1. What data we collect
When you use the Kodu app we collect the following data: name, email address, phone number, vehicle data (make, model, licence plate, VIN, mileage), maintenance records, GPS location for drive logs, and company details for service accounts (company name, registration number, address).
2. Purpose of processing
We use your data to: provide vehicle management services, send reminders about maintenance and document expiry, show service centers near you, manage service accounts and their garages, and improve our services.
3. Data storage and protection
Data is stored on secure servers using encryption. Only authorized personnel have access. We use standard security measures including encrypted data transfer (TLS/SSL) and regular security audits.
4. Data sharing
We do not sell your personal data to third parties. Data may only be shared with: your car service (if you are assigned to one), infrastructure providers that run the service, or where required by law.
5. Your rights
Under GDPR you have the right to access your data, correct inaccurate data, erase your data, restrict processing, data portability, and to object to processing. To exercise your rights, contact us at the email address below.
6. Cookies and analytics
We use only essential cookies for login and session functionality. We do not use advertising cookies. We use anonymous analytics to improve our services.
7. Data retention
We keep your data only for as long as your account is active, or as long as necessary to meet legal obligations. After account closure we delete or anonymize your personal data.
8. Security and abuse prevention
To protect the service and other users' data from misuse, we process limited security data. We log when you open the app together with your IP address and the time, and we record if a screenshot is attempted and on which screen it happened. To deter and trace unauthorized copying of other people's vehicle and personal data, the app also displays an invisible watermark tied to your account across its screens: it is not visible in normal use, but lets us identify the account from a leaked screenshot or a photo of the screen. The legal basis is our legitimate interest in security and preventing misuse (Art. 6(1)(f) GDPR); you may object to this processing as described in 'Your rights'.
9. Contact
If you have any questions about privacy, contact us at privacy@kodu.one.