Privacy Policy

Last Updated: June 1, 2026

1. Introduction

Welcome to Speedox (عداد السرعة) ("we," "our," or "us"), developed and published by MainCreator Lab. This Privacy Policy explains, in plain language, how the Speedox iOS mobile application (the "App") handles your information.

By downloading, installing, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree with the terms of this policy, please do not use the App.

2. Summary - In One Paragraph

Speedox is a privacy-first GPS speedometer. We do not operate any servers that hold your location, and we do not require an account, email, or password. Your trips, your dial preferences, your speed alert threshold, and every setting you choose live only on your iPhone. The GPS feed itself is processed entirely on-device by Apple's Core Location framework - we never receive a copy of it. To keep the App free and stable, the App integrates two well-known third-party services from Google - AdMob for non-personalized banner advertising and Firebase (Analytics + Remote Config) for aggregate usage statistics and remote configuration. Both are governed by Apple's App Tracking Transparency framework and are described in detail below. Your GPS readings and trip history are never part of advertising or analytics.

3. Speed Reading Disclaimer

Speedox is a personal reference tool. It is not a certified or calibrated speedometer and is not a substitute for the speedometer fitted to your vehicle. The speed Speedox shows is derived from the iPhone's GPS receiver and is therefore affected by satellite visibility, atmospheric conditions, and device hardware. Nothing displayed in the App (including the dial, the statistics, the chart, the trip history, the alerts, or the acceleration test) should be relied upon for legal, professional, or safety-critical decisions. Always follow your local traffic laws and the posted speed limits, and never look at your phone while driving - mount it where you can glance at it safely. You are solely responsible for your driving, and MainCreator Lab disclaims any liability arising from your use of the App.

4. Information We Do NOT Collect

Speedox is designed with a privacy-first approach. We want to be completely transparent about what we do not collect:

• We do not collect your name, email address, phone number, or any personal identification information.
• We do not require account creation, sign-in, or user registration.
• We do not collect, store, or transmit your GPS location, your coordinates, your speed, your altitude, your heading, or any segment of any trip you record. The GPS feed is consumed in-memory by Apple's Core Location framework and the trip log is written directly to a database on your device - it is never sent to us.
• We do not upload your trip history, your CSV exports, or any preference you set.
• We do not access Apple Health (HealthKit), your contacts, your photos, your camera, your microphone, or any other sensitive data source on your device.
• We do not sell, trade, or rent any information to third parties.
• We do not embed social-media tracking SDKs (e.g., Facebook SDK, TikTok SDK) and we do not share data with such networks.

5. Location Data (Core Location)

To show you a live speed, Speedox needs access to your iPhone's GPS. When you first start the App in live mode, iOS will show the standard system prompt asking you to grant location access. You can choose Allow While Using App, Allow Once, or Don't Allow. You can change this choice at any time under iOS Settings > Privacy & Security > Location Services > Speedox.

Speedox requests the "While Using" authorization level only - it never asks for "Always" - and uses Apple's kCLLocationAccuracyBestForNavigation setting for the most accurate reading possible.

What we do with your location, in detail:

• Live speed: Each Core Location update is read in-memory, smoothed with an exponential moving average, and displayed on the dial. No raw update is written to disk.
• Trip history: While a trip is being recorded, we store its waypoints (latitude, longitude, speed, altitude, heading, timestamp) locally on your device using Apple's SwiftData framework so that the trip can be replayed on the map later. This data is never uploaded.
• Map style: When you swipe to the Map dial style, MapKit draws a dark map tile around your current location. Map tiles are fetched anonymously from Apple's MapKit service under Apple's own privacy guarantees - Apple does not associate map requests with your Apple ID. See Apple's Maps privacy disclosures.
• Demo mode: If you choose Demo as the speed source in Settings, no Core Location updates are requested at all - the dial is driven by a built-in synthetic curve so you can preview the styles without moving.

You can permanently stop all location processing simply by setting Location Services to "Never" for Speedox in iOS Settings, or by uninstalling the App.

6. Local Data Storage

Speedox stores all user-generated content and preferences locally on your device. This includes:

• Trips: Each trip you record - date, duration, distance, max and average speed, and the full route polyline - is stored exclusively on your device using Apple's SwiftData framework.
• Acceleration runs: Your 0-100 km/h (or 0-60 mph) times and the corresponding speed traces are stored alongside your trips, on-device only.
• Settings: The dial style you prefer, your unit choice (km/h, mph, knots), your vehicle type (car, motorcycle, bicycle, scooter), your speed alert threshold, whether voice and haptic alerts are enabled, the speed source (live or demo), the language, the theme, and every other preference - all stored locally using UserDefaults/AppStorage.
• CSV exports: The CSV files Speedox generates are created on your device on demand. They are only shared if and when you choose to share them (for example, via WhatsApp, Mail, or AirDrop).

