Privacy policy

1. Data we collect

We only collect the data needed for the features you use:

• Account (optional): email, or your Apple/Google identifier when you sign in with those services.
• Car and cost data you enter: model, purchase date and price, odometer, loan, expense records, receipt photos, reminders, simulations.
• Settings: language, units, currency, province, notification settings, consent choices.
• Technical data: device type, OS and app version, push token, crash logs. Analytics events never contain detailed amounts or identifying information.
• Website: your email when you join the waitlist or send a support/account-deletion request.

2. Data we do not collect

• No background GPS tracking, no trip history.
• No payment card data — Premium purchases are handled by the App Store/Google Play.
• We never sell personal data or share it with carmakers or dealers for advertising.

3. Purposes and legal basis

• Providing the service: storing and syncing car data, calculating TCO, reminders, reports (performance of the terms of use).
• Waitlist and product emails — only with your consent, which you can withdraw at any time.
• Community data: only if you turn on anonymous sharing (off by default, with a separate consent screen). Only rounded monthly aggregates are sent; region at province level; never plate numbers, locations, receipt photos, names, emails or phone numbers.
• Security, fraud prevention and bug fixing (legitimate interest, legal obligations).

4. Your rights under Law 91/2025/QH15

You have the following rights over your personal data:

• The right to be informed about the processing of your personal data.
• The right to give or refuse consent, and to withdraw it.
• The right to access, view and obtain a copy of your data (Settings › Privacy & data › Download my data; CSV export is always free).
• The right to correct inaccurate data.
• The right to request deletion, or to restrict or object to processing.
• The right to complain, denounce, sue and claim compensation as provided by law.

We handle requests within the statutory time limits. Send requests in the app or by email to support@carcost.example.

5. Storage, security and retention

• Data is stored on your device (SQLite) and, if you sign in, synced to our servers over TLS 1.2+; data on our servers is encrypted.
• When you delete your account, cloud data is permanently deleted after 30 days (sign in again within 30 days to cancel). Community data you shared is anonymous and is kept.
• In-app notifications are kept for 90 days; technical logs only as long as needed for operations and the law.

6. Sharing with third parties

We only share data with service providers required to run CarCost (server hosting, email delivery, Apple/Google push notifications) under confidentiality agreements, or when a competent authority requests it under the law.

7. Cookies on the website

The CarCost website uses no advertising or third-party tracking cookies. Simulation settings live in the URL, not on our servers.

8. Children

CarCost is not intended for people under 16 and does not knowingly collect children’s data.

9. Contact and changes

For any privacy question, contact support@carcost.example. If this policy changes materially we will tell you in the app before it applies.