Privacy Policy

This policy explains what information the OdoPit Android app (“OdoPit”, “the app”) and the odopit.com website use, what leaves your device, why, how long it is kept, and the choices you have. OdoPit is published by blackwind (“we”, “us”).

1. Summary

2. Data stored only on your device

The app stores the following in a database on your device. We do not receive it unless it is listed in section 3.

• Vehicles: nickname, registration number, type, make, model, variant, year, fuel type, transmission and other details you enter, and the region saved when you added the vehicle.
• Fuel and charging logs, service logs, service items, notes and costs. Each log keeps the region saved when you created it, and each fuel or charging log keeps its currency.
• App settings, such as your region, currency, units and your sharing choice.
• Photos you take or choose of receipts or the odometer. Text is read from them on your device using Google ML Kit text recognition. The photos are not uploaded by the app.

3. Data you can choose to share with us (optional)

When the app first asks, you can choose to share data, or decline. You can change your choice later in Settings > Telemetry & Sync > Share usage data. “What’s shared” in the same place shows the list below. Nothing in this section is sent unless you have agreed to the current version of the sharing notice in the app.

If you agree, the app first sends your choice to our servers. Only after our servers have recorded it does the app send the data below. If your choice cannot be recorded, for example because you are offline, the app sends nothing else and tries again the next time you open or return to the app. After that, the app sends new and changed records when you open the app or return to it.

The app sends the following to our servers:

A random device ID

The app creates this when it first needs it. It is not your Android advertising ID, device serial number, phone number or Google account. We use it to group your records together and to record your sharing choice. You can see it, and copy it, in Settings > Telemetry & Sync > Your device ID. When you delete your shared data (section 8), the app creates a new ID. If you uninstall the app or clear its data, a new ID is created, and we cannot link the old one to you.

Your sharing choice

Sent with the time you last changed it.

Vehicle details

For each vehicle in the app:

• vehicle type, make, model, variant and year
• fuel type, second fuel type, transmission, and whether it is a hybrid/bi-fuel or plug-in vehicle
• the vehicle-catalog entry you matched it to, if any
• the app’s internal number for the vehicle, and when you last edited it
• the region (country) saved on the vehicle

Make, model and variant can be typed freely, so whatever you type in those fields is sent. We never send the vehicle nickname or registration number.

Fuel and charging logs

• date and time, quantity and unit, total cost, price per unit and currency
• the region (country) saved on the log
• odometer reading
• fuel type
• EV charging details: battery level before and after charging, whether it was a home charge, and the type of charging session (plug-in or battery swap)
• a copy of the vehicle details above

We never send fuel station or charging location names.

Service logs

• date and total cost
• the service type, and the description and cost of each service item
• the region (country) saved on the log
• a copy of the vehicle details above

The service type and item descriptions are the text you type, and they are sent as you entered them. Our servers need a service type for every service log, so the app sends “General” when you leave it empty. Please do not put personal information, such as names or phone numbers, in these fields.

Your region (country) and currency

• The app starts with the country in your phone’s language and region setting (for example “IN” from “English (India)”). If that setting has no country, it uses the United States (“US”).
• You can change your region at any time in Settings > Regional Settings > Region.
• The region is saved on each vehicle, fuel or charging log and service log when you create it, and is sent with that record. Editing a record does not change its region, and changing your region later does not change records you already created.
• Each fuel or charging log also saves its currency, which is sent with the log. The currency starts as your region’s currency (for example CAD for Canada).
• The app does not use GPS, Wi-Fi, your IP address or any other location source to set your region.

Why we use this data

• to calculate community benchmarks, such as average fuel, charging and service costs by country and vehicle
• to improve and correct our vehicle catalog (makes, models and variants), for example by adding vehicles that people use but the catalog does not list yet
• for market research, such as trends in which vehicles are used and what they cost to run
• to produce vehicle statistics, such as real-world fuel economy, charging efficiency and running costs by vehicle model and region, which we may publish or share (see below)

Combined statistics only. We may publish or share statistics built from shared data, for example on our website, in our apps and services, or with other organisations. These statistics combine data from many devices. We do not publish a figure when too few devices contribute to it for any one device’s data to stay hidden in it. Published statistics never include a device ID or text you typed, such as service descriptions.

We never sell, publish or share your individual records, and we do not use shared data for advertising or share it with advertisers.

