Privacy Policy
Last updated: July 21, 2026
Carvico is built local-first. Your vehicle records live on your device and, if you enable sync, in your personal iCloud — not on servers we operate. This policy describes exactly what data the app handles, what never leaves your device, and the limited cases where data is sent to a third party.
Data that stays on your device and your iCloud
The following is stored in the app's local database on your device and, when iCloud sync is enabled, in your private CloudKit database — an area of iCloud only your Apple account can access. We cannot read it:
- Fuel entries (odometer, volume, price, station, notes)
- Service and maintenance records
- Maintenance reminders
- Vehicle details (make, model, year, plate, VIN, photos)
- Receipt images and documents you attach
- Statistics derived from the above
CSV and PDF exports are generated entirely on your device and shared only where you choose to send them.
Data that leaves your device
| Data | Recipient | When and why |
|---|---|---|
| Sign-in identity (email address, name, user identifier) | Apple or Google (your choice of sign-in provider) | Only if you choose to sign in. Sign-in is optional; the app works as a guest, except AI receipt scanning, which requires sign-in. |
| Account record (email address and account identifier) | Firebase (Google Cloud) — our sign-in backend | Created when you sign in. Used to link your Pro purchase to you across devices and to enforce fair daily AI scan limits. We store nothing else — no name, no sign-in history. Deleted when you delete your account in the app. |
| Purchase and receipt data | RevenueCat (our subscription management provider) | The app checks your subscription status with RevenueCat when it launches. Purchase and receipt details are sent when you buy or restore a Pro subscription, to validate and manage it. |
| Receipt photo | Google Gemini, via our processing proxy | Only when you use AI receipt scanning. The photo is transmitted transiently to extract the receipt's contents and is not stored by us. We keep only a count of scans per day to enforce plan limits; the counter is keyed to your account identifier and becomes unlinked from you when your account is deleted. |
What we do not do
- No advertising and no ad networks
- No third-party analytics trackers
- No selling or sharing of your data with data brokers
- No cross-app or cross-site tracking
Notifications
Maintenance reminders use local notifications scheduled on your device. No reminder data is sent to a server.
Vehicle recall lookups and VIN auto-fill
If you use the recall lookup feature or VIN auto-fill when adding a vehicle, your vehicle's VIN or make/model/year is sent to the U.S. National Highway Traffic Safety Administration (NHTSA) public API to retrieve recall information or decode vehicle details. No account identifier accompanies these requests. NHTSA is a government service; see their site for their data practices.
Data retention and deletion
Because your records are stored on your device and in your personal iCloud, you control them directly. Deleting data in the app deletes it from your device and your iCloud sync. Deleting the app and its iCloud data removes everything. If you signed in, you can delete your account from inside the app (Settings → Delete Account): this removes your account record and sign-in identity from our backend. Your vehicle records on the device are not affected. If you need help, contact us at the address below.
Children
Carvico is not directed at children under 13 and we do not knowingly collect personal information from them.
Changes to this policy
If we change this policy, we will update this page and the "last updated" date above. Material changes to what data leaves your device will also be disclosed in the app.
Contact
Questions about privacy: hello@mycarvico.com