Privacy Policy

1. Data controller

Camvell Ltd
2nd Floor, 5 High Street, Westbury on Trym, Bristol, BS9 3BY

Data Protection Officer (DPO): DPO@skoot.com

2. At a glance

Skoot is a driving navigation app with speed-camera alerts. It has no accounts and no ads, and we run no analytics on you. Camera alerts are processed entirely on your iPhone and will even work offline.

Skoot complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 and, where we offer the Services to users in the European Economic Area, with the EU General Data Protection Regulation. We also comply with the applicable privacy requirements of the platform through which the application is distributed, the Apple App Store.

3. What data Skoot does not collect

It's easier to start with what isn't there. Skoot has:

• No accounts — there is nothing to sign up for, so you never give us your name or phone number. Instead, we use pseudo anonymous identifiers which reveal nothing about your identity. If you email our support addresses, we will process your email address, but only for as long as it takes to answer you.
• No advertising — We do not work with ad networks or use advertising identifiers.
• No analytics from us — we do not analyse how you use Skoot, and we do not embed behavioural analytics, attribution or advertising SDKs. The Google Maps SDKs that draw the map in the Skoot app do collect diagnostic and usage data for Google's own operation of those SDKs. We never receive this data or have access to it. See section 6.
• No location history — We do not record or keep a trail of where you drive.

4. What data Skoot does collect

4.1 Contact data

We may process your email address if you choose to contact us for support or other service-related communications. We never share email addresses with third parties for advertising purposes.

4.2 Technical identifiers

Instead of an account-based system, Skoot uses technical identifiers stored in the iCloud Keychain or PGP encryption Keychain. These identifiers are random: they contain nothing about you, and do not allow us to work out who you are. They are necessary to provide the core service.

4.3 Technical device data

We may collect and store operating system version, language/region settings, and Skoot version on support tickets that have been raised, and upon submission of reports. otherwise these are not stored.

4.4 Subscription status

We collect your Skoot Plus subscription status so that we can provide you the services that you have paid for.

4.5 Location data

Skoot processes real-time GPS location only if you authorise it, and only while the app is running. Your location may also be processed in the background, so that navigation and warnings continue to function when the app is not on your screen or when your screen is off. Camera alerts are processed entirely on device. When you request navigation, your location will be processed to provide navigation routing and real time traffic updates. Your location is only ever stored when you submit reports. Other than this, we do not store your location or build any record of your navigation activity. You can withdraw location permission at any time.

iOS — Settings > Privacy & Security > Location Services

Andriod — Settings > Location or Settings > Privacy & Security > Location

Camera alerts happens on your mobile device. Your position is compared against a camera database stored on the device. Your location is not sent anywhere for alerts to work, and no record of your movements is created.

Location leaves your device in the following situations:

• Navigation (Skoot Plus). When you request a route, the start point, destination and any waypoints are sent to our servers to calculate directions. They are processed to provide your route. Your location will also be processed during navigation to provide real time traffic on route.
• Reports. If you report a camera, the location you reported from is sent to us with the report (see section 4.6).
• Licence and usage logging. Each time you open the app, an approximate location is sent to Eifrig Media, the provider we licence speed-camera data from (see section 6).
• Search. Place search, autocomplete and reverse-geocoding are provided by third parties named in section 6.
• Map display. Skoot uses the Google Maps SDKs to render the map. The SDKs collect data of their own, which can include location data. Google's use of that data is governed by Google's privacy policy.

4.6 Community contribution data (reports)

Skoot processes the information you submit when you report a camera - the camera concerned, the reason for the report and optional details text input - together with the technical identifier of the reporting device and the time of the report, which we need in order to validate and moderate reports and to prevent abuse. The details text input is free text - please do not include personal information about yourself or others in it. We may review, moderate and delete reports.

If you report a camera that is missing from the map, or a temporary camera you have spotted, we also process the location you reported from and the related sensor readings from that moment (accuracy, altitude, speed, heading and direction of travel), the time of capture, and your Skoot and operating system version. If you choose to take photos to support a missing-camera report, we process those photos and the same location and sensor readings for each shot. This is what allows a reviewer to work out which camera you meant and which way it faces. Please avoid capturing people, number plates or anything else identifying in report photos.

Temporary camera reports are community data: the location you reported is shown on the map to other Skoot users for a limited time, and other users can vote on whether the camera is still there. Those votes are recorded with the voting device's identifier and location so we can count them and prevent abuse. Nothing shown to other users identifies you.