4. Vehicle catalog lookups (no sharing choice needed)

When you add or edit a vehicle, the app asks our catalog service for matching makes, models, years and variants. It may also send the vehicle’s type, make, model, year, variant, fuel type and transmission to suggest a catalog match. The app also downloads a list of popular vehicles to store on your device: when you open your vehicle list and the stored list is out of date (it is refreshed about once a month), and when you change your region. These requests include a region (country, see section 3), normally your selected region or the region saved on the vehicle you are editing, so that the catalog shows vehicles for that region. They are sent whether or not you have chosen to share data, because the app needs them to add a vehicle. These requests do not include your device ID, nickname or registration number. We use them only to answer the request, and we do not store them.

5. Security of shared data (Play Integrity)

Each time the app sends shared data, your sharing choice or a request to delete your shared data to us, it asks Google Play to confirm that the request comes from a genuine copy of OdoPit, installed from Google Play, on a genuine Android device. Google Play processes information about the app and device for this check, under the Google Play Terms of Service. The app gives Google Play only a fingerprint (hash) of the request, not its contents. We receive only the result of the check. We use it to block fake or tampered requests, and we do not store it. If the check cannot be done, for example on a device without Google Play, the app does not send the data or the request. In that case you can still ask us by email to delete your shared data (section 8).

6. Advertising (Google AdMob)

The app shows banner ads through Google AdMob, operated by Google. Google, not us, collects the following through the AdMob software in the app: your IP address (used to estimate your general location), your Android advertising ID and app set ID, interactions with ads and the app (such as app launches and taps), and diagnostic information (such as app launch time and performance). Google uses this data to serve and measure ads, for analytics and to prevent fraud.

• Consent in the EEA, UK and Switzerland: if you are in these regions, the app shows Google’s consent form before ads are personalised.
• Your controls: you can reset or delete your advertising ID, or opt out of ad personalisation, in your Android settings (Settings > Privacy > Ads, or Google > Ads, depending on your device).
• How Google uses this data: policies.google.com/technologies/partner-sites
• Google Privacy Policy: policies.google.com/privacy

We do not receive your advertising ID, and AdMob does not receive the data you share with us under section 3.

7. Other Google services

• Google Sign-In and Google Drive backup (optional). If you use backup, you sign in with your Google account and the app saves a copy of its database to a hidden app folder in your own Google Drive. It can restore it later. We do not receive your backup, your name or your email address. Google handles this data under its privacy policy. You can delete the backup from your Google Drive settings (Manage apps).
• Fonts. The app may download its font from Google Fonts the first time it runs. Google receives your IP address as part of that download.
• ML Kit. Text recognition runs on your device. Your photos are not sent to us.

8. How long we keep shared data, and deleting it

• Retention: we keep the data you share under section 3 for up to 24 months from when we receive it. After that our servers delete it automatically. Vehicle details are kept while your device is still sharing: we delete them once we have received no update to the vehicle, and no fuel, charging or service log from your device, for 24 months. Your sharing choice is kept while we hold any data from your device ID, and is deleted once we hold none and the choice has not changed for 24 months.
• Server logs: our servers keep technical logs, such as the time of a request and its result, for up to 24 months, for operations and security. These logs do not contain your device ID: they contain only a short code derived from it with a secret key, which cannot be turned back into the device ID. Deleting your shared data does not remove log entries; they are deleted when that period ends.
• IP address: like any internet service, our servers receive the IP address of each request. We use it only briefly, in memory, to limit how many requests one connection can send, and it may appear in our hosting provider’s access logs for the period above. We do not store it with your shared data or use it to find your location.
• Deleting data on your device does not delete shared copies. If you delete a vehicle, fuel log or service log in the app, any copy already shared stays on our servers. To remove shared copies, use “Delete my shared data” (below).
• Turning sharing off stops new data from being sent straight away. The app also sends your choice to our servers. If that fails, for example because you are offline, the app tries again when you next open or return to it; until then our records may still show that you share data, but the app sends nothing more. Turning sharing off does not delete data already shared: we keep it until you delete it (below) or until 24 months have passed since we received it.
• Uninstalling the app or clearing its data removes everything stored on your device. Shared copies remain, linked to a device ID that you can no longer see, until they are deleted automatically after 24 months. If you want them deleted sooner, delete your shared data in the app before you uninstall, or note your device ID first so you can ask us by email.

Deleting your shared data

In the app. Go to Settings > Telemetry & Sync > Delete my shared data and confirm. This:

• deletes everything our servers hold for this device’s ID: vehicle details, fuel and charging logs, service logs and their items, and your sharing choice
• turns sharing off straight away
• once our servers confirm the deletion, gives the app a new random device ID, so anything you share later is stored under the new ID. The app still identifies each vehicle by the same internal number, so we do not promise that newer data could never be matched with a copy of older data; we do not try to connect old and new IDs.
• keeps your vehicles and logs on your phone

If you are offline, or our servers cannot be reached, Settings shows “Deletion pending, will retry”. The app tries again when you open or return to the app, and sends no shared data until the deletion is done. The request goes through the same security check as other requests (section 5), so on a device without Google Play the in-app request cannot complete; use email instead.

