App Privacy

Your data, in plain sight.

What the app collects, where a photo goes when you take the shot, who else touches it, and how to leave with everything deleted. Written to be read, not to be survived.

Last updated: 1 September 2026
№ 01The short version

Seven lines, no spin.

  • You sign in with an email address, or with Apple or Google. That is the account.
  • When you take the shot, the photo goes to our servers, where our identification system works out the car and builds your sticker.
  • A spot can carry a city label and coarse coordinates — where you spotted it, not a trail of you.
  • There are no ads inside the app. We do measure which ad campaigns bring new players, using your device's advertising ID — and Android lets you delete that ID, which stops it.
  • Spots are social. On a public account the photo behind a spot, and where it was found, may be shown to other players or featured in the app. One setting switches that off.
  • We never sell your data.
  • Deleting your account removes it, your Garage and your spots, after a 14-day grace period.
the long version below says the same thing, slower
№ 02What we collect

The complete list.

  • Account details. An email address, and a password if you make one. Signing in with Apple or Google gives us the identifier and the email address they release — if you use Apple's Hide My Email, we only ever see the relay address.
  • Your profile. A handle, and a profile picture if you upload one. Both are public.
  • The photos you take. Spotting a car means photographing it. The photo is uploaded and processed so the game can identify the car — № 04 charts the whole journey.
  • Depth data from the camera. On phones that can produce it, we read the depth of the scene at the moment of capture to confirm you are photographing a real car and not a screen or a photograph. It is used for that check and is not kept as an image.
  • What the game builds. The sticker, specs, value, catalog number, rarity tier, the one-line quip, and the Garage that holds them.
  • Where a spot happened. If you allow location, a spot carries the city name and coarse coordinates, used to place it on your card and to rank you locally.
  • Social connections. Who you follow and who follows you.
  • Subscription status. Whether VIP Pass is active. Google Play handles the purchase itself. We never see your card details.
  • Device and diagnostic data. Device model, OS version, app version, a push notification token if you allow notifications, and error logs when something breaks.
  • Marketing attribution. Only with your permission — see № 06.
№ 03Permissions

What the app asks for.

Every one of these is optional except the camera, and each is asked for in context:

  • Camera — required. The entire game is pointing it at cars, and it is how you scan another player's QR code. Refuse it and there is not much game left.
  • Location (while using the app) — optional. Stamps a spot with where you found it and powers your city's scoreboard. Refuse it and spots simply carry no place.
  • Notifications — optional. Used for things that happened to you: a rival passing you, a spot finishing. Refuse it and nothing else changes.
  • Photo library — optional. Only when you choose a profile picture, or save a sticker image to your Photos.

Changed your mind about any of them? Android Settings → Apps → Blindspot → Permissions, at any time. (Ad measurement has its own control — see № 06.)

№ 04Where a photo goes

The shot, start to finish.

This is the part that matters most, so here it is step by step:

  1. On your phone first. Your phone checks there is a car in the frame and, where the hardware can, reads the depth of the scene to confirm it is a real object and not a picture of one. That step never leaves the device.
  2. The upload. The photo travels to our servers over a secure, single-purpose link.
  3. The identification. Our identification system reads the photo and works out the exact car. The sticker, the specs, the value and the line written about it all come from that.
  4. The Garage. The finished sticker and its details are saved to your account.

So, plainly: every car photo you take is read by our identification system. That is not a side effect — it is the whole game. Your photos run that loop, and they may also be shown to other players and featured inside the app — № 07 sets out exactly where. They are not used to advertise to you, they are not sold, and they are not licensed to anyone outside Blindspot.

People look at them too, in one situation. When we are investigating suspected cheating, our staff may review the photographs on an account — and that is the one thing a private account does not hide, because the alternative is that private becomes the place cheating goes. It is not browsing: it happens when something has been flagged for review.

№ 05Who processes it

Where it lives, who touches it.

Your data goes to the service providers that make the app work, and to no one else:

  • Cloud hosting and storage — runs our servers and holds your photos, stickers and Garage.
  • An identity provider — holds your sign-in details and signs you in.
  • A service provider — processes photos.
  • A messaging provider — delivers push notifications, if you allow them.
  • Google — processes every payment through Google Play. We receive only whether a subscription is active.
  • A subscriptions provider — reconciles that status between Google Play and your account.
  • An attribution provider — measures ad campaigns, and only with your permission (№ 06).

We name the categories rather than the companies, because the specific vendors are part of how the app is built and they change as it grows. If you want the current list by name — as a regulator, or simply because you would like to know — ask us and we will send it.

Transfers happen over HTTPS, and a photo travels on a secure, single-purpose signed link. Beyond these processors your information goes nowhere: nothing is sold, and no data goes to advertisers or data brokers.

№ 06Advertising and tracking

No ads inside. One honest exception.

Blindspot shows you no advertising. There are no ad SDKs in the app and no ad networks receive anything about you.

We do advertise Blindspot elsewhere, and we measure which campaigns work. An attribution provider reports that an install came from a particular campaign, using your device's Google advertising ID — the identifier Android provides for exactly this purpose. Attribution data means the campaign, the install and basic app events; it is shared with our attribution provider and the ad network the install came from, and with no one else.

