Privacy

In effect from 17 October 2026

Who is responsible for your data

Operator: Adrián Lukács, company ID (IČO) 56268319, Žerotínová bašta 5012/19, 940 02 Nové Zámky, Slovakia.

Contact: autopas@adruvo.eu.

Without an account

Everything you note in Autopas (vehicles, deadlines, fill-ups, drives, costs, documents and photos) stays on your phone. We do not see it and it is not sent anywhere.

Reminders are scheduled by the phone itself. Location is used when you save a parking spot or record a drive for the logbook, and only while the app is in use. A drive you start keeps recording with the screen off until you stop it, shown by a notification on Android and the location indicator on iPhone. The app never asks for location all the time.

Receipts, invoices, the registration certificate and the green card are read on the phone by Google’s ML Kit. The photo and the text stay on the phone. ML Kit sends Google diagnostic information about how it runs (such as the device model, the app and how long reading took), not the photos or what was read. On Android, a VIN or payment code is scanned by Google Play services’ code scanner, also on the phone.

On Android, you pick your car from the phone’s paired Bluetooth devices, so the app can offer to record a drive when the phone connects to it. Over Bluetooth or Wi-Fi it also talks to an OBD-II adapter to read the fault codes. The car’s address stays on the phone. If you let the phone notice drives, Google Play services’ activity recognition tells the app, on the phone, when you start and stop driving. NFC writes the sticker for your car and starts or stops a drive when the phone touches it.

A Wear OS watch gets the next deadlines and where the car is parked from the phone through Google Play services’ Wearable Data Layer, kept between phone and watch. Android Auto shows the deadlines and the parked car on the car’s screen and, if the car offers it and you allow it, reads the odometer to keep the kilometres up to date. Both stay on the phone.

When you fill in details from the VIN, the app sends the VIN to the vPIC database of the US agency NHTSA. Nothing else is sent with it.

Exchange rates and average fuel prices for travel allowances come from the Autopas server, with no account. For a Czech car it sends the VIN, to find the inspection date in the ministry’s register. When you park in Prague or Brno it sends where the car is, to show the zone and its price. The server keeps none of it.

When you ask for a trip’s distance by road, the app sends the place names you typed to the Autopas server. It looks them up in OpenStreetMap Nominatim and gets the route from the public OSRM server. The server remembers places and distances for a month, with nothing linking them to you.

When you load payments from Fio banka, the phone asks Fio directly with your token, not through our server. The token stays in the phone’s secure storage.

With an account

You create an account with your e-mail or through Google or Apple. Google or Apple only confirms to the server who you are, and we keep the e-mail (or Apple’s private relay address) and the identifier it gives. We never see your Google or Apple password. We keep your e-mail, a name if you give one, and the garages and records you sync, attachments included. We use them only to sync, to share with the people you invite, for the e-mail reminders you turn on, and for the web overview.

If you turn on two-step sign-in, the server keeps your authenticator app’s secret until you turn it off. With sync, it keeps your phone’s push address until you sign out. Notices go through Expo’s push service and on to Google’s Firebase Cloud Messaging (Android) or Apple Push Notification service (iPhone). They name the garage, who added what kind of record and whether it waits for approval.

If you turn on reminders by e-mail, the server sends you the garage’s deadlines and last month’s costs. The calendar subscription makes a private address on the server listing the garage’s deadlines for Google or Apple Calendar. Anyone with the address can read them, so give it only to your own calendar. Turning the subscription off ends the address.

The data is stored on a server in the European Union. Sign-in codes and reminders are sent by e-mail through an e-mail delivery provider. The legal basis is the performance of a contract, the service you asked for.

Purchases

Payments are handled by Google Play or the App Store. We receive only a confirmation of the purchase, to turn on Pro or Business. We do not see your card.

What we do not do

No ads, no analytics of our own, no tracking across apps. The one exception is Google ML Kit’s diagnostics, above. We do not sell your data or give it to anyone for marketing.

How long, and your rights

We keep account data while you have the account and delete it from the server when you close it. You have the right of access, rectification, erasure, portability and objection. Write to autopas@adruvo.eu. You may also complain to the Slovak data protection authority.