Privacy Policy
Last updated: October 20, 2026
DriveHub is an app for drivers and riders (iPhone and Android) with a website at drivehubautos.com. It is operated by Cartehub eCommerce Ltd, Charles Ifeanyi Street, Lekki Phase 1, Lagos, Nigeria ("we", "us"). We decide how your data is used. Questions or requests: drivehubautos@drivehubautos.com.
We wrote this in plain language. The short version:
- Most of what DriveHub records (your trips, car readings, dashcam clips) stays on your device. On iPhone it can also sync to your own iCloud.
- A DriveHub account is optional. Without one, we hold almost nothing about you.
- If you turn on automatic alerts, we hold your emergency contacts' numbers so we can text them, and only for as long as they are your contacts.
- We do not sell your data and we show no ads.
1. What we collect, why, and where it is kept
| Data | Why | Where it is kept | How long |
|---|---|---|---|
| Precise location | Navigation, trips, sharing your position in an SOS | Your device (iPhone: also your iCloud). Sent to Mapbox for maps and routes. Sent in an alert only when you trigger one. | Until you delete it |
| Approximate location | Nearby places, regional features, analytics (Firebase works out a rough city or country from your network address) | Sent to the services in section 5 | Not kept by us as a history |
| Car readings and fault codes | Live dashboard, trip scores, diagnostics | Your device (iPhone: also iCloud; Android: on-device database, exportable) | Until you delete it |
| Dashcam video and audio | Loop recording and crash evidence | Your device only. Never uploaded. | Loops and overwrites; protected clips until you delete them |
| Motion sensor data | Crash detection, lean angle | Processed on your device | Not stored beyond the moment |
| Questions to DriveHub AI, plus the vehicle, trip and personal-best details the app adds to give a useful answer | Answering you | Passed through our server to Anthropic; also stored on your device (iPhone: also iCloud) | Our server does not store them |
| Voice questions | Turning speech into text | iPhone: Apple's speech recognition. Android: Google's. The audio is processed by them, not by us. | Under their policies |
| Place searches (your words and position) | Finding places, "navigate to", car display search | Our server, then Google Places | Our server's access log keeps the request for up to 14 days (see section 9). Newer app versions send the words and position in the request body, not in the web address. |
| Vehicle Identification Number (VIN) | Decoding make, model, year | Sent to NHTSA's public database | Not kept by us |
| Purchase status | Unlocking Pro | Apple (StoreKit) or Google Play Billing. We receive only the purchase status, never payment details. | While the subscription exists |
| App usage and crash reports | Understanding features used, fixing crashes | Firebase Analytics and Crashlytics (Google) | Firebase's retention setting, which we keep at 2 months |
| Your language (English, Spanish or Portuguese) | Usage statistics by language | Firebase | As above |
2. Your DriveHub account (optional)
If you create an account or sign in with Google or Apple to sync across devices or manage your subscription, we hold:
- your email address, name, and (for email accounts) a password stored only as a secure hash; for Google or Apple sign-in, the provider's id for you and your email. We do not store their access tokens;
- your subscription record (plan, store, transaction id, trial and renewal dates), which Apple or Google tell us about;
- devices you sign in on (device name, platform, app version, push notification token, last seen) and vehicles you add (nickname, make, model, year, type);
- messages you send us through the contact form (name, email, subject, message) and, if you join the adapter waitlist, your email.
We use this to run your account, give you the features you paid for, answer you and send password-reset emails. The reset emails are sent through Zoho Mail. Passwords are never emailed and are not visible to us. Account data is kept while the account exists. Support messages are deleted after 12 months and waitlist emails after 24 months (or when you ask); expired or used password-reset tokens are deleted after 7 days.
Delete it any time: Account → Delete Account in the app, or follow the steps on our Delete your account & data page. Deleting your account deletes the data in this section.
3. Emergency contacts and automatic alerts
Emergency contacts are optional. You can type a number or pick one contact from your phone's contacts. We never read your address book in the background, and we only receive the contact you choose.
Automatic alerts are also optional. When you add a contact, DriveHub sends their phone number, the name you gave them and your display name (if you set one) to our server. The server texts them once to ask whether they agree to receive your alerts. They tap Accept or Decline on a web page, and only contacts who accept can be alerted. When you press SOS, or a crash alert is not cancelled, our server texts accepted contacts your name and a link to your location. We do not store the text of any message or your coordinates.
