Privacy Policy
Effective July 1, 2026 · Your location data is yours. Here is exactly how we treat it.
1. What we collect
Account: name, email, and password (hashed). Vehicles: make, model, year, and odometer readings you enter. Trips: GPS location, speed, and route — only while a trip is being tracked. Maintenance: services, costs, and receipt photos you log. Device: app version, device model, and crash reports to keep MyCa working.
2. Location, precisely
Location is collected only during an active trip — when you start one or when auto-detection (which you can turn off) recognizes driving. We never collect location in the background outside trips. Routes are stored encrypted and are visible only to you and Family members you explicitly share with.
3. What we never do
We do not sell your personal data. We do not share your location or routes with advertisers or data brokers. We do not read your receipts for anything other than showing them back to you.
4. How we use data
To run the product: record trips, compute distances and costs, remind you about maintenance, and show nearby service centers. Aggregated, anonymized statistics (e.g. average service intervals by model) may be used to improve reminders — never in a way that identifies you.
5. Sharing
With service providers who host our infrastructure and process payments, under strict contracts. With service centers only if you tap Call, WhatsApp, or Directions — which opens the respective app; we pass nothing else. With authorities only when legally required.
6. Retention and deletion
Your data is kept while your account is active. Delete a trip, a car, or your whole account anytime from the app; account deletion permanently removes your personal data within 30 days, except records we must keep for tax or legal reasons.
7. Your rights
You can access, export (PDF/CSV), correct, or delete your data from Profile → Account, or by emailing privacy@myca.app. We respond within 30 days.
8. Security
Data is encrypted in transit (TLS) and at rest. Access inside MyCa is role-restricted and logged. No system is perfect — if a breach affects you, we will notify you without undue delay.
9. Children
MyCa is not directed at children under 18 and we do not knowingly collect their data.
10. Changes and contact
If this policy changes materially, we will notify you in the app before the change takes effect. Questions: privacy@myca.app.