Privacy Policy

Who processes your data

Muvoo is operated by Marek Choleva (a private individual), who is the controller of your personal data. For questions and requests about your personal data, contact cholevaapps@gmail.com.

What data we process

• Account: email address and password. The password is stored only in hashed form, so nobody can see it, not even us.
• Data you enter into the app: vehicles (e.g. make, model, licence plate, VIN, colour, technical details, notes), vehicle photos, records (service, mileage, fuel and charging, prices), reminders and vignettes.
• Settings: language, units, theme and default reminders.
• Technical data: IP address, browser type and access time in server logs, used for operation and security.

Your email and password are required to create an account; without them you can't use the app. Everything else you enter is voluntary.

We don't collect precise location data, we don't sell data to third parties, we don't share it with advertisers and we don't track you outside the app.

Why and on what legal basis

• Providing the app (account, storing and showing your data, reminders, emails for sign-up confirmation and password reset): performance of a contract, i.e. the terms of use (Art. 6(1)(b) GDPR).
• Service emails about your account and how the app works (e.g. security alerts, changes to the terms, discontinuation of the service, replies to your requests): performance of a contract and legitimate interest (Art. 6(1)(b) and (f) GDPR). We don't send marketing emails.
• Security and operation (server logs, abuse prevention, backups): legitimate interest (Art. 6(1)(f) GDPR).
• Anonymous visitor statistics: legitimate interest in improving the app (Art. 6(1)(f) GDPR).
• Recommendations in the app (e.g. a shop banner or a link to engine oil next to an oil change reminder): legitimate interest in direct marketing, which funds the free app (Art. 6(1)(f) and Recital 47 GDPR).

There are two kinds of recommendations:

• General: based on the app language and the page shown (e.g. a link to buy a vignette in the vignette form), the same for everyone. Your data isn't used for them.
• Personalized: based on your country, which we estimate from your IP address (and don't store), and on the type of record or reminder shown (e.g. a link to engine oil next to an oil change reminder).

No data goes to advertisers. You can turn off personalized recommendations at any time in Settings or ask us to do so by email. You will then see only general ones.

We don't use automated decision-making or profiling that would have legal or similarly significant effects on you.

Who else handles the data

Data is processed only by service providers the app can't work without (processors). They act only on our instructions:

• Supabase: database, sign-in and photo storage. Data is stored in the EU (Frankfurt, Germany).
• Resend: sending emails (sign-up confirmation, password reset). Processes your email address.
• OVHcloud: a server (VPS) in the EU that runs the app, the visitor statistics and the backups.
• Cloudflare (R2): storage of database and photo backups in the EU. The backups are encrypted with a key only the operator holds, so Cloudflare can't see their content.

If any of them processes data outside the EU (e.g. in the USA), this is based on the Standard Contractual Clauses approved by the European Commission or the EU-US Data Privacy Framework.

We disclose data to public authorities (e.g. police or courts) only when required by law.

Cookies and visitor statistics

Muvoo uses only strictly necessary and functional cookies and similar browser storage, so it needs neither your consent nor a cookie banner:

• sb-…-auth-token: keeps you signed in (strictly necessary).
• NEXT_LOCALE: remembers your language.
• theme: remembers light or dark mode (1 year).
• sessionStorage: a temporary flag when changing the language in Settings, cleared when the window is closed.

We measure traffic with Umami, which runs on our own server. It uses no cookies, doesn't track you across websites and stores only aggregated, anonymous data (e.g. page views, country, device type). The data doesn't go to any third party.

We use no advertising or tracking cookies (e.g. Google Analytics, Facebook Pixel).

How long we keep data

• Account data and everything you enter is kept for as long as you have an account.
• When you delete your account in Settings, the account, all data and photos are deleted immediately.
• Database backups are kept for at most 30 days. Data of a deleted account may therefore remain in backups for up to 30 more days before it is removed from there too. We restore an account from a backup only at your explicit request.
• Server logs are kept for at most 30 days.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on legitimate interest.

• You can export your data (JSON or CSV, without photos) and delete your account directly in the app under Settings.
• You can edit most of your data yourself in the app at any time.
• Send any other requests to cholevaapps@gmail.com. We will reply within one month.

If you believe we handle your data unlawfully, you can lodge a complaint with the data protection authority in the country where you live, or with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

Security

Communication with the app is encrypted (HTTPS). Passwords are stored only in hashed form. Access to data is restricted in the database so that each user can see only their own data.

Only the operator has technical access to the data and uses it only to resolve problems or at your request.

Changes

We may update this policy, for example when a new feature or service is added. The date of the last change is shown at the top. We will let you know about significant changes in the app or by email.

Change history