Biting Point Privacy Notice

1. The short version

Biting Point shares your location and your drives with the people in your family circle, and nobody else. The app runs on your phone's own sensors. There is no advertising, no analytics network, no data broker and no sale of data of any kind. Your data is stored in the United Kingdom. You can switch sharing to approximate, drives only, or paused at any time from the Me tab, and you can leave a family or delete your account whenever you like.

2. Who controls your data

Patient Thread Ltd, a company registered in England and Wales, is the data controller. Patient Thread Ltd is registered with the Information Commissioner's Office. Contact details are in section 10.

3. What the app collects

• Account: your email address, a display name you choose, and a password (stored only as a hash).
• Family circle: which family you belong to, your role (parent, driver or member), and your chosen sharing mode.
• Location: position, accuracy, speed and heading from your phone while the app is allowed to use location. In "approximate" mode or inside a Bubble the app rounds your position before it leaves the phone. In "drives only" mode nothing is sent between drives. In "paused" mode nothing is sent at all.
• Drives: start and end time, route, distance, top and average speed, and counts of harsh braking, rapid acceleration, harsh cornering and phone handling. Phone handling is detected from the motion sensors alone. The app does not read calls, messages or what you do on the phone.
• Learner records: practice sessions, conditions, supervisor name, skill levels, theory and test dates, and penalty points, all entered by you or your family.
• Places and alerts: places your family saves (such as Home), arrival and departure events, check-ins, expected-arrival rules and SOS or possible-crash alerts.
• Device: battery level, platform and app version, so the family can see whether a phone has gone flat.

Raw motion-sensor data (accelerometer and gyroscope) is processed on the phone and is not uploaded.

4. Why we collect it and the lawful basis

We process this data to provide the service you have asked for: showing your family where you are, recording drives, coaching a learner, and raising alerts. The lawful basis under UK GDPR is the performance of a contract with you (Article 6(1)(b)) and, for optional features you switch on, your consent (Article 6(1)(a)), which you can withdraw by changing the setting. We do not use your data for profiling, advertising or any automated decision with legal effect.

5. Who can see it

Only members of your family circle, which is limited to people who hold your invite code. Our database enforces this with row-level security so that each family's data is ringfenced. Patient Thread Ltd staff do not look at family data except to fix a fault you have reported, and only with your agreement.

Processors we rely on: Supabase (database hosting, London region), and OpenStreetMap tile servers, which receive only the map area your screen is showing, not your identity. Reverse geocoding of a drive's start and end uses the OpenStreetMap Nominatim service and sends only the coordinates.

6. Young people

The app is designed for families with a learner or new driver, who in the UK is at least 17. Anyone who is 13 or over may hold their own account under UK data protection law. A young person is a data subject in their own right: they choose their own sharing mode, they see their own drive scores first, and their parent cannot read their location when sharing is paused. We ask parents to agree the settings with the young person rather than impose them.

7. Where it is stored and for how long

All data is stored in the United Kingdom (Supabase, London). Location history is kept for 90 days and then deleted automatically. Drives, practice records and alerts are kept while your account exists so the learner log stays complete. When you delete your account, everything linked to it is deleted within 30 days, apart from records we must keep for legal reasons.

8. What we never do

• Sell, rent or share your data with data brokers, insurers or advertisers.
• Embed third-party advertising or analytics software in the app.
• Read your messages, calls, contacts or other apps.
• Share location outside the family circle, except with the emergency services if you ask us to in an emergency.

9. Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to its processing, and move it elsewhere. Drives can be exported from the app. To exercise any right, email us at the address below. You can also complain to the Information Commissioner's Office at ico.org.uk.

10. Contact

Patient Thread Ltd
Email: chris@patientthread.com

This notice will be updated before the app is released publicly. The version number at the top will change when it does.