Privacy Policy
Odomint is a UK car management app. This policy explains exactly what it collects, where that data goes, and how to get rid of it. It describes what the app actually does, not what it might do one day.
What stays on your phone
Most of Odomint works without sending anything anywhere. The following never leave your device unless you explicitly turn on account backup:
- Your documents. Insurance certificates, V5C, MOT certificates, receipts and photos you add are written to the app's private storage area, readable only by Odomint and encrypted at rest by iOS.
- Your parking location, whether you save it yourself or let the app record it. Automatic parking is off unless you switch it on in the Map tab. When it is on, the app asks iOS to wake it after you have travelled a significant distance so it can note where the car stopped. That runs entirely on the phone, the spot is written to the phone's own storage, and it is never transmitted to us or to anyone else. Switching it off in the Map tab ends it immediately and deletes the working trace it keeps.
- Your reminders. MOT, tax, insurance and service notifications are scheduled locally on the device and never leave it.
- Arrival alerts are the exception, and they do use a push token. If you switch on arrival alerts for a Circle, we hold a push token for your phone so the notification can reach it. A push token identifies a device, not you. It is stored in our database where nobody, including the other members of your Circle, can read it, and it is passed to Expo's push service and then to Apple in order to deliver the message. The notification carries a name and a place label and no coordinates, because there are none to send. Turning arrival alerts off for every Circle deletes the token.
- News alerts work the same way, without an account. If you switch on alerts in UK driving news, your phone's push token is sent to our server and kept in its private storage, filed under a one-way fingerprint of the token, with nothing else attached: no account, no location, no car. It is used only to send an alert when government news changes the rules or costs for drivers, at most one a day, through Expo and Apple. Turning the alerts off deletes it. Reading the news itself sends nothing about you; the stories come from GOV.UK under the Open Government Licence.
Note that iOS may include the app's storage in your personal iCloud device backup, under your own Apple account. That backup is controlled by you through iOS Settings, not by us.
What is sent, and to whom
| Data | Sent to | Why |
|---|---|---|
| Vehicle registration | Our server (Cloudflare Workers), then DVLA and DVSA | To look up the vehicle's make, model, tax status and MOT history |
| A random device identifier | Our server | To apply per-device rate limits and prevent abuse of our API keys. It is generated on first launch, is not your advertising ID, and is not linked to your name unless you create an account |
| Approximate location | Our server, then Open Charge Map; and OpenStreetMap (Overpass) | Only when you open the map, to find petrol stations and chargepoints near you. It is used for that search and not stored against you |
| Email address, and name if you provide one | Supabase (our database provider, EU region) | Only if you create an account |
| That you reached a place you named, if you switch that on | Supabase, readable only by the Circles you chose | The label you gave it and "arrived" or "left". No coordinates: the place stays on your phone and the check runs there. Deleted after 12 hours |
| Your vehicles and service records | Supabase | Only if you create an account, so your garage survives losing your phone |
| What you have bought (Premium, vehicle checks), your account ID if you are signed in, an app-specific device ID, and which subscription offer you were shown | Adapty, which runs our in-app purchases (Apple takes the payment; Adapty records it) | Only when you view an offer or buy something. Used to deliver what you paid for on every device you sign in to, and to see which offer works best. Adapty does not receive your IP address or your advertising identifier, and it is deleted with your account |
| A car's status, and your display name | The other people in a Circle you have joined | Only for cars you have explicitly shared into that Circle. See "Circles" below |
| A summary and simplified route of a finished drive | Supabase, and the members of the Circles you have chosen | Only while drive sharing is switched on for that Circle. Off by default. See "Sharing your drives" below |
| Totals of your driving: top speed, miles, number of drives, time driving, longest drive, best average, and the date your record starts | Supabase, and the members of the Circles you have chosen | Only while "Share my stats" is switched on for that Circle. Off by default. Never a route, a place or a time of day. See "Sharing your driving stats" below |
| Your current location, while you are sharing it | Supabase, and the members of the Circles you have chosen | Only while live location sharing is switched on, and only for the Circles you switch it on for. Off by default. See "Live location" below |
Circles
A Circle is a shared garage. If you create or join one and then share a car into it, everyone in that Circle can see that car's make, model, registration, MOT and tax dates, mileage and health score, together with your display name if you have set one. They cannot see your email address, and they can never see your documents. Those are not in your account at all.
Membership requires the Circle's invite code, which is generated by our database and is unique. You control what is shared: tapping Stop sharing on a car, or leaving the Circle, removes their access at once. If you created the Circle, deleting it removes it for everybody. The restriction is enforced in the database by row-level security, not only in the app.
Live location
You can share where your car is, in real time, with a Circle. It is off until you turn it on, it is decided per Circle (you might share with the Circle you have with friends and not the one you have with family) and you can switch it off at any time.
While it is on we store one position: where you are now. We do not keep a history of where you have been. Somebody watching sees the trail form on their screen as you move, but that exists only in their app while they are looking; it is never stored. Your own journey history, if you have that switched on, stays on your phone and is not part of this.
Switching sharing off for your last Circle deletes the stored position immediately, and leaving a Circle removes its sharing with it. A position we have not heard about for two hours is deleted automatically, because a stale dot on a map labelled live is worse than no dot.
Who may see it is enforced by row-level security in the database: another person's app can only read your position if you share a Circle AND you have switched sharing on for it. It is not a rule the app is trusted to follow.
This is the one feature that costs battery, because it needs continuous GPS rather than the low-power arrival detection everything else uses. That is stated in the app before you turn it on.
We do not sell your data
We do not sell, rent, or trade your personal information, not to advertisers, not to insurers, not to data brokers, not to anyone, under any circumstances. There is no advertising or tracking SDK in the app, there are no adverts, and nothing you do in Odomint follows you to other apps or websites. The one third-party SDK that sees anything is Adapty, which processes purchases. It sees what you bought and which offer you were shown, and nothing about your cars, drives or location.
