Privacy Policy — MyCar
This Privacy Policy explains how Evil Monkey Technology collects, uses, stores, and discloses information when you use the MyCar mobile application (“the App”).
1. Introduction
Welcome to MyCar (“we,” “our,” or “us”), developed by Evil Monkey Technology. We respect your privacy and are committed to protecting the personal data of our users.
By using the App, you agree to the collection and use of information in accordance with this policy and Google Play Developer Policies.
2. Information We Collect
A. Account Information
- First Name & Last Name: Used to personalize your account salutation and history certificates.
- Email Address: Used for login authentication, sending 6-digit OTP verification codes, and emailing official PDF Vehicle History Certificates.
- Password: Stored securely using cryptographic password hashing (passwords are never saved in plain text).
B. Vehicle & Document Information
- Vehicle Registration Numbers (VRM): Used to query vehicle specifications, DVLA MOT/Tax status, and history check records.
- Stored Vehicle Documents: Scanned receipts, MOT certificates, and fuel invoices uploaded by registered users to their private Document Vault.
- Vehicle Reminders: MOT, DVLA Road Tax, Insurance, and Service reminder dates configured by the user.
C. Financial & Payment Information
When you purchase a Single Vehicle History Report (£9.99) or a 3-Report Pass Bundle (£22.50):
- Payments are processed securely via Stripe (PCI-DSS Level 1 Compliant).
- We do not store or process your credit/debit card details on our servers or in the App. All payment information is tokenized and handled directly by Stripe and Google Pay.
3. How We Use Your Information
- Vehicle History Checks: Querying official DVLA and CheckCarDetails API databases to provide vehicle specifications, HPI finance, stolen register, write-off salvage, and MOT/Tax status.
- Account Management: Providing personalized login, document storage, and account preferences.
- Email Certificate Delivery: Sending OTP security verification codes and emailing official PDF Vehicle History Certificates via Resend Email API.
- Push Notifications: Delivering automated local reminder alerts for upcoming MOT and Road Tax expiry dates.
- App Improvement & Security: Preventing fraud, ensuring API rate compliance, and maintaining App stability.
4. Third-Party Services & Data Processors
We share data with trusted third-party service providers solely to perform necessary app functions:
- CheckCarDetails API: Fetching vehicle specs, MOT/Tax status, and history records
- Stripe: Processing credit card & Google Pay transactions securely
- Resend Email API: Delivering OTP verification codes and history report PDFs
We do not sell, rent, or trade your personal data to third parties or advertising networks.
5. Data Storage, Security & Retention
- On-Device Storage: Your account credentials, saved vehicles, documents, and reminders are stored locally in an encrypted Room SQLite database on your device.
- Data Transmission: All API calls and network communications use HTTPS / TLS 1.3 encryption.
- Data Retention: We retain your account data for as long as your account remains active. If you delete your account or stored documents, they are permanently removed from local storage.
6. Your Rights & Data Deletion
Under UK GDPR and Applicable Privacy Laws, you have the right to:
- Access Your Data: View all your stored vehicles, documents, and profile information inside the App.
- Request Account Deletion: Delete your stored documents, vehicles, or request complete account erasure by contacting privacy@evil-monkey.co.uk.
- Opt-Out of Notifications: Disable reminder alerts at any time via App Settings or your device's Notification Settings.
7. Children's Privacy
MyCar is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App or updating the “Last Updated” date above.
9. Contact Us
If you have any questions or concerns regarding this Privacy Policy or data practices, please contact:
Evil Monkey Technology
Email: privacy@evil-monkey.co.uk
Website: https://evil-monkey.co.uk