Privacy Policy

Last updated: April 2026

AutoLog ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This policy explains what data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR).

AutoLog is operated as an independent UK-based service. Our contact email is hello@autologapp.co.uk.

1. Data We Collect

We collect only the data necessary to provide the AutoLog service. The table below summarises what we collect and why.

Data Purpose
Email address and display name Account authentication and communication
Vehicle registration numbers and details (make, model, MOT/tax dates, mileage) Core app functionality — vehicle tracking
Fuel fill-up data (mileage, cost, fuel station name) Fuel and cost tracking features
Service and maintenance records Service history and maintenance scheduling
Scanned document images Document storage — stored encrypted in private cloud storage
Trip distance data (distance only) Trip logging — no routes or GPS paths are stored permanently
Device location Used only for trip distance calculation; never stored permanently
App usage data Subscription management and service improvement

2. Data We Do Not Collect

AutoLog does not collect:

  • GPS routes or travel paths
  • Contact lists or address book data
  • Payment card or bank information (all payments are handled entirely by Apple)
  • Browsing history or data from other apps

3. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

  • Contract performance — processing necessary to provide the service you signed up for (e.g. storing vehicle records, sending MOT reminders).
  • Legitimate interests — improving the reliability and performance of AutoLog, provided these interests are not overridden by your rights.
  • Consent — where you explicitly grant permission (e.g. location access for trip detection).

4. Third-Party Services

AutoLog uses the following third-party services to operate. Each is subject to its own privacy policy.

Service Purpose Data shared
Supabase (EU London region) Database and authentication Account and vehicle data
DVLA Vehicle Enquiry API (UK Government) Vehicle registration lookups Registration number only
DVSA MOT History API (UK Government) MOT history retrieval Registration number only
OpenAI Document OCR and maintenance data Document images and registration number; no other PII
Cloudflare Website hosting and mechanic share pages Standard web request data
Apple (App Store, Sign in with Apple, StoreKit) App distribution, authentication, subscriptions Handled directly by Apple under their privacy policy
Resend Transactional email delivery Email address

We do not sell your data to any third party.

5. Data Security

All data is transmitted over encrypted HTTPS connections. Scanned document images are stored encrypted at rest in private cloud storage accessible only to your account. We use Supabase's row-level security to ensure your data is accessible only to you.

6. Data Retention

Your account data is retained for as long as your account is active. If you delete your account, all associated personal data is permanently removed within 30 days. Anonymised, aggregated statistics that cannot identify you may be retained for longer for service improvement purposes.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access — request a copy of the data we hold about you.
  • Right to rectification — request correction of inaccurate data.
  • Right to erasure — delete your account and all associated data at any time from within the app, or by contacting us.
  • Right to data portability — request an export of your data in a machine-readable format.
  • Right to object — object to processing based on legitimate interests.
  • Right to restrict processing — request that we limit how we use your data in certain circumstances.

To exercise any of these rights, contact us at hello@autologapp.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

The AutoLog website uses no tracking cookies. Only strictly necessary session cookies are used to maintain your login state. No third-party advertising or analytics cookies are set.

9. Children's Privacy

AutoLog is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you by email. Continued use of AutoLog after changes take effect constitutes acceptance of the updated policy. The date at the top of this page indicates when the policy was last revised.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

AutoLog
Email: hello@autologapp.co.uk