Odomint is funded entirely by subscriptions. That is deliberate: it means our interests and yours point the same way, and there is no commercial reason for us to want more of your data than the app needs to work.
We do not build advertising or behavioural profiles, and we do not use your data to train artificial-intelligence models. Where the app sends something to a processor to do a job (DVLA to look up a registration, Open Charge Map to find a chargepoint), that processor does the job and nothing else.
If Odomint were ever sold or merged, your data would move with it, and you would be told before that happened so you could delete your account first.
Telling a Circle you arrived
You can mark places of your own (home, work, wherever) and have a Circle told when you reach one. It is off until you switch it on, it is decided per place and per Circle, and only you can create a place of yours. Nobody can put a boundary around you.
The place itself never leaves your phone. The coordinates are stored on the device and the check happens on the device. What is sent is the label you chose and the word "arrived" or "left". There is no location in it, and there is no column in our database that could hold one. So a Circle learns that you got home. It does not learn where you live, and neither do we, and neither would anybody who obtained a copy of the database.
It is separate from live location on purpose, because "do not show them where I am, but tell them I got home" is a reasonable thing to want. One row is kept per person, per Circle, per place (the current state, never a history) and it is deleted after twelve hours, when you switch the place off, when you delete the place, and the moment you leave the Circle.
Sharing your drives
The mileage tracker keeps a record of every journey on your device. It is not uploaded, it is not in your account backup, and it is not part of a Circle, unless you switch drive sharing on, which is off by default and decided per Circle, separately from live location.
One exception, and it is small. When a drive finishes, the coordinates of the two ends (where it started and where it stopped, never the route between them) are sent to Apple's geocoder so the journey can be labelled "Croydon to Camden" instead of two pairs of numbers. We ask for the town, not the street. The answer comes back to your phone and is stored there; we never see it, and if the lookup fails the journey simply keeps its numbers.
When it is on, a finished drive sends a summary and a simplified route: start and end times, distance, duration, top and average speed, how many stops, and roughly a hundred points describing the shape of the journey. That is enough to draw it on a map. The full-resolution trail, which is several hundred more points, never leaves your phone.
Switching a Circle off deletes the drives already shared into it, and leaving a Circle takes yours with you. Shared drives are removed automatically after 60 days; your own complete history stays on your device for as long as you keep it.
Sharing your driving stats
A Circle can also compare driving stats, who has the highest top speed, who has driven furthest. This is a separate switch, off by default and decided per Circle, independent of drive sharing and of live location.
When it is on, your phone sends totals only: your top speed, total miles, number of drives, time spent driving, longest single drive, best average speed, and the date your record starts. They are worked out on your phone from the drives it holds. No route, no place, no time of day and no individual drive is sent, so the totals cannot show where you have been or when. They are refreshed when a drive finishes and when you open the Circle.
Switching it off erases the numbers in our database straight away; this is enforced by the database itself, not just hidden by the app. Leaving the Circle deletes them, and deleting your account deletes them with everything else.
Artificial intelligence
There is none. Odomint does not send anything you store, photograph, type or drive to an AI model, not to Anthropic, not to OpenAI, not to anyone. Earlier versions had an AI mechanic and an AI receipt scanner; both were removed, along with every line of code that reached them. Every number this app shows you comes from DVLA, DVSA, your own phone's GPS, or something you typed in yourself.
The website
odomint.com sets no cookies, runs no analytics and loads nothing from any other company: every file, fonts included, comes from our own server. It keeps one note in your browser for the length of your visit, so its opening animation plays once rather than on every page.
Searching a number plate. When you search a registration on the website, it is sent to our server and on to the DVLA and DVSA to look the vehicle up, exactly as in the app. The answer is cached on our server for up to 24 hours, keyed by registration and linked to nobody. To stop the search being abused, we count searches per visitor using a one-way fingerprint of your IP address, made with a secret key. Your IP address itself is not stored, and the count expires within about 25 hours. Like every website, ours is delivered by a web host (Cloudflare), which processes your IP address to send you the pages.
What we do not do
- We do not sell or rent your data.
- We do not use it for advertising, and there is no advertising or tracking SDK in the app. Adapty, which processes purchases, is described in the table above.
- We do not track you across other apps or websites, and we do not ask for tracking permission because we do not track.
- We do not build a profile of you for any purpose beyond running the features you use.
How long it is kept
- On your device: until you delete the item, or delete the app.
- In your account: until you delete your account, at which point your vehicles, service records and account row are permanently deleted.
- Rate-limit counters: automatically expire within about 25 hours.
- Lookup results: cached on our server for up to 24 hours, keyed by registration, so repeated lookups do not hit DVLA again.
Deleting everything
In the app, open Profile:
- Erase all data removes everything held on the device.
- Delete account permanently deletes your account and all data stored against it on our servers. This cannot be undone.
You can also email privacy@odomint.com and we will action it.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict, object to, and receive a portable copy of your personal data. Email privacy@odomint.com. We respond within 30 days. If you are not satisfied, you may complain to the Information Commissioner's Office at ico.org.uk.
Children
Odomint is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes materially we will update the date above and note the change in the app.
Who is responsible
Odomint is operated by Hussan Afzal, trading as Odomint, a sole trader established in the United Kingdom, acting as data controller for the purposes of the UK GDPR. We are registered with the Information Commissioner's Office under registration number ZC242191, held in the full legal name Muhammad Hussan Afzal Afzal; our registered address is held against that registration and is available on the public register at ico.org.uk. For any privacy question, or to exercise any of the rights above, contact privacy@odomint.com.