Privacy Policy
Effective July 1, 2026 · Your location data is yours. Here is exactly how we treat it.
1. What we collect
Account: name, email, and password (hashed). Vehicles: make, model, year, and odometer readings you enter. Trips: GPS location, speed, and route for trips you record or that auto-detection starts. Drive detection (optional): sparse background location and geofence events while automatic drive detection is enabled, so we can recognize when a drive likely starts or ends. Maintenance: services, costs, and receipt or diagnosis photos you log. Device: app version, device model, and crash reports to keep MyCa working. Bluetooth (optional): car stereo and/or OBD adapter connection signals to help identify which vehicle you are using and to support drive detection and live engine data.
2. Location, precisely
When you start a trip manually, or when automatic drive detection (which you can turn off in Profile) recognizes driving, we collect GPS to record speed, distance, and route for that trip. If automatic drive detection is on, MyCa also uses background location (Always / background permission) while the app is not open: sparse location updates and a geofence around where you parked, so we can wake and begin recording when you likely start driving, and stop when you park. That background sensing is for detection only — we do not store continuous route history outside of trips you record. You can turn automatic detection off at any time; then we do not listen in the background. Routes for recorded trips are stored encrypted and are visible only to you and Family members you explicitly share with.
3. What we never do
We do not sell your personal data. We do not share your location or routes with advertisers or data brokers. We do not read your receipts for anything other than showing them back to you.
4. How we use data
To run the product: record trips, compute distances and costs, remind you about maintenance, and show nearby service centers. Aggregated, anonymized statistics (e.g. average service intervals by model) may be used to improve reminders — never in a way that identifies you.
5. Sharing
With service providers who host our infrastructure and process payments, under strict contracts. With service centers only if you tap Call, WhatsApp, or Directions — which opens the respective app; we pass nothing else. With authorities only when legally required.
6. Retention and deletion
Your data is kept while your account is active. Delete a trip, a car, or your whole account anytime from the app; account deletion permanently removes your personal data within 30 days, except records we must keep for tax or legal reasons.
7. Your rights
You can access, export (PDF/CSV), correct, or delete your data from Profile → Account, or by emailing privacy@myca.app. We respond within 30 days.
8. Security
Data is encrypted in transit (TLS) and at rest. Access inside MyCa is role-restricted and logged. No system is perfect — if a breach affects you, we will notify you without undue delay.
9. Children
MyCa is not directed at children under 18 and we do not knowingly collect their data.
10. Changes and contact
If this policy changes materially, we will notify you in the app before the change takes effect. Questions: privacy@myca.app.