App privacy policy

Who the controller is

The controller is Robert Dominguez, company ID 17310342, registered at Táborská 180, 257 06 Louňovice pod Blaníkem, Czechia, operator of the Najeto app and website. Contact: gdpr@najeto.com. Processing on the website is described in the website privacy policy.

Your records stay on your phone

Vehicles, fuel-ups, servicing, costs, trips and photos of documents are stored only on your device. They are never sent to our servers and we have no access to the contents of your garage. The app needs no account or registration to keep records.

• Camera and photo library — the app asks for access only when you actually attach a photo of a document. The image stays on the device.
• Deadline reminders — they are calculated on the device and delivered as local notifications. We do not route them through a server, so we never learn what they are about.
• Backups — you export a backup to a file and store it yourself. Wherever you put it, that service’s rules apply to it (a cloud drive or your phone’s system backup, for instance).

Purchases and subscription

Payment for the PRO subscription and for a one-off feature unlock is handled by the App Store or Google Play. We never see your card number or your billing details.

• Purchase validation — so the app knows what you have paid for, it passes the store receipt to RevenueCat, Inc. (USA). What is processed: an anonymous installation identifier, the product purchased, the store country and the validity of the purchase. Legal basis: performance of the contract. The transfer to the USA is covered by the European Commission’s standard contractual clauses.
• A purchase needs no account, so we do not link the identifier to your name or e-mail address.
• We keep purchase data for as long as the purchase lasts and then for at most 3 years, for complaints and accounting duties.

Analytics

We measure anonymous usage statistics with Google Analytics for Firebase. It is switched on only if you consent at first launch. Without consent nothing is sent. You can withdraw consent at any time in the app settings, with effect for the future.

• What is sent: an anonymous installation identifier, device model, OS version, language and country, app version and events such as “opened the overview” or “added a fuel-up”.
• What is not sent: the contents of your garage — number plates, VINs, amounts, photos or your location.
• The processor is Google Ireland Limited; data may also be processed in the USA under standard contractual clauses. The identifier disappears when you uninstall the app, and events are kept for at most 14 months.
• Legal basis: your consent. The app carries no advertising and we do not pass analytics data to ad networks.

Biometric unlocking

The app lock using Face ID, Touch ID or Android biometrics is optional and off by default. The check is performed entirely by the operating system — the app only receives a “verified / not verified” answer. Your fingerprint or face scan never reaches the app, we never store it and never send it anywhere; it stays in the secure part of your device. We therefore process no biometric data within the meaning of the GDPR. If the check fails, the system offers your device passcode.

Who we share data with

• RevenueCat, Inc. (USA) — validating and recording purchases.
• Google Ireland Limited — analytics, and only if you consented to it.
• Apple and Google as the operators of the store where the purchase was made.
• Nobody else. We do not sell data.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object. Because we have no access to the records on your phone, the fastest way to erase them is in the app or by uninstalling it. For purchases and analytics, write to gdpr@najeto.com. The operator is based in the Czech Republic, so the supervisory authority is the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, Prague 7. You may also complain to the supervisory authority in your own country.