Privacy Policy
Carvis ("the App") is developed and operated by Ivan Ivanou, an individual developer trading as Cartella Apps ("we", "us"). This policy explains what information the App collects, why we collect it, where it is stored, with whom it is shared and what choices you have. We keep it short and specific on purpose: the App collects only what it needs to keep your vehicle records in sync and to remind you about upcoming maintenance.
1. Summary
- Your vehicle and service data belongs to you. We store it so it is available on your devices and never sell it or use it for advertising.
- The App shows no ads and contains no advertising or tracking SDKs. We do not use the advertising identifier (IDFA / GAID) and do not request App Tracking Transparency permission.
- All data is processed by Google Firebase on our behalf. Your account database is located in Frankfurt, Germany (EU); uploaded photos and documents are stored in the United States.
- You can delete your account and all associated data at any time from inside the App or by emailing us.
2. Information we collect
2.1 Account information
When you create an account we receive, depending on the sign-in method you choose:
| Sign-in method | Data received |
|---|---|
| Email and password | Email address. Your password is handled by Firebase Authentication and is never visible to us. |
| Email address, display name and profile picture URL provided by Google. | |
| Sign in with Apple | Email address (or Apple's private relay address if you choose to hide it) and the name you share. |
| Guest (no account) | No personal data. A random anonymous identifier is created so that your records can be saved. If you later create an account, your guest data is attached to it. |
We also store the list of sign-in providers linked to your account, your subscription plan (Free or Pro), the date the account was created and the date of your last visit.
2.2 Content you add to the App
Everything you enter is stored so that it can be shown on all your signed-in devices:
- Vehicles: make, model, year, mileage and, if you choose to enter them, VIN, licence plate, colour, engine and tyre details, purchase date and price, and a vehicle photo.
- Service records: date, mileage, type of work, cost, notes, parts and attached photos or PDF documents such as receipts and work orders.
- Reminders: what to do and the date or mileage when it is due.
- Settings: distance and volume units, currency, theme and notification preferences.
Attachments are optional. A VIN or licence plate can identify a vehicle, so enter them only if you want to keep them in your records.
2.3 Device and usage information
- Push notification token: a Firebase Cloud Messaging token, the device platform (iOS or Android), the device time zone and whether notifications are enabled. We use these only to send you messages about the App itself. Maintenance reminders are scheduled locally on your device and do not require this token.
- Analytics: we use Google Analytics for Firebase to understand how the App is used. It records app events (for example sign-up, sign-in, vehicle added, record added, reminder set, together with the category of the record), a pseudonymous app-instance identifier, your account identifier, device model, operating system version, app version, language and approximate country derived from the IP address. We do not collect precise location.
- Crash reports: we use Firebase Crashlytics to learn when the App crashes or hits an internal error. A report contains the stack trace, the state of the App at that moment, device model, operating system version, app version, free memory and disk space, whether the device was rooted or jailbroken, the time of the crash, a Crashlytics installation identifier and your account identifier. Crash reports contain no content you add to the App and no precise location.
- Performance data: we use Firebase Performance Monitoring to learn how fast the App starts, renders its screens, loads your data and uploads files. It records the duration of those operations, network request details (response codes, payload sizes and timings), device model, operating system version, app version, language, country derived from the IP address, carrier and network type, RAM and disk size, a Firebase installation identifier and the IP address itself. Performance data contains no content you add to the App and no precise location.
- App integrity: Firebase App Check confirms that requests come from the genuine App. Your device obtains a short-lived attestation token from Apple (App Attest or DeviceCheck) or Google (Play Integrity) and attaches it to requests to our backend; the attestation material itself is not kept by Firebase.
- Diagnostics: standard server logs kept by Google Firebase for security and abuse prevention.
2.4 Permissions
The App asks for access to the camera and photo library only when you choose to add a photo, for the file picker only when you attach a document, and for notifications only when you enable reminders. You can withdraw any of these permissions in your device settings at any time.
2.5 What we do not collect
We do not collect precise location, contacts, health data, payment card numbers or government identifiers. Purchases of Pro are paid through Apple App Store or Google Play; we never receive your payment details. Our subscription provider RevenueCat receives the store's confirmation of the purchase and keeps the purchase history linked to your account identifier: product, purchase and renewal dates, trial status, price and currency, country of the store account and the platform.
