Privacy Policy

1. Information We Process

We process only information needed to operate the App:

• Account information: email address, authentication identifiers, and basic profile information provided by your chosen sign-in method.
• Profile and preferences: display name, country, language, currency, timezone, units, and App settings.
• Your records: work sessions, income, expenses, tips, mileage, vehicles, passenger counts, notes, receipts you attach, and selected or custom platforms and categories.
• Generated information: dates, totals, history, reports, and analysis based on your records.
• Subscription information: purchase, product, entitlement, and expiry information linked to your CarGain account. We do not receive full payment card details.
• Location: current precise location only when you request nearby weather. We do not request background location or save coordinates in your records.
• Technical information: crash, error, performance, device, App, and limited navigation information. Technical diagnostics run automatically when configured and cannot currently be disabled in the App.
• Optional analytics: interaction, navigation, and session-replay information only when you enable product analytics in Privacy settings. PostHog session replay masks text, images, and platform views by default.
• Deletion information: request date, scheduled deletion date, selected feedback reason, and any note you provide.
• Telegram support chat: if you contact support through Telegram, we store your Telegram chat and account identifiers, the CarGain account it is linked to, and your messages. Message text and attachments are encrypted. The one-time code used to link your Telegram chat to your account is stored only as a cryptographic hash and expires within minutes.

The App also stores an encrypted record cache, offline changes, and pending receipt uploads on your device, together with preferences and temporary App state. Expense receipts you choose are stored in private account storage.

We do not sell personal data, use it for advertising, or perform cross-app tracking. Receipt attachment uses the operating system's document picker. The App does not request access to the camera, microphone, contacts, full photo library, or background location.

2. How We Use Information

We use information to:

• create and protect your account;
• store, sync, and report your records;
• provide weather, subscriptions, notifications, and other App features;
• verify purchases and restore paid access;
• prevent abuse and fix technical problems;
• improve the App when you enable optional analytics; and
• comply with legal, billing, and security obligations.

We rely on our contract with you for core App functions; legitimate interests for security and technical reliability; your consent for optional analytics, including session replay and location; and legal obligations where applicable.

3. Storage and Security

Account data and records are stored using secure cloud infrastructure. Local records and offline changes are encrypted on your device. We use encrypted connections and account-level access controls, but no storage or transmission method is completely secure.

4. Sharing

We share information only when needed with the following service providers:

• Supabase — cloud storage, database, authentication, and server operations;
• Apple and Google — the sign-in methods you choose, app distribution, payments, and subscription billing;
• RevenueCat — subscription management and entitlement verification;
• Sentry — crash, error, and performance diagnostics;
• PostHog — optional product analytics and masked session replay, only when you enable it. When you are signed in, PostHog may receive a stable CarGain user identifier;
• weather, security, and App-update providers; and
• authorities, where required by legal obligations or valid requests.

We may change providers over time and will update this policy when a change is material. Providers may process information outside Türkiye and must protect it in accordance with applicable law. We do not sell or rent your data.

5. Your Choices and Rights

You can edit your records and preferences in the App, disable optional product analytics, and control location and notification permissions through App or device settings.

You may request access, correction, export, or deletion of your personal data and exercise other rights available under applicable law. Contact info@cargain.xyz if you need help.

6. Retention and Account Deletion

We keep your account and records while your account is active. You can request account deletion in the App from Settings → Privacy and data → Delete my account. An accepted deletion request starts a 30-day grace period. Signing in during that period cancels the request. After it ends, the account and associated cloud records are deleted. We retain subscription purchase and entitlement information for an additional 3 months to handle billing, refunds, fraud, and related legal obligations, and then delete it.

Technical diagnostic and optional analytics information is kept for limited periods on our providers' systems. Crash and error data is kept for up to 90 days. PostHog event, person, and session-replay data is kept according to our configured PostHog retention settings and is then deleted or aggregated.

A deletion request can be submitted at any time, even while an app-store subscription is still active. Deleting your account does not cancel the subscription — you manage or cancel the subscription in the store where you purchased it.

When you submit the request, the App also clears the local data associated with your account on this device. Already-collected optional analytics may remain in PostHog until the configured retention period ends, after which it is deleted or aggregated.

7. Children's Privacy

CarGain is intended for professional drivers and not for anyone under 18. We do not knowingly collect personal data from minors.

8. Changes

We may update this policy when the App or legal requirements change. The date above shows the latest revision. Material changes will be made visible where required.

9. Contact

Email: info@cargain.xyz