Privacy notice

Version 1 (launch period) · 16 July 2026. This notice describes plainly what SARScore collects and why. A fuller, professionally reviewed policy will replace it as the platform grows. Until then, this page is kept deliberately plain and accurate. For the plain-language account of how the system works, including the register of our service providers, see Trust & Data.

Who we are

SARScore is an early-stage access-intelligence platform operated from the United Kingdom. Contact for anything on this page: privacy@sarscore.com.

What we collect, and why

Account details: your email address and display name, to operate your account and attribute your contributions (accountable identity is what makes evidence trustworthy). Contributions: the observations you report about routes and locations, which are the product's purpose; they join a permanent, append-only evidence record and may be excluded from scoring but not edited. Evidence photographs and capture location: when you attach a photo we ask your device for its location at that moment, with your permission, to bind the evidence to the place; photos and their location are stored privately, reviewed by moderators to validate reports, and never published. Technical basics: standard server logs and the drafts your own device stores locally (drafts never leave your device until you submit).

Signing in with Google

If you choose “Continue with Google”, Google supplies us with your name, email address and profile identifier, and nothing else: we request only the basic identity scopes and never your contacts, location, files or other Google data. The same button creates a new account or signs in an existing one; if you already registered by email with the same address, Google sign-in attaches to that account rather than creating a duplicate. Google's own processing of your sign-in is described in Google's privacy policy. A Google account is never required: email sign-in remains fully supported.

What we do not do

We do not track your location in the background. Location is read only at moments you initiate (attaching evidence, or tapping check-in), and the platform cannot read it while the page is closed. We do not sell personal data, run advertising, or use third-party analytics trackers. Reports never describe people: photographs must not include faces, number plates or private interiors, and moderators exclude any that do.

Legal basis and retention

We process account data to provide the service you signed up for, and evidence data on the basis of the consent you give at capture and our legitimate interest in maintaining a truthful evidence record. Evidence photographs are retained privately while they support the record; a formal retention schedule will be part of the reviewed policy. Data is hosted within the EU/UK service regions of our infrastructure providers (Supabase, Vercel, Resend).

Your rights

You can ask for a copy of your data, correct your account details, or ask for your account and personal data to be deleted: email privacy@sarscore.com. One honest caveat: the observation record is append-only by design, so deleted accounts have their contributions de-attributed (unlinked from you) rather than silently rewritten. You also have the right to complain to the ICO (ico.org.uk).

See also the Terms of Use and the methodology & trust page.