This data is never uploaded, synced, or transmitted to our servers or any external service. If you delete the App, all locally stored data will be permanently removed from your device. We strongly recommend using the App's built-in CSV export to keep your own backup before deleting.

7. Advertising (AdMob)

Speedox is free and is supported by a single, non-intrusive banner advertisement served via Google AdMob and anchored at the bottom of the main screen. To deliver this banner, AdMob may process certain device-level information in accordance with Apple's App Tracking Transparency framework:

• If you tap "Ask App not to Track" on the ATT prompt, ads remain non-personalized - no Identifier for Advertisers (IDFA) is shared with AdMob, and Google's SDK is instructed to serve contextual ads only.
• If you allow tracking, AdMob may use the IDFA and standard ad-delivery signals to show more relevant ads.
• You can review or change your tracking choice at any time under iOS Settings > Privacy & Security > Tracking > Speedox.
• AdMob's own data practices are governed by Google's Advertising Policies. Ads never contain or use any of your GPS readings, trips, or alerts.
• We do not currently use interstitial ads, rewarded ads, or App Open ads. If we ever add a new ad format we will update this policy and ship a new version of the App on the App Store.

8. App Tracking Transparency (ATT)

In full compliance with Apple's App Store Review Guidelines and the App Tracking Transparency framework:

• The App will show the standard iOS ATT prompt before any tracking-eligible signal is shared with Google AdMob.
• You can decline tracking - the App will continue to work, and the banner shown will be non-personalized.
• We do not use your IDFA, fingerprint your device, or correlate identifiers across apps in any other way.
• You can review or change your tracking preferences at any time under Settings > Privacy & Security > Tracking on your iOS device.

9. Audio & Haptics

If you enable voice alerts in Settings, the App uses Apple's AVSpeechSynthesizer to speak short Arabic phrases (such as "تجاوزت الحد") through your iPhone's speaker when you cross your speed threshold. The synthesizer runs entirely on-device - no audio is sent to any server. Haptic feedback is produced by Apple's Core Haptics framework, also on-device. You can disable either alert at any time from the App's Settings screen.

10. Analytics, Diagnostics & Firebase

To improve the App's stability and understand high-level usage patterns, Speedox relies on a combination of Apple's own built-in tools and Google's Firebase platform:

• Apple Crash & Analytics Reports: If you have opted in to "Share iPhone Analytics" under Settings > Privacy & Security > Analytics & Improvements, Apple may share anonymized crash and performance data with developers. You can turn this off at any time in iOS Settings.
• Firebase Analytics (minimal): Firebase Analytics collects aggregated, non-personal events - such as app open, screen view, and broad device/region buckets - so we can understand which features are useful and which need improvement. We do not log custom events containing your GPS coordinates, your speed values, your trips, your alert threshold, or any other personal content. IP addresses processed by Firebase are truncated/anonymized as documented by Google.
• Firebase Remote Config: The App fetches a small set of configuration values (feature flags, default presets, banner enable/disable, etc.) from Firebase Remote Config so we can adjust the experience without shipping a full update. The fetch request sends only standard Firebase metadata (app version, OS version, locale, country, Firebase Installation ID); it does not send any of your location data. The response we receive contains only the configuration values - no personal data about you flows back from Google.
• Firebase Installation ID: Firebase generates a random, per-install identifier used by Analytics and Remote Config. It is not tied to you personally and is automatically reset if you reinstall the App.
• No advertising signals from Firebase: We do not enable Firebase's advertising features (e.g., Google Signals, IDFA collection from within Firebase). All advertising-related identifiers are handled separately by AdMob and only with your ATT consent.
• Where the data is processed: Firebase services are operated by Google and may store data on servers located in the United States, the European Union, or other regions. Google participates in mechanisms recognized for international data transfers (such as Standard Contractual Clauses). Firebase's own privacy practices are governed by the Firebase Privacy and Security overview and Google's Privacy Policy.
• Your control: You can opt out of Firebase Analytics by declining the ATT prompt - when you decline, the App disables Analytics data collection. You can also reset your Firebase Installation ID at any time by reinstalling the App, or revoke iOS-level analytics consent under iOS Settings > Privacy & Security > Analytics & Improvements.

11. Children's Privacy

Speedox is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe that a child under 13 has provided personal information through the App, please contact us so we can take appropriate action.

12. Third-Party Services and Links

The App may contain links to third-party websites (for example, our website or App Store pages) that are not owned or controlled by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policies of any third-party services you interact with.

