Privacy Policy

Effective October 18, 2026

GoDash is made by one independent developer, Matthew Saunders. In this policy, “I,” “me” and “my” mean me, and “the app” means GoDash. By using the app, you agree to this policy.

1. What the app accesses and why

• Camera and microphone. The app uses your camera, and optionally your microphone, to record looping dash cam video and audio. Recordings are stored only on your device. I don’t receive, upload or have any access to them. A clip leaves your device only if you share it (see sections 2 and 6).
• Location. With your permission, the app uses your location while you’re using it for navigation, voice guidance, the speed, heading and trip data in the telemetry module, and finding places near you or along your route. Location is processed on your device. When you search for a place or ask for directions, your search and the start and end of the route are sent to Apple’s Maps service to return results, and Apple handles them. Your location is shared with other people only through the optional features in section 2, and only when you turn them on.
• Motion and Fitness. The app uses your device’s motion sensors to calculate the g-force readings in the telemetry module, to detect a hard brake or a crash if you turn those on (and, if you choose, to alert your groups; see section 2), and, if you choose, to overlay that data onto your saved clips. This is processed on your device.
• Photos. If you export a clip, the app adds that video to your photo library. It only writes clips you choose to export. If you add a profile photo, you pick it with Apple’s photo picker, which gives the app only the photo you choose. The app does not read or scan the rest of your photos.
• Maps data on your device. Your favorites, recent destinations, Home and Work, where you parked and your map settings are stored only on your device.
• Apple Music. If you use the music module, the app uses Apple’s MusicKit to show your library, recommendations and charts and to play music. Access to your Apple Music account and library is handled by Apple. Playing full tracks requires an Apple Music subscription. Pinned items are stored on your device.
• Podcasts. Searching and browsing use Apple’s public podcast directory. When you open a show, the app loads its feed and streams or downloads episodes, chapters and transcripts directly from that podcast’s host, which can see your IP address like any website. Your subscriptions, downloads, saved episodes and playback settings are stored on your device and never sent to me.
• Notifications. If you allow them, the app sends notifications about friend requests, group invitations, shared clips, group trips, stops on a trip, and crash and hard-brake alerts from your groups, including when GoDash is closed. Each kind can be turned off in Settings. They’re delivered through Apple’s Push Notification service, which Apple runs.
• Sign in with Apple. Signing in is optional, and the app records and saves clips either way. If you sign in, the name and email you share through Sign in with Apple are stored on your device, in the iOS Keychain, to show your profile. You can hide your email with Apple’s private relay. Your email is never sent to any server of mine and is never shown to other users. If you also reserve a username, the name on your GoDash profile is shown next to it (see section 2).
• GoDash Pro. Pro is a one-time purchase processed by Apple through the App Store. I never see or receive your payment details. Apple tells the app whether you’ve bought Pro so it can unlock Pro features. Pro earned through an invite is described in section 2.
• Diagnostics. Errors may be logged to your device’s console to help with debugging. The app has no third-party crash reporting or analytics, and these logs are not sent to me.

2. Groups, friends and iCloud

GoDash’s Groups features (a username and profile, friends, groups, shared clips and group trips) are optional. They need you to be signed in to iCloud. They’re stored with Apple’s CloudKit service in the app’s iCloud container. To tell your phone apart from others, the app uses an anonymous identifier that CloudKit gives it for your iCloud account. That identifier doesn’t reveal your Apple Account email, name or phone number, and the app never reads your contacts.

• Your username and profile. If you reserve a username, it’s stored in the app’s public iCloud database with your anonymous identifier, an avatar color and the date you joined. Your profile starts as just your username. Anyone using GoDash can look up your username and view your profile, and it’s how friends find you and how your invite code works.
• Pro profile extras. With Pro, you can add a photo (a small square copy of the one you pick) and a short bio to your profile, and turn on your name (the one on your GoDash profile), a checkmark, the total miles you’ve driven with GoDash open, how many clips you’ve saved and the date you joined. Each of these is off until you turn it on in Edit Profile. Miles and clips are counted on your phone, and only the two totals are uploaded, never where you drove. Your name and the totals are only uploaded while they’re turned on.
• Featured clips. With Pro, you can feature up to three clips on your profile. Each is a trimmed copy of up to 30 seconds, with or without its sound, uploaded to the public database without encryption so anyone using GoDash can watch it once you turn Featured Clips on. Removing a featured clip deletes it.
• Friends and blocking. Friend requests, friendships and blocks are stored as small records in the same public database, holding only the two anonymous identifiers involved and the request’s status. You can remove a friend or block someone at any time, from their profile or your lists. Blocked users can’t send you requests, see you on the map or share with you, and the app doesn’t show them your profile. Their clips, reactions and alerts are hidden from you.
• Sharing your drives. If you turn on “Share My Drives with Friends,” the app shares your position, direction and speed with your friends while you’re driving with GoDash open. It never shares while you’re parked or when the app is closed. Only one record is kept, overwritten as you drive and deleted when you stop sharing or close the app. Friends don’t see a position older than two minutes.
• Groups. A group of up to 12 people is stored in the iCloud account of the person who created it and shared with its members using Apple’s iCloud sharing. Its name, member list, trips, emoji reactions and the keys to its shared clips are visible only to the group’s members. They aren’t visible to me or anyone else. Groups have no text messaging.
• Shared clips. When you share a clip with a group, a short trimmed copy (with or without its sound) is encrypted on your phone before it’s uploaded. The key to unlock it is kept inside the group, so only the group’s members can play it. The encrypted file itself is stored in the app’s public iCloud database because it’s too big for most people’s iCloud storage, but without the key it can’t be watched, by me or by anyone outside the group.
• Shared trips. If you join a trip with your group, the trip’s destination, route and stops, and your position, direction and estimated arrival, are shared with the group’s members while the trip is under way. Adding a stop notifies the others. Your position stops being shared when you leave the trip or it ends, and trip positions are deleted when the trip ends.
• Crash and hard-brake alerts. If your crash or hard-brake detection goes off and “Send Crash Alerts to Groups” is on, each of your groups gets an alert. The exact spot is stored only inside the group, for its members to see on the map. The notification each member receives names only the place, to the street and town, which Apple’s geocoding service works out from the spot. Turn this off in Settings at any time.
• Invites and Pro rewards. Your invite code is your username. If you enter a friend’s code, a record linking your anonymous identifier to theirs is stored in the public database. A week later, if you’re still using GoDash, two records grant you both Pro for a set time. To check that you’re a new user, the app asks the App Store, on your device, when your Apple Account first downloaded GoDash. That date isn’t sent anywhere.
• Notifications for groups. So members hear about a new clip, a trip or a crash alert while GoDash is closed, the app writes a short record for each of them, like “@matt shared a clip” or “@matt’s GoDash detected a possible crash at Main St, Annapolis”. It names only the sender and, for an alert, the street and town. The sender’s app deletes it after about an hour.
• Reporting. You can report a user or a shared clip. A report includes the reported clip (and the key to open it), the usernames involved and your reason, and it’s sent to me so I can review it. A reported clip is hidden for you right away. I review reports and act on them, which can include removing content and removing users who break the rules.

