Privacy policy

1. Data controller

The legal entity responsible for processing personal data related to this app and the carcontrol-obd2.app website:

• Cafaro Carmelina — Innovatek
• Contrada Piano del Pero 11, 84046 Ascea (SA), Italia
• P.IVA 06424410659
• privacy@carcontrol-obd2.app

The data you create in the app (vehicles, trips, refuels, documents) stays on your device under your sole control: for that data we are neither controller nor processor. For the advertising shown in the free version, Google acts as an independent controller for the advertising identifier and ad-serving data, as described in section 5.

2. When this policy applies

This policy applies to:

• The carcontrol-obd2.app website
• The Car Control - OBD2 Android app available on Google Play

3. Data processed on your device

This information is processed entirely on your device and never leaves your phone:

• Vehicle profile you create (make, model, year, optional license plate)
• Live OBD-II readings during connection (RPM, speed, coolant, etc.) — held in memory only
• Trips you record (GPS coordinates, duration, fuel used, average speed) — saved locally
• Refuels and maintenance entries you log — saved locally
• Precise location: while you record a trip (route points), when you open the fuel-price screen (nearby stations) and — only if you enable automatic trip recording — in the background, to detect when the car starts and stops
• Bluetooth device list and pairing state, only while the app is open

4. What we do NOT collect by default

The app talks to none of our servers — we have none. We do not collect, transmit or store your name, location history, vehicle data, trips, refuels, contact list or IP address. We use no Crashlytics and no telemetry in the app. The only network connections are to public fuel-price sources and map tiles (section 6) and, in the free version, to Google's advertising service (section 5).

5. Advertising in the free version (Google AdMob)

The free version shows a small banner on some screens, served by Google AdMob (Google Ireland Ltd.). To serve and measure ads the AdMob SDK processes on Google's systems: the Android advertising identifier (resettable in your device settings), your IP address and coarse location derived from it, device and app information (model, OS version, app package, language) and ad-interaction data (impressions, taps). We never receive these data; they are exchanged directly between your device and Google.

In the European Economic Area, the United Kingdom and Switzerland, before any ad is shown you are asked for consent through Google's consent form (IAB TCF v2.2). If you refuse, only non-personalised or limited ads are shown, based on context rather than on your profile. You can review or change your choice at any time from Settings → Ad privacy options. Legal basis: consent (personalised ads) or legitimate interest of Google as an independent controller (non-personalised ads, fraud prevention).

Car Control Pro, a one-time purchase through Google Play, removes advertising entirely: the AdMob SDK is no longer initialised and no advertising data is processed. The purchase is handled by Google Play Billing; we only learn from the Play library on your device that the product is owned, and we do not see your payment details.

How Google uses data when you use apps that show its ads: policies.google.com/technologies/partner-sites. Google's privacy policy: policies.google.com/privacy.

6. Third-party services and processors

The app connects to the following public fuel-price and map sources only when needed, without sending your personal data:

• MIMIT (Ministero delle Imprese e del Made in Italy) — Italian fuel prices
• Roulez-Eco (data.economie.gouv.fr) — French fuel prices
• Geoportal Gasolineras (sedeaplicaciones.minetur.gob.es) — Spanish fuel prices
• data.public.lu — Luxembourg fuel prices
• CMA (UK Competition and Markets Authority retailer feeds) — UK fuel prices
• European Central Bank — daily exchange rates for currency conversion
• OpenStreetMap (osmdroid) — map tiles for trip routes and station map

In addition, the following Google services are used:

• Google Ireland Ltd. / Google LLC — AdMob advertising (free version only, as an independent controller) and Google Play Billing for the Pro purchase. Location: EU + USA (under Standard Contractual Clauses).

7. International transfers

We transfer nothing ourselves, since we hold no personal data. Google's advertising and billing services may transfer data to the United States: those transfers rely on the European Commission's Standard Contractual Clauses and Google's participation in the EU-US Data Privacy Framework.

8. Data retention

• Local data: stays on your device until you delete it or uninstall the app.
• Advertising data: processed by Google under its own retention policies (see section 5); the advertising identifier can be reset or deleted from your Android settings at any time.

9. Security

We apply technical and organisational measures appropriate to the risk:

• TLS 1.2+ for all data in transit
• No servers of ours and no account: there is no remote copy of your data to protect. Local data is kept in app-private storage that other apps cannot read.

10. Permissions we request

• Bluetooth (scan and connect): to pair with your OBD-II adapter and detect your car's head unit
• Location (precise, and in the background only with automatic trip recording enabled): to record trip routes via GPS, detect departure and parking, and find nearby fuel stations. Required by Android for any Bluetooth scan
• Notifications: to inform you about trip status, low fuel, scheduled deadlines
• Foreground service: to keep the OBD connection and GPS tracking alive while the app is in background during a trip
• Vibrate: for haptic feedback on warnings
• Internet: for fuel price downloads, ECB rates, map tiles and, in the free version, advertising. The advertising identifier permission (AD_ID) is declared for AdMob and is not used for anything else.

11. Backup, export and deletion

From Settings you can export a full backup as a single ZIP file and restore it on a new device. Since we keep no data about you, there is nothing to delete on our side: to remove your local data, uninstall the app or use Settings → Storage. To reset or delete the advertising identifier, use Android's Settings → Google → Ads.

12. Your rights

Under the GDPR you can access your data (Art. 15), rectify it (Art. 16), erase it (Art. 17), restrict or object to processing (Arts. 18 and 21), export it in a machine-readable format (Art. 20) and withdraw consent at any time (Art. 7.3). For local data you exercise these rights yourself through export and uninstall; for advertising data you can withdraw consent from Settings → Ad privacy options and exercise your rights towards Google as the controller. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali.

13. Children

The app is not intended for children under 16 and we do not knowingly collect their data. If you believe a minor has provided us with personal data, contact us and we will delete it.

14. Changes to this policy

If we update this policy we will publish a new version on this page with a fresh update date. Material changes will be highlighted in the app or by email.

15. Contact

For any privacy-related question or to exercise your rights, write to: privacy@carcontrol-obd2.app