Privacy Policy

Last updated: 2 August 2026

Wheelstherapy ("we", "us", or "our") operates the Wheelstherapy mobile application (the "App"), a free app for discovering great driving roads and driving them together. This policy explains what data we collect, why we collect it, and your rights under applicable law including the EU General Data Protection Regulation (GDPR). We show no ads, we do not track you across other apps or websites, and we never sell your data.

1. Data Controller

The data controller responsible for your personal data is:

Wheelstherapy (Belgium)
Contact: hello@wheelstherapy.co

2. Data We Collect

Account data — when you create an account, we collect your email address and name via AWS Cognito (our authentication provider). This is necessary to provide your account.

Location data — the App uses your device's GPS to surface nearby drives and for navigation. During a live drive, and only if you take part, your precise location is shared with the other participants on that drive — including in the background, so you stay visible on the map with the screen locked. Live-drive location data is automatically deleted after the drive ends.

Photos — if you choose to upload photos (your profile picture, your cars), they are stored securely in Amazon S3. This is entirely optional.

User content — drives you join, RSVPs, comments you post, and road-camera reports you submit are stored so the App can function. This content is visible to other users.

Moderation data — if you report content or another account, we store the report (what was reported and the reason you gave) so our team can review it. If you block an account, we store that block to filter the blocked account's content from your view. Your block list is private and never shown to other users.

Usage analytics and crash data — we use PostHog (EU-hosted) to collect anonymous product events (e.g. which screens you visit) and crash reports (device model, OS version, stack trace). This helps us improve the App and fix bugs. No advertising identifiers are involved.

3. Legal Basis for Processing (GDPR)

• Contract performance — processing your account data and user content to deliver the service you signed up for (Art. 6(1)(b) GDPR).
• Legitimate interests — crash reporting and anonymous analytics to maintain and improve the App, and processing reports and blocks to keep the community safe (Art. 6(1)(f) GDPR).
• Consent — location access, which you can grant or revoke at any time in your device settings.

4. Third-Party Services

We rely on the following sub-processors. Each has its own privacy policy governing how they handle data:

• Amazon Web Services (AWS) — authentication (Cognito), database (DynamoDB), file storage (S3), and API (AppSync). Data is processed in the EU under AWS's standard contractual clauses.
• Mapbox — map rendering and navigation. Your location is transmitted to Mapbox while using the map. See mapbox.com/legal/privacy.
• PostHog — anonymous product analytics and crash reporting, hosted in the EU. See posthog.com/privacy.
• Apple (App Store) and Google (Google Play) — app distribution. See apple.com/legal/privacy and policies.google.com/privacy.

5. Data Retention and Deletion

We retain your account data and content for as long as your account is active. Live-drive location data is deleted automatically after each drive. You can permanently delete your account — including your profile, photos, cars, drives, comments, and history — at any time from within the App (Profile → Delete account). Anonymous analytics data cannot identify you and may be retained.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your personal data ("right to be forgotten"), or simply delete your account in the App.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to limit how we use your data while a dispute is resolved.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — revoke location permission at any time in your device settings.

To exercise any of these rights, contact us at hello@wheelstherapy.co. You also have the right to lodge a complaint with your local data protection authority (in Belgium: dataprotectionauthority.be).

7. Children's Privacy

The App is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us immediately.

8. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance of the revised policy.

9. Contact

Questions or requests regarding this policy:
hello@wheelstherapy.co