Privacy Policy — Karvyn

Summary

• Your vehicle records stay on your device. There are no accounts and we have no server that receives them.
• On iPhone, Karvyn automatically saves a copy of its database to your own iCloud Drive. On Android, it can back up to your own Google Drive once you connect it. We can't access these copies.
• Karvyn has no ads and doesn't track you across other companies' apps or websites.
• The app sends usage statistics and crash reports to Google Firebase. They never include what you type.
• Karvyn Pro is a one-time purchase processed by Apple or Google. We never see your payment details.

1. Data controller

The controller of the personal data described in this policy is Sebastian Rodriguez Garcia, an independent developer who publishes Karvyn under the name SRG Consulting and is listed as its seller on the App Store. In this policy, “we” and “us” refer to Sebastian Rodriguez Garcia.

For anything related to your data, write to srgconsulting@proton.me.

2. Data stored on your device

Everything you enter in Karvyn — vehicle details such as make, model and number plate, services, fuel entries, costs, inspections, reminders, notes, documents such as your insurer and policy number, and the photos you add — is kept in the app's storage on your device. We don't receive it, so we can't see, use, sell or recover it.

The app only accesses the photos you choose from your gallery and doesn't use the camera. Reminders are local notifications scheduled by your phone. PDF exports are created on the device and only leave it if you share them through the system share sheet; from then on, they are handled by whoever receives them.

You can delete this data at any time in the app, or all of it at once by uninstalling the app.

3. Backups

On iPhone, when iCloud Drive is available on your device, Karvyn saves a copy of its database (your records, without the photo files) to its folder in your iCloud Drive every time you leave the app. To stop it, turn off iCloud Drive for Karvyn in iPhone Settings › [your name] › iCloud. To delete the copy, remove Karvyn's data from your iCloud storage.

On Android, backup to Google Drive starts only after you connect your Google account in the app. The copy is saved in a hidden app folder that only Karvyn can open. When you connect, Google shares your account's email address and basic profile with the app; Karvyn doesn't store them or send them anywhere. To delete the copy, go to Google Drive › Settings › Manage apps.

Apple and Google keep these copies in your account under their own terms, and we can't access them. If your phone's own backup (iCloud Backup or Android backup to your Google account) is turned on, it may also include Karvyn's data.

4. Usage statistics (Google Analytics for Firebase)

Karvyn records events such as the screens you open, the features you use (for example, adding a vehicle, logging a service or a refuel, creating a reminder, adding a document, exporting or setting up a backup) and the steps of a purchase, including price and currency. It also records whether you have Pro, which backup service you use, the app language and an approximate number of vehicles (for example, “2-3”). Events are linked to a random identifier of your installation. They never include number plates, notes, documents, photos or anything else you type.

Statistics are collected from the first launch of the published app. Karvyn doesn't access the advertising identifier on iPhone or Android.

• Data: An app instance identifier generated on your device, the events described above, device model, operating system and app version, language, approximate location (country, region or city) derived from your IP address, and session and engagement data. This data is pseudonymous: it doesn't include your name or email address, but it relates to your device, so we treat it as personal data.
• Purpose: To understand how the app is used, which features work and where people get stuck, so we can improve it.
• Legal basis: Our legitimate interest in improving the app (art. 6.1.f GDPR). You can object at any time by writing to us.
• Who processes it: Google Ireland Limited and Google LLC, as our processors under the Firebase data processing terms.
• How long: Event and user-level data for up to 14 months, according to the retention setting of our Analytics property. Reports with aggregated figures may be kept longer.

• Privacy and security in Firebase
• Google Privacy Policy

5. Crash reports (Firebase Crashlytics)

Reports never include what you type in the app.

• Data: When the app crashes or hits certain errors: the technical trace of the error, device model, operating system and app version, free memory and storage, and a Crashlytics installation identifier.
• Purpose: To detect and fix errors and keep the app stable.
• Legal basis: Our legitimate interest in the app working correctly and securely (art. 6.1.f GDPR). You can object by writing to us.
• Who processes it: Google Ireland Limited and Google LLC, as our processors under the Firebase data processing terms.
• How long: 90 days. After that, Google starts deleting the reports from its systems.

• Privacy and security in Firebase

6. Purchases

Karvyn Pro is a one-time purchase sold through the App Store or Google Play.

