Privacy Policy

Last updated: 18 August 2026 · Applies to the Eirven Android application and web app

Eirven is built to work on your device, for your car, without watching you. We collect the minimum needed to know you're a subscriber — and nothing about how you use the app. This policy explains exactly what data the app touches, in plain language.

The short version

• You sign in with your Google account and need an active subscription to use Eirven. That's the only personal data we handle: who you are and whether your subscription is active.
• Everything about your car — vehicle profile, VIN, fault-code history, datalogs, performance results — stays on your device. We never see it.
• No analytics, no advertising, no tracking, no data sales. Ever.
• Your usage of the app is not monitored. We don't know which guides you read, what fault codes your car has, or how fast it accelerates.

Account and subscription data (what we do process)

To keep Eirven available only to subscribers, the app processes the following:

• Google Sign-In: when you sign in, we receive your Google account identifier, your name and your email address from Google. We use this solely to identify your account and link it to your subscription. We do not gain access to your Google password, contacts, files or anything else in your Google account.
• Subscription status: subscriptions are purchased and processed through Google Play Billing (Android app) or PayPal (web subscriptions at eirven.app/subscribe). We never see or store your payment card details — Google or PayPal handles all payment processing themselves. Our licensing server receives only a purchase token or a subscription ID, which it uses to verify that your subscription is genuine and active. Where you subscribe through PayPal, PayPal acts as a data processor for that payment on our behalf, under PayPal's own privacy policy.
• Where our server runs: our licensing server and its database are hosted on Cloudflare. Cloudflare is a data processor for the account, subscription and (where you switch it on) service book data described in this policy.
• Entitlement checks: the app periodically confirms with our licensing server that your subscription is still active. These requests contain your account identifier and subscription token — not your vehicle data, location, or anything about how you use the app.
• Vehicle profile selection: alongside the entitlement check, the app reports which vehicle profile you have selected (year, model and engine — for example "2011 Panamera 4S 4.8 V8"). We use this solely to decide where to focus development — if many users select diesel or hybrid profiles, those get more content sooner. This is the profile you picked in the app, not your VIN, not your actual car, and no diagnostic or location data accompanies it.
• App integrity: to protect against tampered or pirated copies, the app may use Google's Play Integrity API to confirm it is a genuine, unmodified installation from Google Play. This check is performed by Google and returns a verdict to our server; it does not identify your device to us beyond that verdict.

Retention: account and subscription records are kept while your subscription is active and for as long as required for accounting and legal purposes afterwards. You can request deletion of your account data at any time (see Your rights, below).

Data stored on your device only

The following never leaves your phone, and is deleted when you clear the app's data or uninstall it:

• Your selected vehicle profile (year, model, engine)
• A VIN, if you choose to save one after decoding
• Diagnostic results, sensor datalogs and recorded charts
• Performance measurement results and certificates
• App settings

None of this is transmitted to us or to any third party.

Service book backup (optional)

Your VIN, mileage and service entries are stored on our server ONLY if you switch on backup in the app. Off by default. Nothing leaves your device without it.

Eirven's Service Log lets you record maintenance you've done — job, date, mileage, notes. By default this stays entirely on your device, the same as everything else in this section. If you switch on the backup tick in the app, the following starts being sent to our server:

• What: your car's VIN, each service entry (job title, claimed date, mileage, notes) and a server-generated timestamp recording when the entry was received.
• Why: that server timestamp can't be edited by the app or by you, which is what lets a Service Log certificate prove an entry wasn't invented after the fact — the certificate cites these server-stamped dates. Without a server record, we'd have no honest way to say when an entry was really logged.
• Where: Cloudflare, on infrastructure served from the EU.
• How long: for as long as your account is active, or until you switch the backup tick off — turning it off deletes the server copy of your entries and certificates for that VIN immediately. Deleting your account (see delete-account.html) does the same.
• Your rights: you can request your service history and certificate data as a plain export on request (write to [email protected]), and delete it at any time via the in-app toggle or by deleting your account.

A VIN linked to a specific person is personal data. That is exactly why Eirven never offers a VIN-history lookup to anyone but the vehicle's own owner: a buyer can verify a certificate code (at eirven.app/verify) without ever seeing whose account issued it, but there is no service anywhere in Eirven that lets a third party pull up a car's history from its VIN alone.

Performance timing — weather data

When a Performance Center timing run completes, the app requests the current temperature and air pressure for the run's approximate location from Open-Meteo, a free weather data service. The coordinates sent are rounded to a coarse resolution (roughly 10 km) before the request is made, and no account or device identifier travels with it — Open-Meteo has no way to link the request back to you. The run itself — GPS track, speeds, times — stays on your device and is never uploaded anywhere.

VIN decoding

When you use the VIN Decoder and press decode, the app sends the VIN you entered to the NHTSA vPIC API (vpic.nhtsa.dot.gov), a free public vehicle-information service operated by the United States Department of Transportation. The VIN is sent solely to retrieve build information about the vehicle; Eirven does not attach any identifier of you or your device to the request beyond what any standard internet request contains (such as an IP address, which is handled by NHTSA under US DOT's privacy policy).

Permissions the app requests, and why

• Bluetooth (connect / scan): used exclusively to find and communicate with your OBD-II diagnostic adapter. Eirven never scans for or connects to any other kind of device.
• Location: used for two things only — (1) Android requires location permission to scan for Bluetooth devices, and (2) the Performance Center uses GPS to measure acceleration and braking. All GPS data is processed on your device and discarded or stored locally in your results. Your location is never transmitted anywhere.
• Storage / media (via the system share sheet): used only when you choose to save or share an exported datalog image or performance certificate.

Vehicle diagnostic data

Fault codes, sensor readings and other data read from your vehicle over OBD-II are displayed to you and, where you choose, stored on your device. They are never uploaded.

Your rights

If you are in the EEA, the GDPR applies to the account data described above. You have the right to access, correct, export and delete your account data, and to object to or restrict its processing. To exercise any of these rights — including full account deletion — contact us at the address below. Deleting your account does not affect data stored only on your device, which you control directly. You can cancel your subscription at any time through Google Play.

Children

Eirven is a vehicle-maintenance tool and is not directed at children.

Changes to this policy

If a future version of Eirven changes how data is handled, this policy will be updated before that version is released, and the change will be called out in the app's release notes.

Contact

Data controller and questions about this policy: [email protected]