Privacy policy

EVFolk is built so your data stays yours: privacy zones are on by default, photo locations are removed, and you can export or delete everything from the app.

Who we are

EVFolk is run by Appentium LLC ("we"). Contact for anything in this policy: hello@evfolk.com. [Registered address to be added before launch.]

What we collect

You give us

• Account: name, email, a password (stored only as a hash), or the identifier from Google or Apple if you sign in with them; your country, units and the date you confirmed you are old enough (never your birthdate).
• Your cars: brand, model, battery and charging figures, optional plate and VIN, photos.
• Your charging and costs: charging sessions (energy, cost, odometer, time), places you save (home, work, others), electricity tariffs, your petrol-car comparison.
• Ownership records: maintenance items and jobs, and the documents you upload (insurance, registration and similar), which are private to you.
• Community: a handle, optional bio and picture, the stats you choose to show, station check-ins and photos, charger corrections and new chargers you suggest, reports you file, and people you block or mute.
• Owner reviews: your ratings and review of a vehicle, shown with your handle once our team has approved it. If you ask for the Verified owner badge, the photos you send (an invoice or cash memo, or photos of you with the vehicle) are seen only by our admins and deleted 30 days after we check them; we keep only whether ownership was verified.
• Messages to us: anything you email us.

Collected by the app and website

• Location, only when you use a feature that needs it (the map, saving a place, tagging a charge). The phone compares its position with your saved places on the device and does not send it to us for that. The map sends the area you are looking at, and a nearby search sends your position with the search, to find chargers; neither is saved to your account.
• Technical data: IP address and request logs for security and abuse prevention, the app version, and error information needed to keep the service running.
• This website sets one cookie, a session cookie needed for forms to work safely. We do not run advertising or tracking cookies, and the calculators do not store what you enter.

Only if you say yes in the app

• Crash reports (Firebase Crashlytics, Google): when the app crashes, the error, the app version and the phone model. No account, email or location is attached.
• Anonymous usage (PostHog, EU hosting): which screens are opened and which features are used, under a random id that is not linked to your account and changes if you turn it off. No names, email, places or charge details.

Both are off until you switch them on, and you can switch them off at any time in Settings → Crash reports and usage. We do not buy data, sell data, or show advertising.

Why we use it, and our legal bases

• To provide the app you asked for: logging, savings, the map, reminders, syncing across your devices (contract).
• To keep the community safe: reports, moderation, blocking, suspending abusers (legitimate interests and legal obligations).
• To secure the service and prevent fraud and abuse (legitimate interests).
• To find and fix crashes and see which features are used, only if you switch crash reports or usage on (consent, withdrawn in Settings).
• To email you about your account (verification, password reset, data export) (contract), and to tell you when the app launches if you joined the waiting list (consent, withdrawn by the unsubscribe link in every email).

What others can see

• Private by default: your cars, charges, places, tariffs, costs, maintenance and documents are visible only to you.
• Check-ins at chargers are public unless you mark them private. A check-in made at a saved home or work place, or inside any of your privacy zones, is always private.
• Your profile shows your handle, picture, bio, the month you joined and only the stats you switch on. It never shows your email, plate, VIN, places or locations, and is visible to signed-in EVFolk users.
• Chargers you add that we approve become part of the EVFolk map and stay when you leave, with your name removed.

Photos

Every photo is re-encoded on our server so location and camera details (EXIF) are removed before it is stored. We keep only the cleaned copy. Photos are stored privately and shown through short-lived links.

Who we share it with

Only with service providers that run EVFolk for us, under contract and only for that purpose: hosting in Frankfurt, Germany (Oracle Cloud), email delivery, and object storage for photos. [Named providers to be confirmed at launch.] If you use Sign in with Google or Apple, those companies receive the sign-in request. We disclose information if the law requires it. Map data comes from OpenStreetMap, and we do not send your data to it.

How long we keep it

While your account exists. When you delete your account you are signed out at once, your public content disappears from the app, and your data is removed for good after 30 days. Backups are kept for a limited period and then rotate out. Reports and moderation records may be kept longer where needed to protect the community.

Your rights

Wherever you live you can use these in the app: Settings → Export my data emails you a copy of your data in common formats (CSV and JSON, with your photos and documents), and Settings → Delete account deletes it. You can also correct your data in the app. Under the GDPR, UK GDPR and similar laws you may also ask us for access, correction, deletion, restriction, objection and portability, and complain to your data-protection authority. Email us from the address on your account. If you cannot open the app, see how to delete your account.

Children

EVFolk is for people aged 16 and over. If you believe someone younger has an account, tell us and we will remove it.

Security

Data is encrypted in transit. Passwords are hashed. Access to production is limited. No system is perfectly secure; if there is a breach that affects you we will tell you as the law requires.

International transfers

Our servers are in the EU (Frankfurt). If you use EVFolk from elsewhere, your data is sent there. Our provider relationships use the safeguards the law requires where data leaves your region.

Changes

If we change this policy in a way that matters we will tell you in the app or by email before it takes effect.