How long we keep it: a contact's number stays on our server only while they are your contact. Deleting the contact in the app deletes it from our server. An invitation nobody answers expires after 30 days and the number is removed. If a contact declines or replies STOP, we block further invitations to that number for 90 days and keep only an irreversible fingerprint of it. Short technical logs (your device id, counts and times, never the text) are kept up to 90 days to prevent abuse. Data for a device not used for a year is deleted.
Texts are sent through Twilio, which acts for us and keeps its own delivery records under its own rules. Texts may carry the sender name "DriveHub" or a phone number. A person who gets a text can stop it: reply STOP when the text comes from a number, or use the link in the invitation. If an automatic text cannot be sent, DriveHub opens your message app so you can send it yourself. Availability differs by country, and automatic alerts are not yet available for numbers in the United States.
4. What we do not do
- We do not sell your data or share it with data brokers, and the apps show no ads.
- We do not use the advertising identifier (IDFA or Android advertising id) and do not track you across other companies' apps or websites.
- We do not read your address book in the background, and we do not request Health data.
- We do not upload dashcam recordings.
5. Who processes data for us
These companies process data only to provide the feature described. They act under their own terms and privacy policies.
| Company | What it does for DriveHub | What it receives |
|---|---|---|
| Anthropic (privacy) | Answers DriveHub AI questions | Your question and the vehicle, trip and personal-best details the app adds |
| Google (Firebase, Places, Play Billing, speech on Android) (privacy) | Analytics, crash reports, place search, Android purchases, voice input | Usage events and crash data; search words and position; purchase status |
| Mapbox (privacy) | Maps and routes | Your location and destination |
| Apple (iCloud, StoreKit, speech recognition) (privacy) | iPhone sync, purchases, voice input | Your synced data (private to you), purchase status, spoken audio |
| Twilio (privacy) | Sends the invitation and alert texts | The recipient's number and the text (your name and a location link) |
| Zoho (privacy) | Sends password-reset emails | The email address and message |
| GoDaddy, United States (privacy) | Runs our server and database | Everything in sections 2 and 3 and the server logs |
| NHTSA (US government) | Public recall and VIN lookups | Make, model, year, or the VIN, with no personal data |
On iPhone, your trips, vehicles, settings and purchase records sync through your personal iCloud account, encrypted by Apple (end-to-end if you turn on Advanced Data Protection). We never see this data: it is stored in your private CloudKit container, not on servers we control.
6. Where your data goes
Our server and database are in the United States. Anthropic, Google, Mapbox, Twilio, Zoho and Apple process data in the United States and other countries. Where the law requires a safeguard for a transfer, we rely on the mechanisms those companies offer (for example standard contractual clauses) or on your consent.
7. On what basis we use your data
- To provide the service you asked for (the app, your account, purchases, alerts you set up): needed to perform our agreement with you.
- Your consent: location, microphone, camera, Bluetooth and notifications (you can withdraw it any time in your phone's settings), and the contact's acceptance before we text them.
- Our legitimate interests: keeping the service secure, preventing abuse, and measuring and fixing the app. You can object.
- Legal obligations, when the law requires us to keep or disclose something.
8. Website and cookies
The website uses one cookie, dh_token, only after you sign in, to keep you signed in. It is strictly necessary. We run no advertising or analytics cookies. The website's text fonts are served from our own server, not from Google.
9. Server logs and security
Our server keeps technical logs (IP address, time, the address requested) to run and protect the service, for up to 14 days. Data travels over HTTPS, and passwords are stored as bcrypt hashes. If a security incident puts your personal data at risk, we will tell you and the authorities where the law requires.
10. Your rights
Depending on where you live you have the right to know what we hold, get a copy, correct it, delete it, restrict or object to its use, take it with you, withdraw consent, and complain to your data protection authority (for example the Nigeria Data Protection Commission, Brazil's ANPD, the UK ICO, your national authority in the EU, or Canada's Office of the Privacy Commissioner). We answer within 15 days. To use a right, email drivehubautos@drivehubautos.com from the address on your account, or use the in-app Feedback form under Settings → Help & Support. You can delete your account yourself in the app. We may ask you to prove it is you.
11. Children
DriveHub is not directed at children under 13 (or under the higher age your country sets) and we do not knowingly collect their data. If you believe a child has given us data, tell us and we will delete it.
12. Changes
If we change this policy materially we will update the date above and, where the law requires, tell you in the app.
13. Contact
Cartehub eCommerce Ltd, Charles Ifeanyi Street, Lekki Phase 1, Lagos, Nigeria. Email drivehubautos@drivehubautos.com.