3. What I can see

I can see the records in the app’s public iCloud database through Apple’s CloudKit tools, as can Apple: usernames and profiles (including any name, photo, bio, totals and featured clips you’ve chosen to show), the anonymous identifiers in friend, invite and Pro records, the short group notification records (which, for a crash or hard-brake alert, name a street and town), any position currently being shared, reports, and encrypted clip files that I can’t open. I use this only to run the features, to review reports and to fix problems. I can’t see group names, member lists, trips, reactions, the exact spot of a crash alert or the keys to shared clips, because they live in your and your group members’ own iCloud accounts. I can’t see anything stored only on your device, including your recordings.

4. What I don’t collect

• I don’t collect, store or sell your dash cam footage or telemetry. A clip leaves your device only when you share it with a group, in encrypted form, or feature it on your profile.
• I don’t keep a history of where you’ve driven. Shared positions are overwritten as you drive and deleted when sharing ends, and miles driven are kept only as a total.
• I don’t use advertising identifiers (IDFA) or ad networks.
• I don’t use third-party analytics or tracking SDKs.
• I don’t track you across other apps or websites.
• I don’t read your contacts.

5. Storage and retention

Clips, telemetry, settings, map places and account details are stored on your device. Clips are excluded from iCloud backup by default. Groups data is kept in iCloud only for as long as it’s needed:

• Delete individual clips, or all of them, in the app. The free tier automatically removes the oldest clips beyond its limit.
• A shared drive position is deleted when you stop sharing or close the app. Trip positions are deleted when the trip ends.
• Shared clips stay in a group until the person who shared them deletes them or the group is deleted. Leaving a group removes your access to it.
• Group notification records are deleted by the sender’s app after about an hour.
• Your username, profile, featured clips, friends and invite record stay until you change or delete them (see section 6).
• Emoji reactions stay in a group until you take them back or the group is deleted.
• Reports are kept for as long as I need them to review the report and keep the community safe.
• Deleting the app removes its data from your device. Groups data in iCloud stays until you delete it in the app first, or ask me to delete it.

6. Deleting your data

• Delete Username in Settings, or Delete Account in Profile, deletes your username and profile (with its photo, bio and totals), your featured clips, your side of every friendship and block, any position you’re sharing, the invite code you entered and your own Pro grant. It also deletes the groups you created (for everyone in them), and the clips, alerts, reactions and trip data you’ve shared in other people’s groups. After that, anyone can take the username.
• Pro a friend has already earned from your invite stays theirs. That record holds only anonymous identifiers.
• If you can’t use the app to delete your data, email me and I’ll delete it within 30 days.

7. Apple services

The app relies on Apple services: MapKit and Core Location (maps, search, directions, Look Around, and naming the place in a crash alert), the photo picker, MusicKit (Apple Music), Apple’s podcast directory (podcast search), CloudKit and iCloud (Groups), the Apple Push Notification service, Sign in with Apple, and StoreKit (the App Store). Information handled by these services is covered by Apple’s Privacy Policy.

8. Sharing

I don’t sell, rent or share your personal information with anyone. What other GoDash users can see is only what you choose to share with them through Groups. If you share a clip, a route or your arrival time with the system share button, it goes to whichever app or person you pick.

9. Children

The app is not directed to children under 13, and I don’t knowingly collect personal information from children. You must be at least 13, or the minimum age in your country if that’s higher, to use Groups.

10. Your choices

• Grant or revoke camera, microphone, location, motion, photos, Apple Music and notification permissions at any time in the iOS Settings app.
• Use GoDash without Groups. Recording, clips, maps, music and podcasts all work without a username.
• Turn “Share My Drives with Friends” and “Send Crash Alerts to Groups” on or off, leave a group or a trip, remove friends and block people at any time.
• With Pro, choose what your profile shows in Edit Profile (it starts as just your username), and turn each kind of notification on or off in Settings.
• Delete your clips, your username and Groups data, and your GoDash profile in the app.
• Restore your Pro purchase from the app on any device signed in to the same Apple Account.

11. Changes to this policy

I may update this policy from time to time. When I do, I’ll change the effective date above and post the new version at this address.

12. Contact

Questions about this policy or your privacy, or a request to delete your data? Email me at matt.saunders.963@gmail.com.