Privacy Policy

1. Data we process

• Account data: username, email address, and a securely hashed password.
• Profile data: country, car information and photos you choose to add.
• Content you create: recorded driving routes (which include precise GPS location and timing), and photos and videos you capture or add.
• Usage & device data: basic technical data needed to run the app and, if you enable them, push-notification tokens.

2. Location data

Precise location is used only while you are actively recording or navigating a route, so the app can build and follow the route. Routes you save may be shared publicly as described in the Terms. You control your device location permissions at any time in your device settings.

3. How and why we use your data

We process your data to provide and secure the service (create your account, save and display routes, run leaderboards and social features), to moderate content and keep the platform safe, and to communicate with you about the service. Our legal bases (GDPR) are performance of our contract with you, your consent (e.g. location, notifications), and our legitimate interests in running and improving a safe service.

4. Who we share data with

Content you choose to make public (such as routes and their media) is visible to other users. We use a limited number of service providers who process data on our behalf, including Expo (app delivery, updates and push notifications) and our own hosting and infrastructure located in the European Union. We do not sell your personal data and we do not use third-party advertising or third-party analytics networks.

5. Where your data is stored

Your data is hosted within the European Union. Where any transfer outside the EU is necessary, we use appropriate safeguards required by law.

6. Retention & account deletion

We keep your data while your account is active. You can delete your account in the app. On deletion, your profile data, profile images and car-video images are deleted; routes you uploaded and their supporting media remain part of the Legend ecosystem but are anonymised (references identifying you as the creator are removed), as explained in the Terms.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, and to data portability. To exercise any right, contact hello@blockbastards.io. You also have the right to lodge a complaint with your local data protection authority (in Portugal, the CNPD).

8. Security

We take reasonable technical and organisational measures to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

9. Changes & contact

We may update this policy; material changes will be shown by an updated date. Questions: hello@blockbastards.io. See also our Cookies Policy.

Block Bastards, Unipessoal Lda. · Portugal · hello@blockbastards.io