Carstack Privacy Policy

1. Introduction

We respect your privacy and are committed to protecting it. This Privacy Policy explains our practices regarding your data when using Carstack, a driving logger app for iOS.

Carstack is built to be as private as a location-based app can be: there are no accounts, no analytics, no advertising, and no personal information is ever collected. Your drives are identified only by an anonymous device identifier that cannot be linked to you.

2. Information We Collect

2.1 Location and Route Data

Recording drives is the core purpose of Carstack. While a drive is being recorded, the app collects your precise location — including in the background, so recording continues while your phone is locked or you're using other apps. This produces the route line of your drive along with its start, end, and top-speed locations. Location is only recorded during an active driving session, never continuously.

2.2 Drive Statistics

For each drive, the app stores when it started and ended, its duration and moving time, distance, average and top speed, and whether it was started manually or automatically.

2.3 Weather Conditions

Weather conditions along your drive are captured using Apple's WeatherKit and stored with the drive. Weather requests are made through Apple's frameworks and are subject to Apple's privacy policy.

2.4 Fuel Logs

If you log a fuel stop, the app stores the time and location of the stop, the station name, the amount of fuel, and the price you entered.

2.5 Anonymous Device Identifier

The app generates a random identifier that is stored securely on your device. It is used solely to keep your synced drives together and contains no personal information — we cannot link it to your name, email address, Apple ID, or any other identity.

2.6 Motion Activity

With your permission, the app uses motion activity to detect when you start driving so sessions can begin automatically. This detection happens entirely on your device and motion data is never stored or transmitted.

3. Information We Don't Collect

Carstack has no account system and does not collect, store, or transmit any of the following:

• Personal information (name, email address, phone number, etc.)
• Contacts, photos, or other device content
• Usage analytics or behavioral tracking
• Advertising identifiers

We do not sell your data or share it with advertisers — there is nothing to sell that could identify you in the first place.

4. How Your Data Is Stored

Your drives are stored locally on your device first, so the app works fully offline. Recorded drives and fuel logs are then synced to our server so your data is backed up.

Your GPS data is encrypted and stored securely for each device. Synced data is keyed only to your anonymous device identifier, so drives from one device are never visible to any other device — and it is not shared with anyone.

Our server is hosted on Railway, a cloud hosting provider. Data is encrypted in transit (HTTPS) and at rest.

5. Share Cards and Privacy Zone

You can export a share card image of a drive. Share cards are generated on your device and are only shared when you choose to share them. With your permission, they can be saved to your photo library.

The Privacy Zone setting trims the beginning and end of your route on share cards, so the exact locations where your drives start and end (such as your home) are not revealed when you share. Full routes always stay in the app.

6. Third-Party Services

Carstack does not integrate with any analytics providers or advertising networks. The only third parties involved are:

• Apple — Apple Maps, WeatherKit, CarPlay, and Live Activities are provided by Apple's on-device frameworks and are governed by Apple's privacy policy.
• Railway — hosts the server that stores your synced drives, as described above.

7. Data Retention and Deletion

You can delete individual drives and fuel logs in the app at any time. Deleting the app removes all locally stored data from your device.

You can request removal of all of your data from our server at any time by emailing support@wojtek.im and including your device identifier (UUID), which you can find in the app's settings. Because your data is linked only to this anonymous identifier, we need it to locate and delete your data.

8. Data Security

Data on your device is protected by iOS security features, and the anonymous device identifier is stored in the system keychain. Data in transit to our server is encrypted using HTTPS. No method of transmission or storage is 100% secure, but the absence of any personal information in our database significantly limits what could be exposed.

9. Children's Privacy

Carstack is a driving app and is not directed at children. We do not knowingly collect any data from children — as noted above, we do not collect personal information from anyone.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@wojtek.im.