (NTNU) ("we", "us"). NTNU does not operate the Service and is not the controller.

2.2 You can contact us about anything in this policy through customer service.

2.3 This policy is written to meet the EU General Data Protection Regulation (GDPR), which applies in Norway through the Personal Data Act (personopplysningsloven).

3.1 Account data. Your email address, and a user ID that Firebase assigns to you. The email address is used only to sign you in with an email link.

3.2 Location data while driving. While a drive is recorded, the app collects your device's GPS position, speed and time at regular intervals (the "raw track").

3.3 Saved drives. After a drive is processed, the following is saved to your account:

• start and end time, distance and duration;
• the names of the places where the drive started and ended, at town or municipality level;
• your experience from the drive: time and count per road type, light, surface, weather, traffic and road feature, and combinations of these;
• manoeuvres you log by hand, and whether you have confirmed the drive.

A saved drive does not contain coordinates, the path you drove or street names.

3.4 Background location. If you turn on drive suggestions, the app reads your device's location about once an hour while the app is in the background, to look up the weather forecast where you are.

3.5 Data on your device. Your settings, and a short list of the conditions you have least experience with, are stored locally on your phone.

3.6 Website visits. When you visit these web pages, the web server records your IP address, browser type, the page requested and the time of the request in its access log.

3.7 We do not collect your name, phone number, contacts, photos or payment information. We do not use cookies, advertising IDs, analytics or tracking tools.

• Signing you in and keeping your account (3.1). Legal basis: performance of our agreement with you, GDPR Article 6(1)(b).
• Recording drives and working out your experience (3.2, 3.3, 3.5). Legal basis: performance of our agreement with you, Article 6(1)(b).
• Drive suggestions using background location (3.4). Legal basis: your consent, Article 6(1)(a). This feature is off by default. You give consent by turning it on, and you can withdraw it at any time by turning it off.
• Operating and securing the website (3.6). Legal basis: our legitimate interest in keeping the website running and protecting it from abuse, Article 6(1)(f).

We do not use your data for advertising or profiling, and we do not sell it. Suggestions are informational only and do not produce any decision with legal or similarly significant effect on you.

5.1 Processing happens on your phone. When a drive ends, the raw track is kept on the device until the phone is online, then sent to the services in section 6 to find out the road, weather, light and place names along the route.

5.2 When the drive has been saved to your account, the raw track is deleted from your phone. Drives too short to count are discarded without being saved.

5.3 Only the information listed in 3.3 is sent to our storage provider. The raw track is never sent there.

6.1 Storage and sign-in. Google Firebase (Google Ireland Ltd. and Google LLC) stores your account data and saved drives on our behalf, as our data processor.

6.2 Condition lookups. To process a drive, coordinates and times from the raw track are sent to the services below. They receive no email address or user ID, but like any internet service they can see the IP address of your phone.

• Valhalla routing server, hosted by us, for road types and road features such as tunnels and roundabouts.
• Open-Meteo (open-meteo.com), for weather and road surface. Each request is also sent to a copy of Open-Meteo hosted by us, which is used if the public service is unavailable.
• sunrise-sunset.org, for light conditions such as dusk and darkness.
• Your phone's geocoding service, provided by Apple or Google depending on your device, for the start and end place names.

6.3 The same Open-Meteo services receive your location for the hourly forecast lookup described in 3.4.

6.4 Third-party services process data under their own privacy policies. We do not share your data with anyone else, unless we are required to by law.

Some of the providers in section 6, including Google, may process data outside the European Economic Area. Where Google does so on our behalf, it relies on safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses.

• Raw track: on your phone until the drive has been processed and saved. If processing fails, the drive stays queued and is retried until it succeeds. Uninstalling the app deletes it.
• Saved drives: until you delete the drive, your account is deleted, or the Service is shut down, whichever comes first.
• Account data: until your account is deleted or the Service is shut down.
• Background location: not stored. It is used for a single forecast lookup and then discarded.
• Settings and local lists: on your phone until you uninstall the app.
• Website access logs: only as long as needed to operate the website, and never linked to your account.

9.1 Under the GDPR you have the right to:

• access the personal data we hold about you (Article 15);
• have inaccurate data corrected (Article 16);
• have your data deleted (Article 17);
• restrict how we process your data (Article 18);
• receive your data in a portable format (Article 20);
• object to processing based on our legitimate interest (Article 21);
• withdraw consent at any time, without affecting processing before the withdrawal (Article 7(3)).

9.2 You can delete a single drive yourself from its details screen in the app. For any other request, contact us through customer service. We will answer within one month.

9.3 You can turn off location access for the app in your phone's settings at any time. Drives cannot be recorded without it.

9.4 If you believe we process your data unlawfully, you have the right to complain to the Norwegian Data Protection Authority (Datatilsynet), datatilsynet.no.

10.1 The Service is meant for learner drivers, many of whom are under 18. This is the main reason the route is never stored and only coarse place names are kept.

10.2 Where processing relies on consent (drive suggestions) and the user is under 13, consent must be given by a parent or guardian. Parents and guardians may contact us to exercise the rights in section 9 on behalf of their child.

11.1 All communication between the app and the services in section 6 is encrypted with HTTPS. Access rules in our storage ensure that each user can only read and write their own drives.

11.2 Sign-in uses a one-time email link, so there is no password to leak. You are responsible for keeping your phone and email account secure.

11.3 No system is completely secure. If a personal data breach puts your rights at risk, we will inform you and Datatilsynet as required by the GDPR.

As a student project, the Service will be shut down after the course. When that happens, all accounts and saved drives will be deleted.

We may update this policy, for example when the Service changes. The version number and effective date at the top show the current version. If a change significantly affects how your data is used, we will tell you in the app before it takes effect.