We do collect data — and we use it for marketing

• Account details: email address, sign-in credentials handled by our authentication provider, and your display name.
• Reports you submit: the item you tag (speed trap, hazard, closure and the other categories), the pin location you place, your notes, and the time.
• Photos you attach to a report — up to three per item. Each photo gets a one-way fingerprint so the same image cannot be reused for another reward.
• Business details if you open a business account: company name, contact details, billing information handled by our payment processor, and the advert areas and schedules you set.
• Advert creatives you upload: wording, artwork, logos, audio and video.
• Support messages, appeals and privacy requests you send us.

• Location: GPS points sent from the iPhone, Android and car-screen apps during a Reward Trip, and your current position while the live map or car view is open.
• Trip data derived from those points on our servers: verified miles, speed, route confidence and validity checks. Your device never tells us what you earned — we calculate it.
• Pass-by events: when you drive past a catalogued business or roadside place (fuel, food, rest stops and similar) we may record the place, the time, how close you came and how long you lingered. This is stored under a pseudonym that rotates daily, with no account, trip, route or coordinate attached. It is off by default and only happens if you turn on 'Count the places I pass'.
• Advertising events: which adverts were shown to you, whether a view completed, and taps — used for billing advertisers and for reporting.
• Device and integrity signals: device identifiers, app version, platform, and anti-fraud signals such as mock-location flags and duplicate-device checks.
• Reward, wallet and compounding activity: points issued, locked terms, payouts and the audit trail behind them.

• Running the network: verifying reports, scoring evidence confidence, publishing road intelligence on the map.
• Paying you: calculating verified miles and reward points, running approval and fraud checks, compounding terms and payouts.
• Marketing and advertising: choosing which advert to show on the map, the reward screen, trip start and end, the car screen and as audio during Reward Trips; matching adverts to the area you are driving in; pacing how often you see each campaign.
• Advertiser and business reporting: impressions, completed views, taps, budget spent, and aggregate audience figures for the areas and stores they care about.
• Aggregate data products: counts and trends we license to businesses and agencies, for example how many drivers passed a given chain or one specific address, the busiest hours, and how often a pass became a stop.
• Safety, fraud prevention, moderation of reports and photos, and meeting legal obligations.

Reports and photos are reviewed automatically before they are published or rewarded. An AI model scores confidence, checks the photo matches the claim, and flags anything that looks like a privacy risk (for example a readable face or number plate). High-confidence, clean submissions are approved automatically; the rest are escalated to a human reviewer. You can appeal any decision.

To be completely clear: we never sell your account details — your name, email address, sign-in details, phone, device ID or payment information are not for sale, not licensed, and not handed to advertisers or data buyers. We do sell the road data you collect. The reports you tag, the miles you drive and the places you pass are pooled with everybody else's and sold to businesses and agencies as counts and trends. That revenue is what pays your rewards.

What a buyer receives is a number, not a person — “12,000 drivers passed this store last month, busiest between 11am and 1pm.” They cannot see who you are, where you live, where you went before or after, or that any particular pass was yours.

• Never sold or shared: your name, email, account ID, device ID, payment details, GPS coordinates, routes, individual trips, or movement history.
• Sold as aggregates: counts of drivers, distinct daily audience, pass-to-stop rates, busiest hours and days, for a chain or one specific address.
• Sold as road intelligence: the verified items drivers report — hazards, closures, speed traps and the rest — with no link to the person who reported them.
• Figures below a minimum audience size are withheld entirely so a small number of people cannot be singled out.
• You can switch off 'Aggregate data products' and 'Count the places I pass' in the Privacy Centre at any time.

We use service providers to run FlockNix: cloud hosting and database, authentication, payment and subscription processing, email delivery, mapping and road-detection data, AI evidence review, and blockchain infrastructure for reward token transfers. They act on our instructions and only receive what their job requires.

• Consent switches for network participation, Reward Trip mode, audible advertising, region-based ad relevance, photo contributions, pass-by counting and aggregate data products — each can be withdrawn at any time.
• Withdrawing ad-relevance consent does not reduce your rewards.
• Download everything we hold about you as a file, or request a formal export.
• Request deletion: your profile, devices, trips, raw location samples and personal report links are removed. Community-verified road objects stay in the network with no link to you.

All of these live in your Privacy Centre, and the same switches appear in the iPhone and Android apps.

Raw location samples are kept only as long as needed to verify trips, settle rewards and investigate fraud, then removed. Aggregate and de-identified figures, and records we must keep for accounting, tax and legal reasons, are kept longer.

Everything the iPhone app, the Android app, the car screen and this website send us travels over an encrypted connection (HTTPS/TLS) — location samples, photos, sign-in tokens and pass-by counts included. We refuse any request that arrives unencrypted, and we tell your device to use the encrypted address only. On top of that, the personal details we hold — the contact details and messages on support and deletion requests, the identifiers of the phones linked to your account, and the service keys our staff store — are encrypted in our database, so they cannot be read from the stored data itself. They are unlocked only inside our own servers, for the one request that needs them. Your photos are kept in private storage reachable only through short-lived links, partner and business keys are stored as one-way hashes, and each account can only reach its own rows.

FlockNix is not intended for anyone under 18 and we do not knowingly collect their data.

Material changes are published here and in the legal centre, where every versioned agreement is listed with its effective date. Contribution and reward modes require accepting their specific agreement before any collection begins. For privacy questions or to exercise any right above, use the Privacy Centre or contact us through the support channel in the app.