Privacy Policy

1. Information We Collect

Account information

• Email address (used as your username to sign in)
• Password — stored only as a one-way cryptographic hash, never in plain text
• Display name and profile avatar image, if you choose to set them

Vehicle information you enter

• Vehicle identity details (make, model, generation, trim, year, VIN, registration number, colors, owner)
• Mileage readings
• Fuel purchase records (date, mileage, liters, cost, station, driving conditions)
• Service and maintenance records (work performed, cost, workshop)
• Parts records, including warranty information
• Insurance details you choose to record (company, policy number, phone)
• Tire set information (size, season, pressure)
• Cost and expense entries
• Reminders you set
• Uploaded photos and documents (e.g. receipts, part photos, vehicle photos)

Technical and usage information

• Standard web server request logs (such as IP address and browser/device information), generated automatically by our hosting infrastructure when the Service is accessed
• A single authentication session cookie used to keep you signed in — see our Cookie Policy for details

We do not collect payment card details, precise geolocation, or biometric data — the Service does not process payments and has no such functionality.

2. How We Use Information

Information we collect is used to:

• Provide the vehicle-management service you sign up for
• Maintain the vehicle records you create and edit
• Calculate mileage, fuel consumption, and running costs from the records you enter
• Generate reports, statistics, and reminders based on your data
• Keep your data consistent between the phone app and the web view, where both are used
• Maintain the security of your account (e.g. verifying sign-in attempts)
• Respond to support requests
• Improve the reliability of the Service
• Detect and prevent abuse or unauthorized access
• Comply with applicable legal obligations

3. Data Storage and Security

Your data is stored in a database on infrastructure operated by our hosting provider. Traffic to and from the Service is encrypted in transit (HTTPS). Passwords are never stored in plain text — only a one-way hash is kept, which cannot be reversed to recover your password. Access to write or modify vehicle records is restricted to authenticated requests, scoped to the account that owns the vehicle.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. We have not sought or obtained any specific security certification for the Service, and this Policy does not claim one.

4. Data Sharing

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

Limited technical service providers are involved in operating CARLOG:

• Hosting provider (Hostinger) — stores the application, database, and any files you upload.
• Google Fonts — the web interface loads typefaces from Google's font servers; this causes your browser to make a request to Google, which may see your IP address in the process.
• Frankfurter (exchange-rate data) — if you use the multi-currency display feature, our server periodically fetches public currency exchange rates from the Frankfurter API. This is a server-to-server request for general exchange-rate data; no personal or vehicle information is sent to it.

We do not currently use any advertising network, analytics platform, or payment processor. If that changes, this section will be updated to name the provider and what is shared with it.

5. Vehicles You Choose to Make Public

CARLOG lets an account owner optionally mark one of their vehicles as public (used, for example, to let a visitor "try the demo" without signing in). If you mark a vehicle public, that vehicle's records — mileage, service history, fuel entries, costs, and any photos or documents attached to it — become viewable by anyone, including people who are not signed in. Vehicles are private by default; nothing is made public unless you explicitly choose to do so, and you can change this from the Garage screen at any time.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), UK, or another jurisdiction with similar data protection laws, you may have the right to:

• Access the personal information we hold about you
• Rectify inaccurate or incomplete information
• Erase your personal information ("right to be forgotten")
• Restrict how we process your information
• Port your data to another service in a structured, machine-readable format
• Object to certain processing of your information
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us using the details in Section 11. This section is provided for general informational purposes and does not constitute legal advice; your specific rights may depend on where you live and applicable local law.

7. Account Deletion

CARLOG does not currently offer a self-service "delete my account" button inside the app. To request deletion of your account and the personal data associated with it, email us at support@yourdomain.example. We will verify the request and delete your account and vehicle records within a reasonable time, except where we are required or permitted to retain certain information for legal, security, or accounting purposes.

8. Data Retention

We retain your account and vehicle records for as long as your account remains active, or as long as reasonably necessary to provide the Service to you. If you request deletion, we remove your data within a reasonable time, subject to any legal, security, or operational obligation that requires us to keep certain records for longer.

9. Children's Privacy

CARLOG is not directed to children, and we do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice (such as a notice within the app). Your continued use of the Service after a change becomes effective constitutes acceptance of the revised Policy.

11. Contact

Questions about this Privacy Policy, or requests relating to your personal data, can be sent to: