Privacy Policy

Version 1.2 · Effective June 21, 2026

We built Fuelytics with privacy as a core design choice, not an afterthought. This policy explains, in plain language, what personal information we collect, why we collect it, how it is shared and protected, how long we keep it, and the choices and rights you have. By creating an account and accepting this policy, you agree to the practices described here. If you do not agree, please do not use the service.

1. What we collect

• Account & identity: your email address (required to sign in), a display name, and — only if you choose SMS sign-in — a phone number. Passwords are handled by Firebase Authentication and are never stored in readable form.
• Your vehicle group: the vehicle group name you choose when you sign up, and your membership and role (owner, contributor, or viewer) within each group you belong to. Vehicle groups are used to group together vehicles and the users who can see and/or add data about them. For details about who can see information inside the group, refer to section 3, “How your data is shared within a group.”
• Vehicles: make, model, year, fuel type, tank capacity, starting odometer, and a label you choose.
• Fill-ups: date, odometer reading, gallons, price per gallon, total cost, and fuel grade. If you turn on location capture for a vehicle, we also store the gas-station name and GPS coordinates. We calculate miles driven, fuel economy (MPG), and cost per mile from this data.
• Photos (optional): pictures of your odometer and the fuel pump — only if you enable image capture for a vehicle. You can turn this off at any time. Be aware that not enabling this feature will require manual data entry of every fill-up.
• Location (optional): GPS coordinates at the time of a fill-up — only if you enable location capture for a vehicle. Turning it off stops future collection.
• Technical & audit data: crash reports and performance metrics (which do not include your fill-up data), and an audit log that records who created, changed, or deleted records, and when.

We do not collect government IDs, payment card numbers, biometric data, or data about your contacts.

2. Why we collect it

• To provide the service: your account, group, vehicles, and fill-ups are needed to make the app work — these are required to use Fuelytics.
• To keep the service secure and accurate: the audit log helps us protect the integrity of the data and lets you review and dispute changes to your records.
• With your consent: location and photo capture are entirely optional, set per vehicle, and can be switched off whenever you like.

3. How your data is shared within a group

Fuelytics organizes data into Groups — a shared workspace you create (becoming its Owner) or are invited into as a Contributor or Viewer. This is important to understand:

• Within your group, your vehicles and fill-ups are visible to other members according to their role: Owners can view and edit every record in the group and manage its members; Contributors can view all records and add their own; Viewers can read records only.
• Your records are therefore not private from the Owners and Contributors of your group. Only join or create a group with people you intend to share this data with.
• Nothing is visible across groups. A member of one group cannot see another group’s data. Only a Fuelytics administrator can access data across groups, for support and security purposes.

4. Who else processes your data

We use trusted third-party services to run Fuelytics. We do not sell your personal information or use it for advertising.

AI fill-up capture (Anthropic). If you use the optional AI fill-up capture feature, the photos you take of your odometer and fuel pump (and the related capture metadata) are sent to Anthropic’s Claude API so it can read the images and extract the fill-up details for you. Anthropic acts as a sub-processor for this single purpose. We do not store these photos: in our live service they are processed in passing — sent for extraction and then discarded — and are never saved to our systems. Under our agreement with Anthropic, this content is not used to train its models, a data processing agreement (DPA) is in force, and Anthropic’s default retention is 30 days, which is our standing, permanent retention period for this content. (We explored a custom zero-retention arrangement with Anthropic; it was declined, so the 30-day default applies and nothing further is pending.) This feature is entirely optional and off unless you turn on image capture for a vehicle; if you don’t use it, your photos are never sent to Anthropic.

SMS verification (Firebase Phone Auth). If you choose to sign in with your phone number, Google’s Firebase Phone Authentication sends the one-time verification code to your phone. Only your phone number is used, solely to deliver and verify the code. Firebase acts as a sub-processor for this purpose under the same Google Cloud / Firebase data processing agreement that covers the rest of our infrastructure. If you don’t use phone sign-in, no phone number is collected or sent.

Fuelytics operations team. Our operations team may access your data only when it’s needed to run the service — to troubleshoot a problem, perform maintenance, investigate a security issue, or respond to a support request you’ve made. This access is limited to those purposes, restricted to authorized team members, and recorded in our audit log. We don’t use your fill-up data for anything else.

5. Disclosure to law enforcement and legal requests

We don’t share your personal data with anyone except as described in this policy. We may disclose data to law enforcement or other government authorities only when we are legally required to do so — for example, in response to a valid subpoena, court order, search warrant, or other lawful request — or where we reasonably believe disclosure is necessary to comply with the law, prevent harm or fraud, protect someone’s safety, or establish or defend our legal rights.

Where we are legally permitted to, we will make reasonable efforts to notify the affected user before disclosing their data, and we limit any disclosure to what the request legally requires.

6. How long we keep it

7. How we protect it

• Encrypted in transit (HTTPS/TLS) and at rest.
• Sign-in is required for all access; what you can see and do is limited to your group and role, and enforced on our servers — not just in the app.
• App Check guards against impersonation of the app, and every create, edit, and delete is recorded in the audit log.

8. Your rights and choices

• Access: request a copy of the personal data we hold about you, delivered as a CSV export. The export includes your fill-up records, vehicle events, and your account and group metadata (membership and role). It does not include the audit log (retained for the security and integrity purpose described in Section 6) or photos (we do not store capture photos — see Section 4).
• Deletion: request deletion of your account and associated personal data.
• Correction: ask us to fix inaccurate records (you can also edit your own fill-ups in the app).
• Portability: your export is formatted so it can be re-imported elsewhere.
• Opt-outs: turn location and photo capture on or off per vehicle at any time.

We respond to requests within 30 days of verifying your identity. To make a request, use your account settings or email the contact below. Depending on where you live — for example under the California CCPA/CPRA or the EU/UK GDPR — you may have additional rights, which we honor.

9. Children

Fuelytics is not directed to children, and you must be 16 or older to create an account or use the Service. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us data, contact us and we will delete it.

10. Changes to this policy

If we make a material change — for example to what we collect, how long we keep it, or who processes it — we will notify you and ask you to review and accept the updated policy before you continue using the service. Minor, non-material changes are posted with an updated effective date. The current version always appears in the app and on the web.

11. Contact

Questions, requests, or privacy concerns: contact us at privacy@fuelytics.app.

This user-facing policy summarizes our full Privacy Policy & Data Governance document; where the two differ, the governance document governs.