Privacy Policy

1. Who we are

The controller responsible for your personal data under the GDPR is:

Yogesh Kumar
Avalon Courtyard, Near Cadila Bridge
Ghodasar, Ahmedabad 380050, Gujarat, India
Email: y.kumar@evlens.de

If we are legally required to appoint a Data Protection Officer, their contact details are: not appointed.

2. The short version

• EV Lens turns your camera into a vehicle-identification tool. Image analysis begins on your device.
• We only send a selected, cropped vehicle image to our recognition service — not a continuous video feed.
• Location is used only while you use the app, and only to work out your market. Your device resolves this to a country code; we do not need your precise coordinates for it.
• We never sell your personal data, and we do not use it for cross-company advertising tracking.
• EV Lens is free: there are no in-app purchases or subscriptions, and we never see any payment details.

3. What we process

Camera imagery

When you scan a vehicle, a cropped still image may be sent to our backend for recognition. We use it to identify the vehicle and return technical information. We do not intentionally upload continuous raw video, and we do not use your images to identify people.

Approximate location

With your permission, EV Lens uses “When In Use” location to determine your current country/market so specifications, pricing and consumption figures are the right ones for where you are. The market decision happens on-device; the backend receives a country code rather than raw latitude and longitude. You can decline — a manual market fallback is available.

No account

EV Lens does not require or offer an account. Saved vehicles and preferences are stored locally on your device. The current version has no in-app purchases or subscriptions, so no purchase or subscription data is processed.

Support communications

If you email us, we process your message and contact details to help you and keep a record of the request.

Diagnostics

We may process limited technical diagnostics (for example crash information) to keep the app stable. [Confirm/adjust to match your production analytics stack, and disclose any SDK that collects diagnostics.]

4. Why we process it, and our legal bases

• To provide the app’s core features — recognition, specifications, Garage, recommendations. Legal basis: performance of a contract (Art. 6(1)(b) GDPR), and your consent for camera and location access (Art. 6(1)(a)).
• To keep the service secure and reliable — abuse prevention, diagnostics, admin controls. Legal basis: our legitimate interests (Art. 6(1)(f)).
• To answer support requests — legal basis: legitimate interests / contract.

Where we rely on consent, you can withdraw it at any time (for example by revoking camera or location permission in iOS Settings); this does not affect processing already carried out.

5. Service providers we work with

We share data only with providers that help us run EV Lens, under appropriate data-processing terms:

• Apple — app distribution through the App Store.
• Supabase — hosting of our vehicle specification database.
• OpenAI — powers optional online research features. Requests are made server-side, and our research calls are configured not to retain the request content for model training (store: false).
• Our hosting provider — Render (backend API, EU·Frankfurt), Cloudflare (website), and Supabase (vehicle database, EU), which run our API and website.

We do not sell personal data and do not share it with advertising networks.

6. International data transfers

Some providers above may process data outside the EU/EEA (for example in the United States). Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the provider’s certification under the EU–US Data Privacy Framework. [Confirm the specific mechanism for each provider you use.]

7. How long we keep your data

We keep personal data only as long as needed for the purpose it was collected, or as required by law:

• Scanned images: processed transiently to identify the vehicle and not retained afterwards.
• Garage data: stored only on your device; delete the app to remove it.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to processing based on legitimate interests, and to withdraw consent. To exercise any of these, email y.kumar@evlens.de.

You also have the right to lodge a complaint with a supervisory authority. In Germany this is your state Data Protection Authority (Landesdatenschutzbehörde). [You may name your competent authority here.]

9. Children

EV Lens is not directed at children and is not intended for use by anyone under the age required for a valid Apple ID in their country. We do not knowingly process children’s personal data.

10. Security

We use encryption in transit, server-side handling of sensitive credentials (such as our AI keys), and access controls on administrative functions. Service-role credentials are never embedded in the app. No system is perfectly secure, but we work to protect your data proportionately to its sensitivity.

11. Changes to this policy

We may update this policy as the app evolves. We will change the “last updated” date above and, for material changes, provide a more prominent notice.

12. Contact

Questions about privacy? Email y.kumar@evlens.de or write to the address in section 1. For general help, see Support.