Where RushingWhere Rushing

Privacy Policy

Last updated 10 October 2026

01Who is responsible for your data

Inoxoft publishes Where Rushing and decides how the data described here is handled, which makes us the data controller. You can reach us at ruslan.pitula@inoxoft.com.

02What we collect

Your email address and password, the nickname, country and city you choose, the cars you add, and an optional profile photo. While you are driving we collect speed, distance and duration, and — if you allow it — motion data used to describe your driving style. We also store the drivers you follow, any club you join, the territory hexagons you claim, and the trophies you earn; follows, club membership and trophies are removed with your account, as described under Deleting your data.

03Your location

Where Rushing reads your location to calculate speed and distance. During ordinary driving your route is never stored: only the derived figures — top speed, distance, duration — are saved, and, for Territory, the ids of the map hexagons you passed through and when you took them, as described under Territory. Location is read in the background only so a session or a Ghost Ride keeps recording when your screen locks, and only while one is running. The one exception is a Ghost Ride you start yourself, described next.

04Ghost Rides

When you start a Ghost Ride, Where Rushing records the path you drive between the start and the finish, about once a second, and keeps it with your account so you can replay it and race it later. Rides on your private routes are visible only to you. Routes you share with everyone make your rides on them visible to other drivers: as the ghost they race against and on that route’s leaderboard, with your nickname, car and time. You can delete any ride at any time. Deleting your account removes your private routes and every ride on them; rides on shared routes stay on their leaderboards as anonymous entries, like records do.

05Territory

While a drive is being recorded, the app turns your position into map hexagon identifiers (about 0.7 km² each) on your phone. Only those identifiers and the time are sent to our server — never your exact route or GPS coordinates. Other drivers can see who holds a hexagon, unless you hide yourself from the leaderboard. Cities you pick in your profile come from GeoNames (CC BY 4.0), with some names adjusted.

06Why we use your data

We use your account details to give you an account and keep it secure, which we need in order to provide the app you asked for. We use your speeds and car to build your session history and the leaderboard, which is the service itself. We use motion data only if you allow it, and you can withdraw that at any time in iOS Settings. We use who you follow, your club membership, your territory hexagons and your trophies to run the social and game features you use. We keep records of obviously false entries so we can remove them, which is our legitimate interest in a fair leaderboard.

07What other drivers can see

Your nickname, country, profile photo, car and top speed appear on the leaderboard, and your nickname and colour appear on any map hexagon you hold. Other drivers who open your member profile also see your trophies, follower count, hexagons held and club name. Turn on "Hide me from the leaderboard" in Settings and none of this is shown, including your photo: your name and colour disappear from hexagons, your member profile becomes unavailable to other drivers, and you drop off every board. Your session history is yours alone.

08Where your data is held

Where Rushing stores data with Supabase, our hosting provider, which may process it outside your own country under the safeguards its terms require. Your profile photo is kept in private storage and is shown to other drivers only through a short-lived link that expires. We do not sell your data and we do not share it for advertising.

09App usage statistics and Google services

To see which parts of the app are used and where it can be improved, Where Rushing sends anonymous usage statistics to Google Analytics for Firebase: which screens you open and which features you use, such as finishing a session, claiming hexagons or finishing a Ghost Ride, with rounded figures like a distance band, never your speed, route, location, nickname or email. They are tied only to a random identifier for this installation, never to your account, and are not used for advertising: the advertising identifier is not collected. This is our legitimate interest in improving the app. To see where screens are tapped, the app also counts taps per screen in a coarse grid of about 12 by 24 squares, with no identifier at all and never while the keyboard is open. Push notifications are delivered through Firebase Cloud Messaging, which receives a token for your phone and the text of each notification. If you sign in with Apple or Google, they confirm your identity to us and we receive the email address they share; we do not receive your Apple or Google password.

10How long we keep it

We keep your account and its data for as long as your account exists. When you delete your account the personal data goes immediately, apart from the anonymous entries described below, which are no longer linked to you and are kept so other drivers keep the rankings and territory history they earned.

11Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to limit what we do with it, or object to it being used. Write to ruslan.pitula@inoxoft.com and we will answer within one month. If you are in the European Union or the United Kingdom and you think we have handled your data badly, you can also complain to your national data protection authority.

12Deleting your data

Delete account in Settings removes your email, nickname, photo and cars, and permanently revokes sign-in. It also removes who you follow and who follows you, ends your club membership, and deletes your trophy shelf. Hexagons you hold are freed for other drivers to claim; your own claim history is deleted, and a record of another driver taking a hexagon from you is kept but no longer names you. Your top speed stays on the leaderboard as an anonymous entry that can no longer be traced to you. This cannot be undone.

13Where you drive is your responsibility

Your session and Ghost Ride records keep the position, speed and route data described above, so you can review a drive on a closed course. They do not check whether the place you drove was a racetrack or a public road, do not report your driving to any authority, and do not verify that your use was lawful. That data is a record you chose to make, not evidence that the drive was permitted, and its existence does not make Inoxoft responsible for how, or where, you drove. Using the speed features — the speedometer, sessions, records, speed boards and Ghost Rides — on a public road is outside their intended use and against the Terms of Use; any such use, and every consequence of it, is entirely your own responsibility. Territory is meant for ordinary driving within the rules.

14Children

Where Rushing is not intended for anyone under 18, and we do not knowingly collect data from them. If you believe a child has given us data, write to ruslan.pitula@inoxoft.com and we will remove it.

15Changes to this policy

We may change this policy as the app changes or the law requires. The date at the top shows when it was last changed, and the current version is always in the app and on our website.

16Contact

Questions about this policy, or a request to see, correct or delete the data we hold about you, go to ruslan.pitula@inoxoft.com. We answer data requests within one month.