1. Who We Are
Dashoo is operated by GW Digital ("we", "us", "our"). We are the data controller responsible for your personal data. If you have questions about this policy or wish to exercise your rights, contact us at:
Email: support@gwdigital.solutions
Support: support@gwdigital.solutions
2. What Data We Collect
| Category | Data | Purpose | Legal Basis (GDPR/UK GDPR) |
|---|---|---|---|
| Account | Email, name, auth provider | Account creation and authentication | Contract performance |
| Location | Precise GPS coordinates | Speed/location overlays on recordings | Consent |
| Media | Video/audio recordings | Core dashcam functionality | Contract performance |
| Device | Model, OS version, accelerometer | Crash detection, compatibility | Legitimate interest |
| Usage | App interactions (anonymised) | Improve app stability | Legitimate interest |
| Subscription | Purchase history, tier | Manage access to features | Contract performance |
| Advertising ID | Device ad identifier (free tier only) | Serve relevant ads | Consent |
3. How We Use Your Data
- Provide and maintain the dashcam recording service
- Process subscriptions and manage your account
- Detect crashes and protect critical footage
- Sync recordings to cloud storage (Pro users only, with your consent)
- Display advertisements (free tier only)
- Send service-critical notifications (e.g. subscription expiry)
- Improve app performance through anonymised analytics
4. Third-Party Services
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| AWS (Amazon Web Services) | Authentication, cloud storage, backend | Account data, encrypted videos (Pro) | EU (Ireland) |
| RevenueCat | Subscription management | User ID, purchase events | USA |
| Google AdMob | Advertising (free tier) | Advertising ID, device info | USA |
| Google Maps | Location display | GPS coordinates | USA |
| Apple / Google | Payment processing | Payment handled by store | USA / Ireland |
Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions as appropriate.
5. Data Retention
- Recordings: Stored locally on your device. Cloud backups (Pro) are retained for 7 days from the date of upload, after which they are automatically and permanently deleted from our servers. You can delete cloud backups at any time from within the app.
- Account data: Retained while your account is active. Deleted within 30 days of account closure.
- Crash reports: Retained for 12 months for debugging purposes, then automatically deleted.
- Analytics: Anonymised data retained for up to 24 months.
6. Your Rights
All Users
- Access your personal data
- Correct inaccurate data
- Delete your account and associated data, see how to delete your account
- Withdraw consent at any time
EU/EEA & UK Residents (GDPR / UK GDPR)
- Right to data portability
- Right to restrict processing
- Right to object to processing based on legitimate interest
- Right to lodge a complaint with your supervisory authority (UK: ICO at ico.org.uk)
California Residents (CCPA/CPRA)
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt-out of the sale or sharing of personal information
- Right to non-discrimination for exercising your rights
- We do not sell your personal information.
Canadian Residents (PIPEDA)
- Right to access your personal information held by us
- Right to challenge the accuracy and completeness of your data
- Right to withdraw consent (subject to legal or contractual restrictions)
Australian Residents (Privacy Act 1988)
- Right to access and correct your personal information
- Right to complain to the Office of the Australian Information Commissioner (OAIC)
- We will not disclose your personal information to overseas recipients without your consent or appropriate safeguards
New Zealand Residents (Privacy Act 2020)
- Right to access and correct your personal information
- Right to complain to the Office of the Privacy Commissioner
7. Children's Privacy
Dashoo is not intended for use by anyone under the age of 17. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
8. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- AWS Cognito for secure authentication
- Access controls and audit logging
- Regular security reviews
9. Automated Decision-Making
We do not use your personal data for automated decision-making or profiling that produces legal effects.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via the app or email. Continued use after changes constitutes acceptance.
11. Contact & Complaints
For privacy enquiries: support@gwdigital.solutions
UK supervisory authority: Information Commissioner's Office (ICO), ico.org.uk
EU supervisory authority: Contact your local Data Protection Authority
Australia: Office of the Australian Information Commissioner, oaic.gov.au
New Zealand: Office of the Privacy Commissioner, privacy.org.nz