3. Why we use your information
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Providing the service: storing your records, syncing them between devices, showing statistics | Account information, content you add | Performance of a contract (Terms of Use) |
| Maintenance reminders and notifications | Reminders, notification token, time zone | Performance of a contract; your consent for notifications, which you can revoke in device settings |
| Pro subscription management | Account identifier, subscription status, purchase history | Performance of a contract |
| Understanding usage and improving the App | Analytics events, device information | Legitimate interest in improving a product that works well |
| Finding and fixing crashes and errors | Crash reports, device information | Legitimate interest in keeping the App stable |
| Measuring and improving the App's speed | Performance data, device information | Legitimate interest in an App that responds quickly |
| Security, fraud and abuse prevention, enforcing limits | Account identifier, server logs | Legitimate interest; legal obligation where applicable |
| Answering your support requests | Email address and the content of your message | Legitimate interest; performance of a contract |
We do not use your data for profiling, automated decision-making with legal effect, or advertising.
4. Service providers and sharing
We do not sell personal data and do not share it with third parties for their own purposes. The App relies on the following providers, which process data on our behalf under their respective data-processing terms:
| Provider | What it does | Location of data |
|---|---|---|
| Google Firebase (Google LLC / Google Ireland Ltd): Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Installations, Analytics, Crashlytics, Performance Monitoring, App Check | Sign-in, database, file storage, server-side functions (subscription status, storage quota, clean-up of deleted accounts), push notifications, analytics, crash reporting, performance measurement and verification that requests come from the genuine App | Database: europe-west3 (Frankfurt, Germany). Photos, attachments and server-side functions: us-central1 (United States). Authentication, messaging, analytics, crash reports and performance data: Google's global infrastructure |
| Google Sign-In (Google LLC) | Optional sign-in method | Google's infrastructure |
| Sign in with Apple (Apple Inc.) | Optional sign-in method | Apple's infrastructure |
| Apple App Store and Google Play | Distribution of the App and processing of Pro subscription payments | Apple's and Google's infrastructure |
| RevenueCat (RevenueCat, Inc.) | Verifying store purchases and keeping the Pro purchase history linked to your account identifier | United States |
Where data leaves the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses included in Google's, Apple's and RevenueCat's data-processing terms, or by an adequacy decision such as the EU-US Data Privacy Framework where the provider is certified.
We may also disclose data if required by law or to protect the rights, safety or property of our users, ourselves or others.
5. How long we keep your data
- Account and content: for as long as your account exists. When you delete your account, your profile, vehicles, records, reminders, photos and attachments are deleted from our systems within 30 days, apart from backup copies that expire on their own schedule.
- Guest data: stored under the anonymous identifier for as long as the App is installed. If you uninstall the App without creating an account, the data can no longer be accessed and is treated as abandoned and deleted.
- Notification tokens: replaced when they rotate and marked inactive when you sign out; removed with the account.
- Analytics: user-level analytics data is kept by Google Analytics for Firebase for no longer than 14 months; aggregated statistics may be kept longer.
- Crash reports: kept by Firebase Crashlytics for 90 days.
- Performance data: kept by Firebase Performance Monitoring for 30 days where tied to an IP address and for 60 days otherwise.
- App integrity tokens: valid for at most 7 days; the attestation material is not stored by Firebase.
- Purchase history: kept by RevenueCat for as long as needed to provide Pro, handle refunds and meet tax and accounting obligations.
- Support emails: for up to two years after the request is resolved.
6. Your rights and choices
Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to processing based on legitimate interest, and to withdraw consent at any time. If you are in the EEA, the United Kingdom or Switzerland, you also have the right to lodge a complaint with your local data-protection authority.
- Access and correction: all your data is visible and editable inside the App.
- Deleting your account: open Profile in the App and choose Delete account. This removes your account and all associated data as described in section 5. You can also email us from the address linked to your account and we will delete it for you.
- Export: contact us and we will provide a copy of your data in a machine-readable format.
- Notifications: disable them in the App settings or in your device settings.
- Analytics: you can prevent Google Analytics from identifying your device by resetting the app-instance identifier, which happens automatically when you delete your account or reinstall the App.
To exercise any right, email carvis.app.support@gmail.com. We respond within one month.
7. Security
Data is transmitted over encrypted connections (TLS) and stored encrypted at rest by Google Firebase. Access rules on the database and file storage allow each signed-in user to read and write only their own data. Passwords are hashed by Firebase Authentication and never stored in plain text. No system is perfectly secure, so please use a strong, unique password and keep your device protected.
8. Children
The App is not directed to children under 13 years of age (or under 16 where local law sets a higher age) and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
9. Changes to this policy
We may update this policy when the App changes. The effective date at the top shows the latest version. For material changes we will notify you in the App or by email before they take effect. Continued use of the App after that date means you accept the updated policy.
10. Contact
Controller: Ivan Ivanou, trading as Cartella Apps, Belarus.
Email: carvis.app.support@gmail.com
Website: cartella-carvis.web.app