4.7 Connection and log data

When the app communicates with our servers, we keep logs of the IP address, the time and basic request information for each request. This allows us to operate and secure the service in addition to detecting and preventing abuse.

5. How we obtain your data

We obtain your data directly from you (camera reports and any support emails you send us), from the app itself as you use it (technical identifiers, device information, and location while the app is running), and from Apple and RevenueCat in relation to your subscription.

6. Service providers and recipients (who we share your data with)

Skoot does not sell personal data and does not share it with third parties for their own marketing. We share data only with the providers listed below, and only what those providers need in order to operate Skoot and deliver the service.

Some of these providers process data outside the European Economic Area (for example in the United States). Where that happens, the transfer is protected by an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.

We do not sell personal data. There are no other recipients.

7. Purchases

Skoot Plus is billed by Apple through your Apple Account or Google through your Play Store account. We never see your payment details. To recognise your subscription, RevenueCat (our subscription-management provider) and our servers process your purchase status keyed to your technical identifier — effectively “this identifier has an active subscription”, and nothing more.

8. Legal basis

We process your data for the following reasons:

9. Data retention & deletion

• Technical user and device identifiers — retained as long as necessary to provide maintain and secure the service, in accordance with the data minimisation principle.
• Camera reports — retained for as long as the report remains relevant to the accuracy of the camera database.
• Location — not retained. Route requests are processed to return directions, not kept as a travel history.
• Logs — Server logs, including IP addresses: retained for 30 days.
• Tax or legal obligations — as required by applicable law.

In cases of detected fraud, service abuse, or sanctions, certain technical identifiers, security evidence, and minimal logs may be retained strictly as necessary to prevent recurrence, investigate incidents, or defend claims, in accordance with applicable law and data minimization principles.

To delete on-device data, delete the app. Note that the device identifier lives in the iOS Keychain and may survive a reinstall (see section 4).

To delete server-side data (your identifiers and any camera reports and photos linked to them), open Settings > Delete My Data in the app, which erases it immediately. Temporary cameras and votes you contributed stay on the map but are detached from your identifier. You can also email support@skoot.com. Because we deliberately hold nothing that names you, we may need to work with you to locate the identifier for your device. We honour verified requests within 30 days.

10. International data transfers

Some of our providers (Google, Mapbox, Cloudflare, Inc., RevenueCat, Inc. and Apple Inc.) may process data outside the United Kingdom and the EEA. In such cases we apply appropriate safeguards, such as:

• Providers certified under the Data Privacy Framework (where applicable).
• The UK International Data Transfer Agreement or Addendum, and/or Standard Contractual Clauses approved by the European Commission, together with additional measures where required.

You can ask us for a copy of these safeguards by contacting DPO@skoot.com.

11. Privacy controls and options

• Location permission, which you can grant or withdraw at any time in iOS Settings.
• Data deletion, from Settings > Delete My Data in the app, which removes data related to you on our servers (for example: your camera reports and any report photos)
• Deleting the app, which removes everything held on your device (for example: saved places, recent destinations, settings).

Some features (for example alerts or warnings) may be available or configurable differently depending on applicable local regulations. Skoot provides options to disable specific features where required.

12. Minors

Skoot is intended exclusively for users aged 18 and over. We do not knowingly collect personal data from minors.

13. Website

skoot.com sets no cookies, runs no analytics and collects no personal data. Our hosting infrastructure may keep standard, short-lived server logs (such as requested URLs and IP addresses) to operate and secure the service.

14. User rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to DPO@skoot.com. We will respond within a maximum of one month (extendable in accordance with the UK GDPR).

Right to object: where we rely on legitimate interests, you can object to our processing of your personal data at any time. If you object, we will stop unless we have compelling legitimate grounds to continue.

If you are not satisfied with our response, you may lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EEA, you may also complain to your local supervisory authority.

Data deletion: Skoot has no accounts, so there is no profile to delete. Deleting the app removes all data held on your device. To have the data associated with your identifiers deleted from our servers, contact DPO@skoot.com.

15. Changes to this policy

We may update this Policy when necessary. If a change significantly affects your privacy, we will tell you within the App, for example with a banner or a notice on next launch. The current version is always available in the App at Settings > Privacy Policy and at https://www.skoot.com/privacy/.

16. Contact

DPO: DPO@skoot.com

Support: support@skoot.com