Privacy policy for Vehicle Ledger

This policy applies to Vehicle Ledger for iOS and macOS, including its widgets. The provider and privacy contact is Gustav Gutsche, Schlossplatz 1, 66482 Zweibrücken, Germany. You can contact me at mail@gustavgutsche.de.

Visits to my website are additionally covered by its separate website privacy policy. The hosting and optional web analytics described there are not services embedded in the Vehicle Ledger app.

• Privacy contact: mail@gustavgutsche.de
• Website privacy policy (German)
• Legal notice (German)

The app processes information you enter, import or capture using a feature you choose. This can include vehicle details such as registration plates and vehicle identification numbers, mileage, purchases and sales, costs, payments, financing, leases and insurance, maintenance, reminders, trips, driver assignments and notes. Photos, receipts, documents and recognized text can contain further personal information, such as names, addresses or contract numbers.

This information supports the vehicle management, cost calculations, reports, document storage and reminders you request. The app does not retrieve contacts or vehicle documents from other apps without your selection. Driver and assignment details are part of your own records; entering them does not send invitations or automatically give anyone access.

Your entries and attachments are stored on your device. The standard app uses Apple iCloud (CloudKit) to sync them between your devices using the same Apple Account. This transfers the data to Apple and stores it in the private database for this app in your iCloud account. Certain privacy settings are also synchronized through iCloud. Sync requires available Apple services, a network connection and sufficient iCloud storage; changes may therefore be delayed.

I do not operate a separate server for your vehicle records and, as the developer, do not have administrative access to the contents of your private CloudKit database. The app does not ask for your Apple Account password. Apple operates iCloud and processes the account and technical connection data required for its service under its own privacy information. Apple may process data internationally; its privacy policy explains recipients, safeguards and transfers outside the European Economic Area.

• Apple Privacy Policy

Camera, photos and files: The camera is used when you start scanning a receipt or document. The system photo and file pickers give the app access to the content you select. Text recognition runs on your device; documents are not sent to an external OCR or AI service for recognition. Documents and text you save can subsequently become part of your iCloud sync.

Location: Only when you start the relevant feature and grant permission can the app add your current location to a record or capture location points and timestamps during a GPS trip recording you start. These support your trip records and distance calculation. The app does not request permanent background location permission. Saved locations form part of your vehicle records and may sync through iCloud.

Notifications: With your permission, the device displays reminders. Depending on your system settings, their content may appear on the lock screen. Device protection: The optional app lock uses Apple device authentication. The app receives an authentication result, not Face ID or Touch ID templates or your device passcode.

You can revoke permissions in system settings. The corresponding optional feature will then be unavailable or limited; manual entries remain possible. Revoking a permission does not automatically delete previously saved data.

Widgets and reminders can display selected vehicle information on system surfaces. The optional app lock also protects the summaries designed for those surfaces. Vehicles are indexed in Spotlight only after you enable that setting; indexing is suppressed while the app lock is enabled. Your device and lock-screen settings also determine what others can see.

When you export or share a report, document or backup, you select the destination and recipient using system controls. The exported file may contain personal and financial information. Copies held by your chosen recipient or storage provider are subject to their terms. The app does not automatically send these exports to me. I do not sell your vehicle records or use them for advertising or profiling.

If you contact me, I process your email address, message and any attachments you choose to send to handle your request. The email services used by the parties process the data necessary to deliver the message. Please provide only the information needed for your request and redact unnecessary personal information from receipts or screenshots.

The app contains no custom telemetry, advertising or analytics SDK. Depending on your system and sharing settings, Apple may process technical usage or crash reports and provide reports to developers for troubleshooting. Apple's privacy information explains these Apple features and their settings.

The app retains your vehicle records until you delete them. Archiving or marking a vehicle as sold is not deletion. You can remove records using the available delete controls; permanently deleting a vehicle removes its related vehicle records and attachments from the active database. Deletions are transmitted when iCloud sync is available; the app cannot confirm immediate deletion on every device or within Apple's systems.

Before restoring a backup, the app creates a local safety copy. It attempts to retain only the three most recent safety copies; filesystem errors can prevent removal of older files. These copies may contain entries you have since deleted and remain until cleanup or removal of the local app data. The app excludes these copies from device backups. Deleting active records also does not change files you previously exported or independent device and iCloud backups.

Removing the app from a device does not automatically delete its iCloud data. Also manage cloud data and backups in your Apple Account's iCloud settings, and remove your exports wherever you stored them. Since I cannot administratively access your private database, I cannot remotely delete your vehicle records for you; I can help you with the necessary steps.

I retain support messages only for as long as needed to handle and follow up on your request. Legal retention duties or the necessary protection of legal claims may require longer retention. The relevant messages are deleted when those reasons no longer apply.

Where personal data is processed under my responsibility, processing necessary to deliver the app functions and contract-related support you request is based on performance of a contract (Article 6(1)(b) GDPR). Optional features requiring consent are based on your consent (Article 6(1)(a) GDPR). General enquiries are handled in the legitimate interest of responding and troubleshooting (Article 6(1)(f) GDPR). Legally required retention is based on Article 6(1)(c) GDPR.

Subject to the applicable legal conditions, you have rights of access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. You can withdraw consent at any time for future processing without affecting the lawfulness of prior processing. Use the contact above to exercise these rights. You can also inspect, correct and export vehicle records using the app's views, editing controls and export functions.

You may complain to a supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. The authority for the provider's location is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Germany. No automated decisions producing legal or similarly significant effects are made about you. You are not legally required to enter data in the app; a feature cannot operate without the information necessary for it.

• Rhineland-Palatinate data protection authority

This policy will be updated when features or data processing change. The current version and its revision date will appear on this page. Where changed processing requires consent, it will be obtained before that processing begins.