  • Android puts you in charge of the identifier. Delete your advertising ID in Android Settings → Privacy → Ads and it is gone — apps receive a string of zeros and no ad measurement can follow you. You can also reset it there at any time.
  • Where the law where you live requires consent for this measurement, we ask for it before any of it happens.

Either way it changes nothing in the game: your Garage, your ranks and what you see are identical.

Why say this so loudly: "no ads" and "measures ad campaigns" sound contradictory until someone explains the difference. Both are true, and you deserve to know which is which.
№ 07What players see

Public by design.

Blindspot is played in public, so some of it is public on purpose:

  • Your handle and profile picture.
  • Your standing. Your Garage value and rank can appear on local and global boards.
  • Your profile via QR. Anyone who scans your code can open your profile.
  • What you choose to share. A shared spot can include its city label. A share link works for anyone who has it.
  • The photo behind a spot. On a public account, the source photograph a spot was made from may be shown with it — to players who follow you, to anyone who opens your profile, and to anyone holding a share link. Some of it may be shown for a limited time and then stop being shown. Photograph cars, not people.
  • A spot chosen as a feature. A public spot and its source photo may be placed somewhere prominent in the app. Private accounts are never featured.
  • Where a spot was found. A shared spot already carries its city label. In a future version the location attached to a spot may be shown to other players alongside it — at the same coarseness we store, which is a place, not a pin on your door.

You choose which of this applies. Every account is public or private. Public means other players can see your spots and they can be featured; private means nobody else sees them and they are never featured. It is one setting, you can change it whenever you like, and it takes effect from the moment you do — it cannot un-show a photo somebody has already seen.

The photo and the feature surfaces are not built yet. They are written here because they change what "public" means for a photo you have already taken, and finding that out afterwards is not a fair way to learn it.

Your email address and your subscription status are never shown to other players.

№ 08Retention

How long we keep it.

  • Your account and Garage — for as long as the account exists.
  • Uploaded photos — kept while the spot exists, because the sticker is derived from them and we need to be able to correct a bad identification.
  • Diagnostic logs — up to 90 days, then deleted automatically.
  • Deleted accounts — recoverable for 14 days, then removed. See № 10.
  • Backups. Deleting data removes it from the live systems immediately. Encrypted backups rotate on a schedule, and any residual copy is purged within 30 days. Restoring a backup never brings a deleted account back.
  • Records we must keep — a minimal transaction record where tax or accounting law requires it, even after the account is gone.
№ 09Your rights

Read it, fix it, erase it.

Wherever you live, one message through the contact form covers all of this, and we answer within 30 days:

  • Access — ask what we hold about you and we will send you a copy.
  • Correction — if something is wrong, tell us and we will fix it.
  • Deletion — the account, the Garage and the spots, removed.
  • Portability — a machine-readable copy of what you gave us.
  • Objection and restriction — ask us to stop or limit a particular use.
  • Withdrawing consent — permissions are revocable in Android Settings at any time.

If you are in the EU or UK, our lawful bases are: performing our contract with you (running the game), your consent (location, notifications, tracking), and our legitimate interests (keeping the game fair and secure). You may complain to your local data protection authority.

If you are in California, you have the rights to know, delete, correct and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by the CCPA, and we do not offer financial incentives for your data.

№ 10Deleting your account

From inside the app.

Open Settings → Account → Delete Account in Blindspot and confirm. Deletion is scheduled with a 14-day grace period: sign in again within 14 days and everything is restored exactly as it was. After that, your account, profile, Garage, spots, photos and social connections are permanently removed.

Deleting your account does not cancel your subscription — that lives with Google Play. Cancel it first in the Play Store under Payments & subscriptions, or you will keep being charged for an account that no longer exists.

Prefer not to do it in the app? Send us a message through the contact form, from the address on the account, and we will do it for you.

№ 11Children's privacy

Not built for under-16s.

Blindspot on Android is not directed at children, and the Terms require an account holder to be at least 16 years old. We do not knowingly collect personal information from anyone under 16.

If you are a parent or guardian and believe a child under 16 has created an account, tell us through the contact form and we will delete the account and the data attached to it.

№ 12International transfers

Where the servers are.

Our servers are in the United States. If you use Blindspot from outside the US, your information is transferred there and processed under US law.

For transfers out of the EU, UK or Switzerland we rely on the European Commission's Standard Contractual Clauses with our processors.

№ 13Changes

If this page changes.

When this policy changes, the new version is posted here and the date at the top changes with it. If a change materially affects how we use your data, we will tell you in the app before it takes effect.

№ 14Contact

Who is behind this page.

Blindspot (Google Play package app.blindspot) is published by Launchpad Creative, LLC, a Tennessee limited liability company, which is the data controller for the information described here.

Privacy questions, requests, or anything this page did not answer: the contact form. A person reads every one.

See also the Terms of Use and the Subscription Terms.

Anything unclear?

Ask, and a person will answer. We would rather explain a line than have you agree to something you did not follow.

Get Blindspot