Privacy Policy for Fuel

Last updated: September 2025

      Important Notice: This Privacy Policy complies with the
      requirements of the General Data Protection Regulation (GDPR) and provides
      comprehensive information about the processing of your personal data.
    

1. Data Controller

The data controller for data processing is:

Dennis Donner
Email: app-support@donner.io
Website: http://fuel.donner.io

2. Data Collection and Purpose of Processing

2.1 Registration Data

Data Collected: Email address, encrypted password, username (optional)

Purpose: Creation and management of your user account

Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)

2.2 Vehicle and Fuel Data

Data Collected: Vehicle information, fuel consumption data, maintenance records, expense tracking, odometer readings, fuel prices

Purpose: Provision of core functionalities (vehicle expense tracking, fuel consumption analysis, maintenance reminders, cost calculations)

Legal Basis: Art. 6 para. 1 lit. b GDPR (contract performance)

2.3 Mobile Device Data

Data Collected: Device ID, operating system and version, app version, device type, screen resolution, language and timezone settings

Purpose: App optimization for different devices, bug fixing, security

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

2.4 App Usage Data

Data Collected: App usage statistics, feature usage, crash reports, performance data

Purpose: Improvement of app functionality, bug fixing, user experience enhancement

Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

2.5 Location Data

Data Collected: GPS location data for gas station finder and route tracking (optional)

Purpose: Finding nearby gas stations and navigation assistance

Legal Basis: Art. 6 para. 1 lit. a GDPR (consent)

Retention Period: Location data is only stored temporarily and not linked to your identity

3. Cloud Services Used

3.1 Supabase (Backend Services)

Provider: Supabase, Inc., USA

Purpose: Database hosting, user authentication, API services

Data Transfer: Your data is transmitted encrypted to Supabase servers

Data Protection Level: Supabase is SOC 2 Type II certified and complies with EU data protection standards

More Information: Supabase Privacy Policy

3.2 Firebase (Google Cloud Services)

Provider: Google LLC, USA

Purpose: Push notifications, app analytics, crash reporting

Data Transfer: EU-US Data Privacy Framework

More Information: Firebase Privacy

4. Data Transfer and Security

All data transfers are encrypted via HTTPS/TLS. Your passwords are hashed and cannot be viewed in plain text. We implement technical and organizational measures to protect your data from unauthorized access.

5. Data Retention

Account Data: Until deletion of your account
Vehicle and Fuel Data: Until manual deletion or account deletion
Location Data: Temporary storage only, not permanently stored
Usage Data: 24 months
Log Files: 6 months

6. Your Rights under GDPR

You have the following rights regarding your personal data:

6.1 Right of Access (Art. 15 GDPR)

You can request information about the data stored about you at any time.

6.2 Right to Rectification (Art. 16 GDPR)

You can request the correction of incorrect data.

6.3 Right to Erasure (Art. 17 GDPR)

You can request the deletion of your data, provided there are no legal retention obligations.

6.4 Right to Restriction of Processing (Art. 18 GDPR)

You can request the restriction of processing of your data.

6.5 Right to Data Portability (Art. 20 GDPR)

You can receive your data in a structured, machine-readable format.

6.6 Right to Object (Art. 21 GDPR)

You can object to the processing of your data if it is based on legitimate interests.

7. Push Notifications

The App sends push notifications for maintenance reminders and fuel price alerts. You can disable these in the app settings at any time. Notifications are sent via Firebase Cloud Messaging.

8. Data Deletion and Account Deactivation

You can delete your account in the app at any time. This will irreversibly delete all your personal data. Anonymized statistical data may be retained for analysis purposes.

9. Changes to Privacy Policy

We reserve the right to update this Privacy Policy. We will inform you about significant changes via email or through the app.

10. Contact and Complaints

For questions about data protection or to exercise your rights, contact us:

Email: app-support@donner.io
Subject: Privacy Fuel

You have the right to file a complaint with a data protection authority regarding the processing of your data.

11. Minors

The App is not directed at persons under 16 years of age. We do not knowingly collect data from minors under 16 years of age.

      Important Note on Data Processing: All vehicle and fuel data
      is processed locally on your device when possible. Location data is only used
      for gas station finder functionality and is not permanently stored.
    