Privacy Policy

General Information

Car Service Book is developed and operated by Gabriel Falis. We value your privacy and make decisions in our development to respect it to the best of our ability. This policy applies to our iOS app and web application at carservicebook.app.

What Data We Collect

We collect only what is necessary to provide the service: your email address for account creation, vehicle data you enter (make, model, services, fuel logs, expenses, documents), and photos you upload. We also collect anonymous usage analytics if you consent to cookies.

Storage and Sync

Your data is stored locally on your device and synced to our backend servers. Photos are stored on Amazon Web Services (AWS) S3. All data is encrypted in transit via HTTPS.

Location and Trip Logging

Automatic trip logging is switched off by default and only starts once you turn it on in the app. While it is on:

• We record the start and end point of each drive, its distance, and the time it began and ended. We do not record or store the route you took between them.
• Those trips are stored on your phone and synced to our servers in the EU so your mileage log survives a new phone or a reinstall.
• Trip data is used only to build your mileage log and its tax export. It is never sold, and never used for advertising or profiling.
• You can turn tracking off at any time, delete individual trips, or delete your account to remove all of them.

Third-Party Services

We use the following third-party services to operate the app:

• Google Analytics — anonymous website traffic analysis (only with your consent)
• RevenueCat — subscription and payment management
• Amazon Web Services (AWS S3) — secure photo storage
• Apple Sign-In / Google Sign-In — authentication (receives your email and name)
• Resend — transactional emails (verification codes, password resets)
• Google (Gemini API) — AI features: photos you submit for receipt scanning or photo diagnosis, and the vehicle details used for maintenance advice, are sent for processing and are not used to train its models

Data Retention

Your data is retained as long as your account is active. When you delete your account, all personal data including vehicle records, photos, and account information is permanently removed within 30 days.

Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data (available via PDF reports)
• Object to data processing
• Withdraw consent at any time (e.g. cookie preferences)

To exercise any of these rights, contact us at gabrielfalis.codes@gmail.com.

Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children. Users must confirm they are at least 16 years old during registration.

Cookies

We use essential cookies for authentication and preferences. Analytics cookies (Google Analytics) are only set with your explicit consent via our cookie banner. You can change your cookie preferences at any time.

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at gabrielfalis.codes@gmail.com.