• Data: Whether your purchase is active and the information the store gives the app to confirm it (product and transaction status). We never receive your card details, name or billing address.
• Purpose: To unlock what you bought and restore it on another device.
• Legal basis: Performance of the purchase contract (art. 6.1.b GDPR).
• Who processes it: Apple (App Store) or Google (Google Play), which handle the payment as independent controllers under their own terms.
• How long: The app keeps the purchase status on your device. The stores keep their records under their own policies.

7. Ratings

If you tap the rating option in Settings, the app asks your phone to show the App Store or Google Play rating window. Ratings and reviews go directly to Apple or Google; the app doesn't receive them.

8. Who receives your data

We don't sell your data or share it with anyone for their own purposes beyond what this policy describes. The data described above is received by:

• Google Ireland Limited and Google LLC, as our processors for the Firebase services.
• Apple, as the operator of the App Store (purchases, ratings and app distribution) and, if you use them, of iCloud and Game Center, under its own policies.
• Google, as the operator of Google Play (purchases, ratings and app distribution) and, if you use them, of Google Drive and Android backup, under its own policies.
• If you have chosen to share usage and diagnostic data with app developers in your device settings, Apple and Google may give us aggregated statistics and crash reports through their developer consoles.

We may also have to disclose data to public authorities or courts when the law requires it.

• Google Privacy Policy
• Apple Privacy Policy

9. International transfers

Google LLC and Apple Inc. are based in the United States, so some data may be processed there. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission considers to provide an adequate level of protection (Implementing Decision (EU) 2023/1795 of 10 July 2023), and the Firebase data processing terms also include the standard contractual clauses approved by the Commission. Apple applies its own safeguards, described in its privacy policy.

• Data Privacy Framework list of certified companies

10. How long data is kept

The data you save in the app stays on your device until you delete it in the app or uninstall the app. Copies in your iCloud or Google account stay there until you delete them.

Data handled by Google and Apple is kept for the periods given in each section above.

If you email us, we keep your messages for as long as we need them to deal with your request and, after that, only for as long as they may be needed to respond to possible claims.

11. How to change your choices

• iCloud backup: turn off iCloud Drive for Karvyn in iPhone Settings › [your name] › iCloud.
• Google Drive backup: don't connect your Google account in the app, or remove Karvyn's access in your Google Account settings (Security › Third-party connections).
• Statistics and crash reports: the app has no switch to turn them off. You can object by writing to us, and uninstalling the app stops all collection.

12. Your rights

You can ask us for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on our legitimate interest. Where processing is based on your consent, you can withdraw it at any time; this doesn't affect processing carried out before you withdrew it.

To exercise any of these rights, write to srgconsulting@proton.me. It's free. We'll reply within one month. For complex requests this can be extended by two further months, and if so we'll tell you within the first month (art. 12.3 GDPR).

We don't know your name or email address: the data Google processes for us is linked only to random identifiers of your installation. If we can't identify you from what you send us, we'll tell you, and you can give us additional information that allows us to find your data (art. 11 GDPR). You can also delete the data saved in the app at any time, or uninstall it.

If you think we haven't handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the supervisory authority of the country where you live or work. You're welcome to write to us first so we can try to sort it out.

For data that Google or Apple process as independent controllers (advertising, store accounts, iCloud, Google Drive, Game Center), you can also use their own privacy tools.

• Spanish Data Protection Agency (AEPD)
• Google My Ad Center
• Apple Data and Privacy

13. If you write to us

If you email us, we use your address and your message only to reply to you. The legal basis is our legitimate interest in answering your query or, when you exercise a right, our legal obligation to respond (art. 6.1.f and 6.1.c GDPR). Our email service is provided by Proton AG, based in Switzerland, a country the European Commission recognises as providing an adequate level of protection.

14. Children

Karvyn is not directed at children and doesn't ask for your age. In Spain, you can consent to the processing of your data yourself only if you are over 14 (art. 7 of the Spanish LOPDGDD). In other EU countries, national law sets that age between 13 and 16 (art. 8 GDPR). Below that age, consent must be given by your parent or guardian.

If you are a parent or guardian and believe a child has given us data or consent without your authorisation, write to srgconsulting@proton.me.

15. Automated decisions

We don't make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (art. 22 GDPR).

16. Changes to this policy

If we change the way the app handles data, for example by adding a new service, we'll update this policy before the change reaches the app and change the date at the top. If the change requires your consent, the app will ask for it again.

Contact

Privacy questions and requests to exercise your rights: srgconsulting@proton.me

Questions about this policy can be directed to SRG Consulting via the contact page.