Privacy policy

This policy explains what Plated collects when you use the Plated app and this website, why, and what you can do about it. Plated is run from Ireland and we handle your data under the GDPR. Questions go to privacy@driveplated.app.

What we collect

• Account: your email address, or the identifier Apple gives us when you use Sign in with Apple (which can be a private relay address).
• Profile and garage: your username, county, the cars and registrations you add, build log entries, photos you upload, and the posts, questions, answers and Respect you give.
• Reg claims: the proof photo you take to show a car is yours. A moderator looks at it once, and it is deleted as soon as the claim is reviewed.
• Drives: while a drive is being recorded, the app collects GPS points (and, with auto-track on, motion activity to notice when you start driving). We match the points to the road network to work out which roads you drove, then delete the raw points. Unmatched points are deleted after 7 days at most. Your explored roads are only visible to you; recaps are only shared if you choose to share them.
• Spots: photos you post of cars you’ve seen, with an optional caption, make, model and (for cars not on Plated) county. Location data is stripped from the photo. A spot of a car on Plated is only shown on that car’s profile if its owner approves it, and never says where it was taken.
• Social: friends, groups you join, events you RSVP to, and reports you make or that are made about your content.
• Purchases: if you buy Plated Pro, Apple handles payment. We receive the subscription status, not your card details.
• Device: a push notification token if you allow notifications, and basic technical logs needed to run and secure the service.

We don’t sell your data, we don’t run ads, and we don’t use third-party analytics or tracking in the app.

What other people can see

Cars are public by default: anyone using Plated can look up the reg and see the car, its build log and photos. You can make a car private in its settings, and you choose whether you’re shown as its owner (off by default). Spots other people take of your car stay hidden until you approve them, and you can hide them again at any time. Your drives and explored roads are never shown to anyone else.

Why we use it (legal bases)

• To provide the app you signed up for: your account, garage, roads and social features (contract).
• To keep Plated safe: verifying claims, moderating reports, preventing abuse and bans (legitimate interests).
• Location and motion data, notifications and photo access: only with your permission, which you can withdraw in iOS Settings at any time (consent).
• Purchase records we must keep for tax and accounting (legal obligation).

Who processes it for us

• Supabase: database, file storage and sign-in, hosted in the EU (Ireland).
• Apple: Sign in with Apple, push notifications and in-app purchases.
• RevenueCat: manages Plated Pro subscriptions. It receives an anonymous account ID and your purchase history.
• Vercel: hosts this website.
• OpenFreeMap: serves the map tiles in the app, so it sees your IP address and the map area being viewed.

Where a provider processes data outside the EEA, it does so under the European Commission’s standard contractual clauses or an adequacy decision.

How long we keep it

We keep your account data for as long as you have an account. Claim proof photos are deleted after review and raw GPS points after matching (7 days at most). When you delete your account, we delete your profile, cars, photos, posts and roads within 30 days, except records we must keep by law or for an active moderation case (such as a ban for abuse).

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or take it elsewhere. Email privacy@driveplated.app from the address on your account and we’ll respond within one month. If you’re unhappy with how we handle your data, you can complain to the Data Protection Commission (dataprotection.ie).

Children

Plated is not meant for anyone under 16, and we don’t knowingly collect data from children.

This website

driveplated.app sets no cookies and uses no analytics. Our host keeps standard server logs for security.

Changes

If we make a significant change to this policy, we’ll tell you in the app before it takes effect.