This is a convenience translation. The German version (Impressum, Datenschutz, Nutzungsbedingungen) is legally binding.
Privacy Policy for the Driex app
Last updated: July 2026
1. Controller
Ben Dürringer, Steinenbühl 7, 72336 Balingen, Germany. E-mail: contact@driex.app
2. The essentials first
Driex works without a user account. There is no registration, no profiling and no sale of data. The sensor data needed for the driving experience never leaves your device.
3. Location and motion (on-device only)
Driex uses GPS speed and motion sensors to adapt the music to your drive in real time. This data is processed exclusively on your device and is neither stored nor transmitted to us. Legal basis: Art. 6(1)(b) GDPR (provision of the app function). You can revoke location access at any time in iOS Settings.
4. Weather data
For the weather tint the app queries our server with your coordinates rounded to roughly one kilometre. Our server (Cloudflare) forwards the request without any identifier to the OpenWeather service (openweathermap.org) and does not store your coordinates. OpenWeather receives only the rounded coordinates and the address of our server, not yours. Technically, our server sees your IP address; short-lived abuse counters use a value derived from it. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the context feature).
5. Cloud catalog (Driex Radio)
When loading catalog songs, the app connects to our cloud infrastructure (Cloudflare, stored in the EU). Technically necessary connection data arises in the process (IP address, files retrieved); we do not evaluate it on a personal basis.
6. Song import (cloud processing)
If you import your own music files, they are temporarily transferred in encrypted form to our servers for processing (stem separation, sound analysis) (Cloudflare R2, EU) and processed on rented GPU servers. Your files are deleted automatically once the result has been delivered to your device, at the latest after 48 hours. Your audio files are never matched against other users and never shared with third parties. To better classify a song (e.g. decade, genre, mood), the title, artist, an excerpt of the lyrics automatically recognized on the server and non-personal sound measurements are analyzed by an AI service. For this we use DeepSeek (Hangzhou DeepSeek Artificial Intelligence Basic Technology Research Co., Ltd., China); if the service is unavailable, an AI model running directly on our rented GPU server takes over instead. Only the song details mentioned are transmitted — never your audio file and no information about you (no name, no account identifier, no location). We do not use your files or details to train AI models. To reliably identify a song, an acoustic fingerprint of the file is additionally sent to the AcoustID service (acoustid.org, operated by AcoustID OÜ; a project by Lukáš Lalinský). Such a fingerprint is a mathematical sound signature — no playable audio can be reconstructed from it. In response we receive only metadata of the identified recording (title, artist, release) via the open music database MusicBrainz; no account or personal data is transmitted in the process. To determine the decade of release, title and artist (no audio data, no identifier of you) may additionally be looked up in MusicBrainz. So that paid import songs do not count twice against your quota after a reinstall, our server stores pseudonymous check values: a hash (checksum) of your Apple transaction identifier as the account key and hashes of your imported song files — hashes allow no inference about you or the content. Legal basis: Art. 6(1)(b) GDPR (function initiated by you).
6a. Describing your own mood (wish text)
When you describe in your own words how your drive should feel, that text is sent to an AI service which translates it into search criteria (e.g. situation, desired effect, sonic colour). For this we use Mistral AI (France); processing takes place within the European Union and your data does not leave the EU. Only your text and the app language setting are transmitted — never your name, your account key, your location or your music library. Which songs match your wish is decided on your device; the service never sees your songs. We do not store the text anywhere: neither on our servers nor in logs; we only count how many requests came from your installation on a given day. The text is not used to train AI models. On your own device the wording is kept so that identical wishes are recognised — you can delete it there at any time. Please do not enter names, health data or addresses. We ask for your consent once before you first use the feature. Legal basis: Art. 6(1)(a) GDPR (consent), which you can withdraw at any time by not using the feature.
7. Anonymous usage statistics
For catalog songs we record anonymously how they are used: how often a song is downloaded, played, finished or skipped, whether it is favourited or voted down ("thumbs down", "more like this") and which moods are chosen. Only absolute counts with a random installation ID are recorded — no link to your person, no profile. This helps us improve the catalog. For your own imports, NO titles or song identifiers are recorded — only plain counters without any song reference (e.g. "an imported song was skipped", duration and success count of an import job) so we can improve import quality. In addition, we count anonymously whether key first steps were reached (e.g. "first drive started", "purchase screen seen") — no content, no time profiles, exactly once per installation. The statistics can be switched off in Settings. Legal basis: Art. 6(1)(f) GDPR.
8. Purchases and subscriptions
All purchases are handled entirely by Apple (App Store). We never receive payment data, only anonymous confirmation of the purchase status. Apple's privacy policy applies.
8a. Friends programme (referral code)
If you take part in the friends programme, we store on our server (Cloudflare, EU) for the purpose of running it: your referral code, the random installation IDs of referrer and referred user, the balance of your bonus account and a pseudonymous Apple transaction identifier of the referred subscription — no names, no payment data. To verify the purchase and possible refunds we query Apple's server API with this identifier and receive automated notifications from Apple. Purpose: crediting and reversing programme benefits and preventing abuse. Legal basis: Art. 6(1)(b) GDPR. The data is deleted once it is no longer needed for the programme.
9. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection supervisory authority. Since Driex works without accounts, we generally hold no data that can be attributed to you. For requests: contact@driex.app
10. Our website (driex.app)
When you visit the website, technically necessary connection data arises at our host Cloudflare (Pages, EU/global network) (IP address, pages retrieved); we use no cookies and no analytics tools. To display the prices applicable to you, Cloudflare derives your country from your IP address; the country is only cached in your browser for the duration of your visit (sessionStorage) and is not transmitted to us. Your language choice is remembered locally by your browser (localStorage). Legal basis: Art. 6(1)(f) GDPR.
11. Changes
We update this policy when features or the legal situation change. The current version is available in the app under Settings → Legal.