Privacy Policy

Last updated: November 2, 2026

This policy explains what Car Money ("the app", "we") collects, why, and what never leaves your device. In short: your vehicle data is yours and stays in your iCloud; we do not sell data, show ads or use tracking SDKs.

There is no sign-up

Car Money has no registration, password or login. On first launch the app creates a random identifier (a UUID) and keeps it in your private iCloud, so all your devices share it. It contains no name, email or phone number. Where this policy says "account", it means this identifier.

Your data stays in your iCloud

Everything you enter — vehicles, expenses, fuel, maintenance, reminders, trips and their locations, photos and documents — is stored on your device and synced through your private iCloud (Apple CloudKit). We cannot see it and it is not stored on our servers. You can delete it at any time in the app, or by removing the app's data from iCloud in your device settings.

Text recognition runs on your device. What leaves it is only what you choose to send us — a file you import, a receipt photo, a support message or a consumption diagnostics report — described below.

What we do receive

• Purchases. Subscriptions and purchases are handled by Apple. We use RevenueCat to know which devices your Premium belongs to; it receives the random identifier and your purchase history. We never see payment details.
• Usage and diagnostics. We use Firebase (Google) for app analytics, crash reports and push notifications. It receives the random identifier, which screens and features are used, crash and performance data, and a push token. Our own server also receives basic app events with the random identifier; when the app starts, they also carry the device model, system version, language, region and currency, so we can understand how the app is used and fix problems. None of this includes your vehicle or expense records.
• App integrity. To make sure requests come from the genuine app and not from someone imitating it, the app uses Apple's App Attest: once per install it creates a key in your device's secure hardware, Apple confirms it, and our server keeps its public part together with the random identifier. It holds no personal data.
• Support. When you write to us in the app's chat, we receive your messages, any photos or files you attach, your email if you choose to give it, and the random identifier so we can match the conversation to your purchase.
• Consumption diagnostics. Only if you tap "Send diagnostics" in the support chat, the app sends us a report of your fuel records — dates, odometer readings, volumes and how consumption was worked out — so we can find why a figure looks wrong. It goes into your support conversation and is used for nothing else.
• CSV import. If you import a spreadsheet and the app cannot read it on the device, the file is sent to our server to be read. If our own parser cannot read it either, it is passed to Anthropic's Claude model to work out the columns. The file is kept on our server so we can fix import problems, and the parsed result is cached so the same file is not processed twice.
• Receipt scans. When you scan a receipt, the photo is sent to our server and read by Anthropic's Claude model to fill in the amount, date, fuel volume and price. The photo is used only for that, is not stored by us after it has been read, and is not used to train AI models. We keep a record that a scan took place (the time, the random identifier and its technical cost), not the photo or what it shows. If this is turned off or unavailable, the receipt is read on your device instead.
• Receipts the app could not read. To teach the scanner new receipt layouts, the app may send the recognised text of a receipt with card and invoice numbers already removed on your device. It carries no account, device or photo.
• Surveys. If you choose to answer an in-app survey, we store your answers with the random identifier, app version, language and country, and your email only if you ask us to contact you.

How we use it

Only to run the app: deliver Premium, answer support requests, import your files, fix bugs and decide what to improve. We do not sell, rent or share your data with advertisers or data brokers, we do not use it for advertising, and we do not track you across other apps or websites.

Service providers

The data above is processed on our behalf by: Apple (iCloud, purchases), RevenueCat (purchases), Google Firebase (analytics, crash reports, push notifications, server database) and Anthropic (reading receipt photos, and CSV files our own parser cannot). They may process it outside your country, under their own privacy terms.

How long we keep it

Support conversations with their attachments and diagnostics, survey answers, imported files and import results are kept while they are useful for support and for improving the app. Analytics data is kept according to Firebase's retention settings. You can ask us to delete anything we hold about you at any time.

Your choices

• You can turn off push notifications and location access in your device settings.
• You can request a copy or deletion of the data we hold by writing to us in the app's chat, which lets us find it by the random identifier, or by email.

Children

Car Money is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes, we will update this page and the date at the top.

Contact

Questions about privacy: car-money@obodianskyi.com