Privacy policy

1. What data is processed

The car code like XXXX-XXXX — computed by the app; the device identifier cannot be recovered from it.

The app’s public service key on your car, the app version, name and install channel, a shortened IP address (a /24 network for IPv4, /48 for IPv6) and the time of check-ins.

A hash (SHA-256) of the head unit hardware identifier — the identifier itself cannot be recovered from it — and details of the device and app authenticity check (Android attestation: trust level, presence of secure key storage, root certificate fingerprint), the Android user number in the car.

Your Telegram id and username, the plan, subscription dates and the author’s notes about the purchase.

2. What is not collected

VIN, location and trips, phone number, the head unit hardware identifier itself (only its hash), car logs. The energy history is stored only in the car and is sent to your Telegram only if you do it yourself.

3. Why

To issue and check the subscription, renew and transfer it, remind you before it ends, protect activation codes from guessing and answer your requests. Data is not sold or shared with third parties for advertising.

4. Where and for how long

The main database is stored on equipment in Russia (Moscow). Encrypted backups are kept in Moscow and in storage outside Russia; only the author holds the decryption key. The service relies on hosting, cloud backup storage and Telegram (correspondence with the author and notifications). Data is kept while the subscription is active and, after it ends, for as long as needed for support and accounting; exact periods are being finalised.

5. Your rights

You can find out what data about you is stored, correct it or ask for it to be deleted — message @seekyourpassion on Telegram. After deletion the subscription cannot be renewed without a new activation.

6. This website

The website uses no cookies, counters, advertising or third-party scripts and no external fonts. The web server of the website and of the subscription check server keeps a technical request log (full IP address, page, time, browser or app User-Agent) to protect against failures and attacks; the log is overwritten as it grows and kept for a short time.