Privacy Policy

The controller of personal data processed in connection with the Eco mobile app (the "App") is Vojtěch Landa, a natural person, email: vojtajess@gmail.com (the "Operator", "we" or "us").

The Operator has not appointed a data protection officer because it is not required to do so under Article 37 of Regulation (EU) 2016/679 (the "GDPR"). For any data protection matter, contact us at the email above or through the support chat in the App.

During a trip, and while automatic trip detection is on, the App processes GPS location and speed and data from your phone's motion sensors (accelerometer, gyroscope). From this data it calculates the route, score and trip events directly on the device.

Trips, routes, events, statistics and the fines, offences and points you enter are stored only on your device and, if iCloud is enabled, in your private iCloud storage (Apple CloudKit). They are not transferred to the Operator, the Operator has no access to them and is not their controller. The same applies to the car photo you can add in the Garage: the car is cut out of it on your device and the photo is never uploaded to the Operator. iCloud storage is governed by Apple's terms. The same applies to debug logs and reports of misjudged events until you expressly choose to share them.

Trip scoring is an automated evaluation of your driving behaviour. It runs only on your device, is for your information only and has no legal or similarly significant effect on you, so it is not automated decision-making under Article 22 GDPR. Fine estimates and the points log work with offence data that you enter yourself and that stays only on your device. Please enter only your own data.

a) User account (optional). Nickname, profile colour, the name from Sign in with Apple if you share it, and a random Firebase UID. Purpose: creating and managing the account and linking the subscription across devices. Legal basis: performance of a contract (Article 6(1)(b) GDPR).

b) Leaderboard, groups, family sharing and feature voting. Average score, fuel saved and number of trips per week and month; group name, code and members; in a group, after each trip, an entry with nickname, score, distance and whether a significant event occurred, without route or location; for votes, the Firebase UID and time of the vote. Group and leaderboard data are visible to other group members. Legal basis: performance of a contract.

c) Eco Premium subscription. Customer identifier at RevenueCat, the Firebase UID of a signed-in user, purchased product, subscription status and history, and App Store country. Payment details are processed exclusively by Apple; the Operator never sees them. Legal basis: performance of a contract.

d) Anonymous usage statistics (Firebase Analytics), only with your consent. App instance identifier, usage events (for example opening the App, progress through onboarding, saving a trip and the number of trips in the last 7 days, features used, permission decisions), App and system version, device model, language and approximate country or region derived from the IP address. No location, routes, trip content or fines are sent. The advertising identifier (IDFA) is not collected and advertising signals are disabled. Purpose: understanding which features are used and improving the App. Legal basis: consent (Article 6(1)(a) GDPR and Article 5(3) of Directive 2002/58/EC as implemented in national law). Nothing is collected without consent. You can withdraw consent at any time in the App (Settings → Legal → Anonymous usage statistics); collection then stops and locally stored analytics data are deleted. Withdrawal does not affect the lawfulness of processing before it. With the same consent the App also sends the Operator's server (Google Cloud, European Union region) daily aggregate counts of the screens shown and of the screen on which the App was closed, without any user or device identifier; only these totals are stored.

e) Security (Firebase App Check). Cryptographic verification that a request comes from the genuine App (Apple App Attest) and technical request data. Purpose: protecting the services against abuse and automated attacks. Legal basis: legitimate interest in securing the service (Article 6(1)(f) GDPR).

f) Measuring the Premium offer. Without any user or device identifier, the Operator's server receives the fact that the offer was shown, where it was opened from and whether a trial, purchase, restore or dismissal followed. The server stores only daily aggregate counts; the IP address is processed only transiently in transit. Legal basis: legitimate interest in evaluating the offer (Article 6(1)(f) GDPR).

g) Support chat. Message text including the previous conversation, request category, language and App version; when reporting a bug, also a technical App log (error messages and App state); an email address only if you enter it yourself. Messages are stored as a request on the Operator's server (Google Cloud, European Union region) and answered by an artificial intelligence assistant via the API of Anthropic (Claude model). Purpose: handling your request and fixing bugs. Legal basis: performance of a contract and legitimate interest in improving the App.

h) Satisfaction survey. Your answers, App version and device language, without a user identifier. Participation is voluntary. Legal basis: consent given by submitting the answers.

i) AI trip summary and weekly recap, where available. Trip statistics: score, event types, distance, average speed, weather and a verbal description of where an event happened, without GPS coordinates. Processing takes place on the Operator's server via the Anthropic API. Legal basis: performance of a contract.

j) Weather. To show the weather and driving tips, your location is sent to Apple WeatherKit. According to Apple, it is not linked to your Apple ID. Legal basis: performance of a contract.

k) ČHMÚ warnings (Czech Republic only). The App downloads the public file of current warnings from the Czech Hydrometeorological Institute and determines the administrative district for your location directly on the device. Your location is not sent to ČHMÚ; as the server operator, ČHMÚ sees only the IP address of the request.

l) Speed limits. During a trip, roughly once every 1–2 km, the coordinates of the area around your location are sent, without a user identifier, to the Overpass API service (overpass-api.de) to load OpenStreetMap map data. The service operator sees the IP address of the request. Road signs (stop signs, crossings, level crossings, traffic lights) are downloaded as files covering an area of roughly 10 × 10 km from Firebase Hosting (Google); a request reveals only that area and the IP address. If you enter a destination, the search text, the coordinates of your stops and your location are sent to Apple Maps (MapKit) to find the address and calculate the route and arrival time; Apple does not associate this data with your Apple ID. Recent destinations and your saved home and work addresses are stored only on your device. Legal basis: performance of a contract.

You grant access to location, motion sensors and notifications in iOS and can change it at any time in the iPhone Settings. A system permission is a technical precondition for features, not a legal basis for processing under the GDPR.

Providing personal data is neither a statutory nor a contractual requirement. The data described in point 3(a)–(c) and (g)–(l) are necessary for the respective features, which cannot be used without them. Consent to usage statistics and taking part in the survey are entirely voluntary, and declining has no effect on the App's features.

We do not sell personal data or use it for advertising. Recipients are:

Some recipients are established in or process data in the USA. Transfers rely on the European Commission's adequacy decision (EU–US Data Privacy Framework) for certified recipients and otherwise on standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR). We will provide information about the safeguards used on request.

Under the GDPR you have the right:

You can exercise your rights by email at vojtajess@gmail.com or through the support chat, free of charge. We will reply within one month; in complex cases this may be extended by a further two months, and we will let you know in time. If we have reasonable doubts about your identity, we may ask for additional information. You can delete your account and Firebase data yourself in the App (Settings → Account → Delete Account).

The supervisory authority in the Czech Republic is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz. You may also lodge a complaint with the supervisory authority in the country where you live or work.

Data are transmitted encrypted (TLS). Only the Operator has access to server data. The databases are protected by access rules that let each user write only their own data, and by App Check.

The App is intended for drivers. It is not intended for anyone under 16, and we do not knowingly process their personal data.

We update this policy as the App and the law evolve. We will inform you in the App about material changes. If a new purpose of processing requires consent, we will ask for it in advance.

This policy is effective from 18 September 2026.