What we collect — and what stays on your phone.
This Privacy Policy explains how CarSpend handles your information — the mobile application on Android and iOS ("the app"), and the CarSpend web app at vibesminds.com/carspend/app ("the web app"). Both are provided by USOTECH SRL ("we", "us", "our").
All app content stays in local storage on your phone. We have no access to it. You can export it to a file you control (Settings → Export data) and import it back at any time.
On Android, your device's built-in backup (Google's Auto Backup and device-to-device transfer) may include the app's records so they survive a phone upgrade or reinstall. This backup is managed by your device and your own Google account, encrypted, and never visible to us — you can turn it off in your device's backup settings. Attached photos and documents are kept out of the cloud backup; your AI API keys are stored encrypted and cannot be read from a backup on another device.
The "Ask" feature is optional:
In-app purchases and subscriptions are processed by your app store — Google Play on Android or the Apple App Store on iOS. We do not receive or store your payment details; the store handles the transaction and tells the app only whether you have an active entitlement.
The web app runs entirely in your browser. Your vehicles, fuel logs, expenses and everything else you import live in that browser's local storage — they are never uploaded, and we cannot see them. Clearing your browser's site data deletes them, so keep your backup file.
Unlocking Pro in the browser is the one part that talks to a server we run. When you redeem an unlock code issued by the phone app, the browser sends the signed code to our licence registry, hosted on Cloudflare Workers. The registry stores a single pair of opaque identifiers — the purchase the code came from and the browser currently using it — so that one purchase unlocks one browser at a time. It holds no name, no email, no payment details and no vehicle data, and the identifiers cannot be traced back to you by us. As with any web request, Cloudflare sees your IP address in transit. Activating a different browser overwrites the record; to have it removed, email us and we will delete it.
The app contains no third-party advertising and does not collect analytics or usage tracking.
We do not sell or share your data. Four third parties see something in the course of normal use, each limited to what its job needs: your app store (purchases), CARTO (map tiles), Nominatim (a single coordinate, only when your phone's own geocoder fails) and Cloudflare (the web app's licence check). If you turn on the cloud assistant, the AI provider you choose also receives your question and a short summary of the selected vehicle, as described above.
Because your data lives on your device, you control it. Deleting an entry removes it; uninstalling the app removes all app data from the device; importing a backup replaces the current data. On Android, a copy may remain in your own Google account's device backup (see "Device backups" above) until your device's backup replaces or expires it — restoring the app can bring that data back. We hold no server-side copy of your vehicle data. The one record we do hold is the web app's licence pair described above; it is overwritten when you activate another browser, and we will delete it on request.
CarSpend is not directed to children under 13 (or the minimum age in your region), and we do not knowingly collect data from them.
We may update this policy from time to time; the "Last updated" date above will change accordingly.
Questions about this policy? Email [email protected] or visit vibesminds.com.