CarCircle Privacy Policy

Last updated: 28 May 2026

This policy is prepared for the CarCircle mobile application. Before publishing on Google Play, complete the developer name, contact email and public web URL with your official information.

1. Developer and contact

For privacy, data access, correction or deletion requests, users can create a support ticket from Profile > Legal & Safety > Support inside the app. The contact email published on the Google Play developer profile is also an official contact channel.

2. Data collected and processed

Depending on how the user uses the app, CarCircle processes:

• Account data: email address, user ID, username, full name, sign-in provider, account security and account status.
• Profile data: profile photo, bio, birth date, profile background/frame and profile likes.
• Vehicle and garage data: vehicle type, brand, model, year, vehicle label/plate, vehicle image, technical profile, important dates, tire information and parts history.
• Fuel and expense data: fuel logs, consumption, kilometer/mile values, expense records, category, amount, date and notes.
• Community data: forum posts, comments, replies, images, likes, saved posts, notifications, reports and moderation records.
• Point market data: digital items, coupons, campaigns, physical product requests, request status and point spend/earn history.
• Delivery data: where required for physical products or coupons, full name, phone number, email, address and delivery/cargo notes.
• Support data: support subject, messages, replies and ticket status.
• Notification data: Android push notification token, notification target and notification status.
• Image and file data: profile/vehicle/forum images and other user-uploaded images. Files added to the vehicle documents area are stored locally on the device and are not sent to CarCircle servers unless the user shares them.

3. Camera, gallery, notifications and OCR

CarCircle may request camera/gallery access for profile photos, vehicle images, forum images, product images or fuel receipt scanning. Receipt OCR is used to help fill form fields such as date, fuel amount, total paid and station. OCR does not automatically create a saved record unless the user saves the form.

If push notifications are enabled, the device notification token is stored with the user account to send notifications.

4. Purposes of use

Data is used to:

• Create accounts, manage sign-in and authenticate users.
• Display garage, vehicle, fuel, expense, tire and maintenance information.
• Operate forum, comments, notifications, profile, badges and points features.
• Manage point market, product/coupon/campaign requests and support workflows.
• Detect abuse, spam, fake accounts and security risks.
• Improve user experience and maintain app functionality.
• Handle legal obligations, disputes and safety requests.

5. Sharing and service providers

CarCircle does not sell user data. Data may be processed by service providers required to operate the app:

• Google Firebase Authentication for authentication.
• Google Firebase Firestore for the app database.
• Firebase/Google infrastructure and notification services for sessions, data storage and push notifications.
• Android/Capacitor device services for camera, file, sharing, notification and local storage actions.

Forum posts, comments, username, profile image and profile/vehicle information that the user chooses to make public may be visible to other users.

6. Security

Personal data is protected through HTTPS/Firebase infrastructure and Firestore security rules. Users should not share account credentials and should use strong passwords.

7. Retention and deletion

Users can request account deletion from the edit profile screen inside the app. After the request, the account becomes inactive. If the user signs in again within 14 days, the deletion request is cancelled. If the user does not sign in within 14 days, the account and associated user data are processed for deletion.

Limited records may be retained longer where required for security, abuse prevention, legal obligations or dispute resolution.

For Google Play, you must also provide a public web page where users can request account and data deletion even if they no longer have the app installed.

8. Children’s privacy

CarCircle is not designed as a child-directed service. The Play Store target audience settings must match the actual target audience.

9. Changes

This policy may be updated when app features, data practices or legal requirements change. Important changes may be announced in the app or on the Play Store listing.