Privacy policy

Effective 12 October 2026

Car-O-Graphy is an ownership record for your car: services, repairs, parts, modifications, receipts and costs. It is made by Nikola Zivanovic (“we”). You can reach us at carography26@gmail.com.

In short: the app works fully without an account, and then your records never leave your phone. If you choose to create an account, your records are synced to our server so you can use them on other devices and share a garage. We don't show ads, don't use analytics or tracking, and never sell or share your data.

Using the app without an account

Everything you enter (cars, records, costs, photos and documents) is stored only on your phone. We don't receive any of it.

Exchange rates. To convert prices between currencies, the app downloads a public list of daily rates from fawazahmed0/exchange-api (via jsDelivr or Cloudflare Pages). No personal data is sent; like any website, those services see your IP address.
Reminders are scheduled on your phone; nothing is sent to us.
Backups and exports. The app writes a backup file on your phone every 7 days. Backups, PDF reports and spreadsheets only go where you choose to share them.
Android backup. If Android backup is turned on, Android may include the app's records database in your Google backup. That is handled by Google under your Google account settings.

If you create an account

Cloud sync is optional. When you sign in, we process:

Account details: your email address, a password (stored only as a secure hash) and an optional display name. If you sign in with Google, we receive your Google account ID, email address and name from Google, and no password is set.
Your records: the cars, service and repair records, costs, odometer readings, parts, reminders and issues in your garages.
Files you attach: photos, invoices, receipts and other documents.
Garage sharing: who is a member of which garage and their role, and invite codes.
Handing a car over: when you hand a car to its buyer, the buyer's email address, and when they received it.
Security data: sign-in tokens, one-time password-reset and email-verification codes, and server logs (IP address, time and request) kept by our hosting provider to keep the service running and secure.

We use this only to provide the service: sign-in, syncing between your devices, sharing a garage with the people you invite, handing a car to its buyer, password reset and verification emails, and protecting the service from abuse. Under the GDPR, the legal basis is performance of our agreement with you (providing the features you ask for) and our legitimate interest in keeping the service secure.

Who can see your data

People you invite. Members of a garage you share can see its records and files; editors can also change them.
The buyer of a car you hand over. We email them that the car is waiting. Once they sign in with that address, the car moves to their garage with its records and files, and your email address is shown to them as the seller. Your insurance and parking costs, repeating costs and insurance renewals for that car are deleted instead.
Anyone with a history link you create. If you turn on a car's online history page, anyone with its link sees that car's make, model, engine, VIN, mileage and service record (dates, work done, workshop and whether an invoice is attached), but not costs, notes or files. The page isn't listed by search engines and stops working as soon as you turn the link off.
Service providers that run the service for us, under contracts that restrict them to doing so:
- Render (application hosting, Frankfurt, EU)
- Supabase (database)
- Cloudflare R2 (storage for attached files)
- Google, if you choose to sign in with Google
- An email delivery provider, for password reset, verification and hand-over emails
Authorities, only if the law requires it.

We don't sell your data, don't use it for advertising, and don't share it with anyone else.

Security

All connections use HTTPS. Passwords are hashed with bcrypt. Attached files are private and only reachable through short-lived links issued to members of their garage.

Keeping and deleting your data

We keep your account data until you delete it.
When you delete a record in the app, it disappears from all your devices. A minimal marker is kept on the server so the deletion reaches your other devices; the record is removed for good when you delete the garage or your account.
Deleting your account removes your account, sign-in data and every garage only you own, with all its records and files. Garages you share with others stay with them, and another member becomes their owner. You can delete your account in the app (Settings → Cloud sync → Delete account) or on the account deletion page. If you can't sign in, email carography26@gmail.com from the address on the account and we'll delete it within 30 days.
Server logs are kept by our hosting provider for a limited period and then deleted.
Data on your phone stays until you delete it in the app or uninstall the app.

Your rights

You can access, export, correct and delete your data at any time. The app can export everything as a backup file, PDF or spreadsheet. If you're in the EU/EEA or UK, you also have the right to restrict or object to processing, to data portability, and to complain to your data protection authority. To exercise any of these, email carography26@gmail.com.

Children

Car-O-Graphy is not directed at children under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update it here and change the effective date. For significant changes we'll also let you know in the app.

Contact

Nikola Zivanovic · carography26@gmail.com