EV Lens1. Who we are
The controller responsible for your personal data under the GDPR is:
[Legal / company name]
[Street address]
[Postal code, City, Germany]
Email: privacy@evlends.de
If we are legally required to appoint a Data Protection Officer, their contact details are: [DPO name & email, or “not appointed”].
2. The short version
- EV Lens turns your camera into a vehicle-identification tool. Image analysis begins on your device.
- We only send a selected, cropped vehicle image to our recognition service — not a continuous video feed.
- Location is used only while you use the app, and only to work out your market. Your device resolves this to a country code; we do not need your precise coordinates for it.
- We never sell your personal data, and we do not use it for cross-company advertising tracking.
- Payments and subscriptions are handled by Apple — we never see your card details.
3. What we process
Camera imagery
When you scan a vehicle, a cropped still image may be sent to our backend for recognition. We use it to identify the vehicle and return technical information. We do not intentionally upload continuous raw video, and we do not use your images to identify people.
Approximate location
With your permission, EV Lens uses “When In Use” location to determine your current country/market so specifications, pricing and consumption figures are the right ones for where you are. The market decision happens on-device; the backend receives a country code rather than raw latitude and longitude. You can decline — a manual market fallback is available.
Account & identifiers
If you sign in (including with Sign in with Apple), we process an account identifier and, where you choose to share it, your email, to maintain your account, your saved Garage, recommendations, and your subscription entitlement.
Purchases & subscription status
When you subscribe, Apple processes the payment. We receive and store your subscription status (active, level, renewal/expiry) via Apple’s App Store Server APIs so we can unlock the right features. We never receive your full payment-card information.
Support communications
If you email us, we process your message and contact details to help you and keep a record of the request.
Diagnostics
We may process limited technical diagnostics (for example crash information) to keep the app stable. [Confirm/adjust to match your production analytics stack, and disclose any SDK that collects diagnostics.]
4. Why we process it, and our legal bases
- To provide the app’s core features — recognition, specifications, Garage, recommendations. Legal basis: performance of a contract (Art. 6(1)(b) GDPR), and your consent for camera and location access (Art. 6(1)(a)).
- To operate subscriptions — unlocking Pro/Professional features and honouring renewals and restores. Legal basis: contract (Art. 6(1)(b)).
- To keep the service secure and reliable — abuse prevention, diagnostics, admin controls. Legal basis: our legitimate interests (Art. 6(1)(f)).
- To answer support requests — legal basis: legitimate interests / contract.
Where we rely on consent, you can withdraw it at any time (for example by revoking camera or location permission in iOS Settings); this does not affect processing already carried out.
5. Service providers we work with
We share data only with providers that help us run EV Lens, under appropriate data-processing terms:
- Apple — app distribution, Sign in with Apple, and all in-app subscription billing.
- Supabase — authentication and database services for your account and app data.
- OpenAI — powers optional online research features. Requests are made server-side, and our research calls are configured not to retain the request content for model training (
store: false). - Our hosting provider — [e.g. Vercel / Render / your backend host], which runs our API and website.
We do not sell personal data and do not share it with advertising networks.
6. International data transfers
Some providers above may process data outside the EU/EEA (for example in the United States). Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the provider’s certification under the EU–US Data Privacy Framework. [Confirm the specific mechanism for each provider you use.]
7. How long we keep your data
We keep personal data only as long as needed for the purpose it was collected, or as required by law:
- Scanned images: [state your retention — e.g. processed transiently and not stored, or retained for N days].
- Account & Garage data: for as long as your account exists, then deleted or anonymised.
- Subscription records: as needed to operate the subscription and meet tax/accounting obligations.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent. To exercise any of these, email privacy@evlends.de.
You also have the right to lodge a complaint with a supervisory authority. In Germany this is your state Data Protection Authority (Landesdatenschutzbehörde). [You may name your competent authority here.]
9. Children
EV Lens is not directed at children and is not intended for use by anyone under the age required for a valid Apple ID in their country. We do not knowingly process children’s personal data.
10. Security
We use encryption in transit, server-side handling of sensitive credentials (such as our AI keys), and access controls on administrative functions. Service-role credentials are never embedded in the app. No system is perfectly secure, but we work to protect your data proportionately to its sensitivity.
11. Changes to this policy
We may update this policy as the app evolves. We will change the “last updated” date above and, for material changes, provide a more prominent notice.
12. Contact
Questions about privacy? Email privacy@evlends.de or write to the address in section 1. For general help, see Support.