Privacy Policy

Controller

Data We Process

• Account data: name, email, authentication identifiers, and password hash (if password login is used).
• Profile and app data: language, currency, reminders, vehicles, mileage, refuels, charging sessions, expenses, categories, and notes.
• Technical data: IP address, app/browser version, device and operating system details, and service logs.
• Billing/subscription data: plan status, provider, transaction identifiers, and invoice/payment status metadata.
• Optional receipt scan data in the mobile app: images submitted by you for parsing and extracted receipt fields.

Purposes & Legal Bases

• Provide the service and manage your account (contract).
• Process subscriptions and payments (contract, legal obligation).
• Provide reminders and notifications (contract, consent where required).
• Prevent abuse and secure the service (legitimate interest).
• Comply with accounting, tax, and legal obligations (legal obligation).

Service Providers

We use processors and partners only where needed to provide the service, including:

• Hosting and infrastructure providers.
• Authentication providers (for example, Google and Apple sign-in if chosen by you).
• Subscription/payment providers (Apple App Store, Google Play, and Stripe for web subscriptions).
• Push notification providers (Firebase Cloud Messaging and Apple Push Notification service).
• AI receipt parsing provider, only for receipt images explicitly submitted by you.

Payments and Subscriptions

For web subscriptions, payments are handled via Stripe. For mobile subscriptions, payments are handled by Apple App Store or Google Play. We do not store full payment card details in our backend.

Retention

We keep personal data only as long as necessary for the purposes described above, including legal retention obligations. You can request deletion of your account at any time via myauto.today/delete-me.

Your Rights (GDPR)

• Access, rectify, or delete your personal data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (where applicable).
• Lodge a complaint with a supervisory authority.

Security

We apply technical and organizational measures to protect data against unauthorized access, loss, or alteration.

International Transfers

Some service providers may process data outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent lawful mechanisms.

Changes to This Policy

We may update this Policy from time to time. The latest version is always published on this page with the "Last updated" date.

Contact

For privacy requests, contact us at support@timsoft.eu.