AutoNode Privacy Policy

Last updated: September 23, 2026

AutoNode ("the App") is developed and operated by Individual Entrepreneur A17 STUDIO ("we," "us," "our"). This policy explains what data the App collects, why, and how it's handled. Contact: autonode.support@gmail.com.

The short version

AutoNode is built local-first. Your vehicles, fuel and expense records, odometer readings, reminders, and photos are stored only on your device and, if you turn on backup, in your own iCloud or Google Drive account — never on our servers. We don't have user accounts, so we never see or hold your vehicle data at all. The only data that leaves your device is anonymous usage analytics and crash reports, payment processing handled entirely by Apple/Google, an anonymous push-notification token if you allow notifications, whatever you choose to type into the in-app feedback form, and — only if you use the optional Pro photo-scan feature — the single photo of a receipt or dashboard you choose to scan.

Data we do not collect

• No account, no email/password, no sign-up of any kind.
• No location data.
• No vehicle data (make, model, plate, VIN, odometer, fuel/expense history, notes) is ever transmitted to us or stored on any server we control. It lives in the App's local storage on your device.
• No photos are transmitted, with one exception you trigger yourself: a photo you scan with the optional Pro photo-scan feature (see "Photo scan" below). Photos you attach to an entry are never uploaded.

Data stored only on your device (and your own cloud backup)

• Vehicle records: nickname, make, model, year, plate, VIN, color, engine, tanks/fuel types.
• Fill-up, expense, mileage, and reminder entries, including any photos you attach (vehicle photo, receipt photos).
• App preferences (units, currency, theme, language).

If you enable backup, this data is copied to your own iCloud (iOS) or Google Drive app-data folder (Android) — an account only you control. We never receive a copy. Turning off backup or deleting the app removes this option; deleting the backup itself is done through your iCloud/Google Drive settings, not through us.

Data we do collect

Anonymous product analytics (PostHog). We collect anonymous usage events (e.g., "a fill-up was saved," "the app was opened") tied to a randomly generated, rotatable install identifier — never your name, email, vehicle details, or any free-text you type into the App. This tells us which features are used so we can improve the App; it cannot be used to identify you or your vehicle.

Crash and error reports (Sentry). If the App crashes or hits an error, we may receive a technical report (stack trace, device model, OS version, app version) to help us fix the bug. These reports are not designed to include your personal vehicle data.

Subscription and purchase data (RevenueCat, Apple, Google). If you subscribe to AutoNode Pro, the purchase is processed entirely by the Apple App Store or Google Play — we never see your payment card details. RevenueCat, our subscription-management provider, receives a device/purchase identifier and your purchase receipt to verify your subscription status. See Apple's and Google's own privacy policies for how they handle payment information.

Push notifications (Firebase Cloud Messaging). If you allow notifications, the App registers an anonymous push token so we can tell you about new versions and features. We store the token together with the App's random install identifier, your platform (iOS/Android), app language, and app version — nothing else, and never any vehicle data. Reminders for your own car (техосмотр, oil change, insurance) are scheduled locally on your device and never pass through a server. Turning notifications off in the App's Settings or in your device settings stops both; the stored token is then unused and expires.

In-app feedback (optional). If you send feedback from the App, we receive exactly what the form shows you: the report type, the text you wrote, your mood rating, the screen you were on, a short technical diagnostics line (app version, OS version, device model, language), and your email address only if you chose to enter it so we can reply. The message is delivered to our team inbox through a relay function we operate (Supabase) and an email provider (Resend). Never include vehicle data in the text unless you want us to see it.

Photo scan (AutoNode Pro, optional). AutoNode Pro can fill in an entry from a photo of a fuel receipt, a service invoice, or your instrument cluster. This is the one feature that sends a photo off your device, it runs only when you tap scan, and the App explains this to you before your first scan ever runs.

• What is sent: the single photo you just took, a list of reference values the recognition needs to answer in (fuel grades, expense categories, currency codes), and the anonymous subscription identifier that confirms you have Pro.
• What is never sent: your plate, VIN, odometer history, location, the saved entry, or any other photo in the App.
• The photo is not stored. It is passed through our relay function (Supabase) to Google's Gemini recognition service, the extracted fields come back, and the photo is kept nowhere — not in a database, not in file storage, not in a log.
• We use Gemini on a paid Google Cloud plan, under which Google does not use submitted content to improve its products and does not subject it to human review.
• Recognition only pre-fills the form. Nothing is saved until you review the fields and tap save yourself.

Exchange rates. If you record an expense in a currency other than your default, the App asks our relay function for official National Bank of Kazakhstan rates so it can show you one combined total. That request carries only a list of year-months and currency codes (for example "March 2026, USD") — never amounts, never the dates of individual entries, never vehicle data, and not even the App's install identifier.

Third-party services

• Apple (App Store, iCloud) — apple.com/legal/privacy
• Google (Play Store, Google Drive) — policies.google.com/privacy
• RevenueCat (subscription management) — revenuecat.com/privacy
• PostHog (anonymous analytics) — posthog.com/privacy
• Sentry (crash reporting) — sentry.io/privacy
• Google Firebase (push notification delivery) — firebase.google.com/support/privacy
• Google Gemini (photo-scan recognition, paid tier) — cloud.google.com/terms/cloud-privacy-notice
• Supabase (feedback, push-token, photo-scan and exchange-rate relay) — supabase.com/privacy
• Resend (feedback email delivery) — resend.com/legal/privacy-policy

Each of these processes only the limited data described above, under their own privacy policies linked here.

Your choices

• Analytics and crash reporting can be limited via your device's own privacy/tracking settings (e.g., iOS App Tracking Transparency, where applicable). We do not use the advertising identifier and we do not track you across other apps or websites.
• Notifications (local reminders and push) are one switch in the App's Settings and can also be turned off in your device settings.
• You can export all your data at any time via CSV export, and delete it by deleting entries in the App or uninstalling it.
• Uninstalling the App removes all locally stored data. Your iCloud/Google Drive backup (if enabled) is not automatically deleted — remove it from your cloud storage settings if you want it gone too.

Children

AutoNode is not directed at children under 13 and we do not knowingly collect data from them (the analytics we do collect is anonymous and unrelated to age in any case).

Changes to this policy

If this policy changes, we'll update the "Last updated" date above and, for material changes, note it in the App's release notes.

Contact

Questions about this policy or your data: autonode.support@gmail.com.