1. What data we collect
When you use the Kodu app we collect the following data: name, email address, phone number, vehicle data (make, model, licence plate, VIN, mileage), maintenance records, GPS location for drive logs, and company details for service accounts (company name, registration number, address).
2. Purpose of processing
We use your data to: provide vehicle management services, send reminders about maintenance and document expiry, show service centers near you, manage service accounts and their garages, and improve our services.
3. Data storage and protection
Data is stored on secure servers using encryption. Only authorized personnel have access. We use standard security measures including encrypted data transfer (TLS/SSL) and regular security audits.
4. Data sharing
We do not sell your personal data to third parties. Data may only be shared with: your car service (if you are assigned to one), infrastructure providers that run the service, or where required by law.
5. Your rights
Under GDPR you have the right to access your data, correct inaccurate data, erase your data, restrict processing, data portability, and to object to processing. To exercise your rights, contact us at the email address below.
6. Cookies and analytics
We use only essential cookies for login and session functionality. We do not use advertising cookies. We use anonymous analytics to improve our services.
7. Data retention
We keep your data only for as long as your account is active, or as long as necessary to meet legal obligations. After account closure we delete or anonymize your personal data.
8. Security and abuse prevention
To protect the service and other users' data from misuse, we process limited security data. We log when you open the app together with your IP address and the time, and we record if a screenshot is attempted and on which screen it happened. To deter and trace unauthorized copying of other people's vehicle and personal data, the app also displays an invisible watermark tied to your account across its screens: it is not visible in normal use, but lets us identify the account from a leaked screenshot or a photo of the screen. The legal basis is our legitimate interest in security and preventing misuse (Art. 6(1)(f) GDPR); you may object to this processing as described in 'Your rights'.
9. Feedback and diagnostic log
When you send feedback from the app, we receive its subject and text, your app version and phone model, and your account's email and name so we can reply. The app's diagnostic log is attached only if you turn on "Attach diagnostic log"; it contains what the app did recently, including approximate locations (to about 100 m). Only Kodu administrators read feedback, and every opening of a diagnostic log is recorded. Administrators are notified that a new message arrived, without its content. The legal basis is our legitimate interest in answering you and fixing faults (Art. 6(1)(f) GDPR) and, for the diagnostic log, your consent (Art. 6(1)(a) GDPR), which you give per message and can withdraw by asking us to delete the log. Feedback is deleted together with your account. Neither your feedback nor the diagnostic log leaves our servers in the EU. The app's push notifications (such as reminders) are delivered through OneSignal, Inc. (USA); transfers outside the EU rely on the safeguards of Chapter V GDPR, such as standard contractual clauses.
10. Children
Kodu is not meant for children under 16, and we do not knowingly collect their personal data. Everyone confirms at registration that they are at least 16. We do not ask for a date of birth, so as not to collect more than we need. If we learn that an account belongs to a child under 16, we close it and delete all related data. If you are a parent or guardian and believe your child has created an account, write to us at the address below.
11. Contact
If you have any questions about privacy, contact us at privacy@kodu.one.