Draft for legal review. Not yet final.

Privacy

AppsForMyCar runs this site and the LocalStore service. This page explains what we collect, why, and what you can ask us to do with it, under the New Zealand Privacy Act 2020.

When you register your car or your interest on this site

We collect your name, email, car, region, your phone number (only if you give it, so an installer can call you back), the features you're interested in and any message you write, and when you agreed to be contacted. We use them only to book your install, to tell you when we support your car or reach your area, and to decide which cars, areas and features to support next. We don't sell them or share them for marketing.

When you send us a message

Through the contact form we collect your name, email, the topic and your message. We use them only to reply to you, and keep them so we can follow up on the same conversation.

When you ask for an app

We keep the app you asked for and, if you give it, your email. We use the email only to tell you when that app is available. To spot repeat requests we keep a scrambled fingerprint of your connection, not the address itself.

When you switch on notifications in your account

Emails and notifications from your account are off until you switch one on for yourself. If you switch on notifications for a phone or computer, we keep that browser's notification address and the keys it gives us, so we can send them to it, and nothing else about the device beyond its type (for example "iPhone, Safari") so you can tell your devices apart. They are deleted when you switch notifications off on that device or remove it from the list.

When you visit this website

We count visits with Rybbit, a privacy-friendly analytics service: which pages are viewed, roughly where from (country), the browser type and how fast pages load. It uses no cookies, doesn't store your IP address and doesn't record your screen. Your account pages aren't counted. We also count, without saying who, when someone registers interest, sends us a message, creates an account or logs in, with the car and region chosen and which of our pages or ads they came from; never your name, email or phone. We use the numbers only to improve the site.

When LocalStore runs in your car

• Always: your car's VIN, the head unit's software version, the LocalStore version, and the time and network address of each check-in. We need these to send the right updates to the right car and to manage your car's licence.
• Only if you turn them on: trip and location data for the logbook and tracking features.
• Unless you turn it off: the car's status: battery level and range, whether it is charging and how fast, the odometer, whether it is locked or in use, which doors and windows are open, and inside, outside and battery temperatures. It feeds the dashboard, charging history and reminders in your account, the alerts you choose (for example a car left unlocked), and the odometer readings in the IRD logbook. The switch is in LocalStore, under Service: "Share car status".
• Unless you turn it off: LocalStore's diagnostic log, sent about once an hour (only the part written since the last one, compressed). It records what the app did and when: check-ins, installs and updates, settings it applied, and errors; it can include the names of drivers who signed in on the car, but not where the car was. Only AppsForMyCar staff can read it, to find and fix problems, and it is deleted after 30 days. The switch is in LocalStore's Settings: "Send diagnostic logs".
• Only when somebody in the car sends one: a picture of the car's own screen. It is taken only when someone taps "Take a picture of the screen" in LocalStore, under Service, and only while the car is in Park. LocalStore shows them the picture first and nothing is sent unless they then tap Send. We cannot ask your car for one: there is no way for us, or for anyone with our systems, to make a car photograph its screen. A picture of the screen can show your VIN, a map of where you are, a driver's name or messages from a connected phone, which is why you see it before it leaves the car. Only AppsForMyCar staff and members of your own account can see what is sent; it is deleted after 30 days, and it follows the same switch as the diagnostic log, so with "Send diagnostic logs" off it cannot be sent at all. Cameras are never used for this — only the screen.
• Only when a member of your account asks from the car's Control page: lock, unlock, "find the car" and "keep the car on". The car answers whether it did it and, for "find the car", sends one fresh GPS position (with its accuracy and time), which becomes the car's last known position in your account and is kept like the car's other positions. LocalStore only sends that position if location sharing is on in the car. Every request, who made it and what the car answered is shown in your account's Activity and kept 90 days there; every unlock from the website is also emailed to all owners of the account.
• Only when an owner or admin changes them: the car's charging settings as the car reads them after the change (charge limit, charging current limit, whether a schedule is on, battery hold, and whether it is plugged in and charging), so your account can show whether the change took.

Raw check-in records are deleted after 90 days, and car status reports after 180 days.

Your rights

You can ask to see the information we hold about you, have it corrected, or have it deleted. Email preview@appsformycar.test. If you're not happy with our response, you can complain to the Office of the Privacy Commissioner.