If you turn sharing on again later, the app asks our servers to record your new choice under the new ID and then shares your vehicles and logs again, including records it had shared before the deletion.

By email. Settings > Telemetry & Sync shows Your device ID, with a copy button. Email cruiselog90@gmail.com, include that ID, and ask us to delete your shared data. We delete everything we hold for that ID, as listed above. We need the ID because we do not store your name, email address or account with shared data, so we cannot find your data any other way. If you no longer have the ID (for example, after uninstalling the app), we cannot find your data; it will still be deleted automatically after 24 months. An email request does not change the ID in the app, so turn sharing off first if you do not want new data sent under it. We aim to complete requests within 30 days. We use your email only to handle your request.

What deletion does not cover: community benchmarks, published statistics and vehicle catalog corrections that are already combined and not linked to any device ID, and data collected by Google (sections 6, 7 and 12), which you control through your Google and Android settings.

9. Who we share data with

• We do not sell the data in section 3 or share your individual records with third parties.
• We use Hostinger, with servers in India, to host our servers and store the data on our behalf.
• On the website, Google provides Google Analytics on our behalf, only if you accept analytics cookies (section 12).
• We may disclose data if required by law, or to protect the security of our service or users.
• Statistics we publish or share, in the app, on our website, in other services or with other organisations, combine data from many devices and do not identify any device ID (section 3).

10. Your rights and legal bases

Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal data, to withdraw consent, and to complain to a data protection authority.

• Shared data (section 3): based on your consent. You can withdraw it at any time in Settings > Telemetry & Sync > Share usage data. Withdrawing does not affect sharing that already happened.
• Catalog lookups, security checks and rate limiting (sections 4, 5 and 8): based on our legitimate interest in providing and protecting the app.
• Ads (section 6): handled by Google. In the EEA, UK and Switzerland this is based on the consent you give in Google’s consent form.
• Website analytics (section 12): based on your consent, which you can withdraw at any time with “Cookie settings”. Website server logs are based on our legitimate interest in running and protecting the site.

To delete the data you shared, see “Deleting your shared data” in section 8. Because shared data is linked only to a random device ID, we can act on a request only for a device ID you give us.

11. Children

OdoPit is a vehicle expense app intended for adults. It is not directed at children under 13, and we do not knowingly collect data from children.

12. This website (odopit.com)

This section covers visits to odopit.com. It is separate from the app: nothing the website collects is linked to the app’s device ID or to the data you share from the app.

On every visit

• Server logs. Our web server records each page request: your IP address, the page, the time, the result, the page you came from and your browser’s user-agent (browser and operating system). We use these logs only to run and protect the site, and keep them for up to 14 days.
• Your cookie choice. When you accept or reject analytics, your browser stores the choice and its date in its local storage (not a cookie), so the site does not ask on every page. It stays in your browser and is not sent to us. The site asks again after 12 months.

Google Analytics (only if you accept)

If you select Accept in the cookie banner, the site loads Google Analytics 4, operated by Google, so we can count visits and see which pages are read. Until you accept, Google Analytics is not loaded and nothing is sent to Google. If you select Reject, or make no choice, it is never loaded.

• Cookies: _ga and _ga_<id>, which hold a random ID for your browser, kept for up to 2 years.
• What Google receives: the pages you view and when, the page you came from, your browser, operating system, screen size and language, interactions such as scrolling, clicks on links to other sites and file downloads, and your IP address, which Google uses to estimate your country and city.
• Settings we use: Google signals and ad personalisation are off, and the advertising consent types stay denied, so this data is not used for advertising. Google Analytics keeps the data for 2 months.
• Google as our service provider: Google processes this data on our behalf, and it may be processed outside your country, including in the United States. See how Google uses information from sites that use its services and the Google Privacy Policy.
• Changing your mind: select Cookie settings at the bottom of any page. If you reject after accepting, the site deletes its Google Analytics cookies and stops sending data. Data already sent stays in Google Analytics until the 2-month period ends. You can also block or delete cookies in your browser settings.

13. Changes to this policy

We update this policy when the app’s data use changes, and we change the effective date at the top. If a change affects the data you share, the app asks for your agreement again before sharing more.

14. Contact us

blackwind
Email: cruiselog90@gmail.com