13. Data Security

We take the security of your data seriously. Since all of your trip data is stored locally on your device, it benefits from the hardware-level encryption and security features provided by Apple's iOS platform, including device passcode protection and Secure Enclave encryption. Because your trips contain detailed location history, we recommend protecting your device with a passcode or Face ID / Touch ID.

14. Your Rights under the GDPR (EU / EEA / UK)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) - and its UK equivalent - grants you a set of rights regarding your personal data. This section explains how those rights apply to Speedox.

14.1 Data Controller

The data controller responsible for any personal data processed in connection with the App is:

You can reach us at the address above for any privacy-related question or request. We do not currently meet the thresholds that would require us to appoint a formal Data Protection Officer (DPO), but the contact above will handle every GDPR enquiry directly.

14.2 What Personal Data We Process

• On your device only: live GPS feed (consumed in-memory, never persisted by us), trip waypoints, acceleration runs, dial preferences, alert threshold, theme, language. We do not receive a copy of any of this.
• Via Firebase Analytics & Remote Config: aggregated app open / screen-view events, device model, OS version, locale, country, truncated IP address, and a randomly generated Firebase Installation ID used to deliver configuration values back to the App.
• Via Google AdMob (only if you allow tracking via ATT): the IDFA and standard ad-delivery signals. If you decline tracking, only contextual, non-personalized ad signals are processed.
• Via Apple MapKit (only when you open the Map style): anonymized map tile requests handled by Apple under its own privacy guarantees.

14.3 Legal Basis for Processing (GDPR Article 6)

• Consent (Art. 6(1)(a)) - for access to your iPhone's GPS (granted through the iOS Core Location prompt), for personalized advertising via AdMob, and for any tracking-eligible Firebase signals (granted through the iOS App Tracking Transparency prompt and any in-app Google User Messaging Platform (UMP) consent banner shown to EU/EEA/UK users). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legitimate interests (Art. 6(1)(f)) - for security, abuse prevention, and the minimal Firebase processing required to keep the App stable. We have weighed this against your rights and concluded that diagnostic data limited to aggregated metrics has a minimal privacy impact.
• Compliance with legal obligations (Art. 6(1)(c)) - where applicable (for example, responding to lawful requests from authorities).

14.4 Your Rights

Subject to the conditions set by the GDPR, you have the right to:

• Access (Art. 15) - request confirmation of whether we process personal data about you and obtain a copy of it.
• Rectification (Art. 16) - ask us to correct inaccurate personal data.
• Erasure / "right to be forgotten" (Art. 17) - ask us to delete personal data we hold about you. Because your trips and GPS history live only on your device, the most direct way to exercise this right is to delete the App; for Firebase / AdMob signals you can also reset your identifiers and reinstall the App.
• Restriction of processing (Art. 18) - ask us to stop processing your data while a complaint or correction request is being resolved.
• Data portability (Art. 20) - receive your personal data in a structured, machine-readable format. Since your data is stored locally in SwiftData on your device, you already have direct, complete portability through the App's CSV export.
• Object (Art. 21) - object to processing based on legitimate interests, including profiling. We will stop the relevant processing unless we demonstrate compelling legitimate grounds that override your interests.
• Withdraw consent - at any time, from iOS Settings (Location Services / ATT) or by tapping any in-app consent toggle.
• Lodge a complaint - with your local supervisory authority (for example, the CNIL in France, the ICO in the UK, the AEPD in Spain, the Garante in Italy, or any other EU/EEA data protection authority).

To exercise any of these rights, contact us at contact@maincreator.com. We will respond within one month (extendable by two further months for complex requests, in line with Art. 12(3)). There is no fee for reasonable requests.

14.5 International Data Transfers

Some of our processors - notably Google (Firebase, AdMob) - operate global infrastructure that may transfer personal data outside the EU/EEA or the UK, including to the United States. Such transfers rely on safeguards recognized under the GDPR, including the European Commission's Standard Contractual Clauses (SCCs) and applicable adequacy decisions. You can request more information about these safeguards by contacting us.

14.6 Data Retention

• On-device data: retained for as long as the App is installed; permanently removed when you delete the App.
• Firebase Analytics: retained for the default user-and-event retention period configured for our project (up to 14 months), then aggregated.
• AdMob signals: retained by Google per its own retention policies.

14.7 California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA") grants you similar rights - including the right to know what categories of personal information we collect and share, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal information for targeted advertising. We do not sell your personal information for money. The processing of advertising identifiers via AdMob may qualify as "sharing" under the CPRA - you can opt out at any time by declining the ATT prompt or by enabling "Limit Ad Tracking" in iOS Settings. To exercise your CCPA/CPRA rights, contact us at contact@maincreator.com.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated Privacy Policy on this page and updating the "Last Updated" date at the top. We encourage you to review this page periodically. Continued use of the App after changes constitutes your acceptance of the updated policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: