Privacy Policy

1. Who we are

Car Timeline is a UK consumer mobile app that helps vehicle owners manage MOT, tax, insurance renewal dates, service history, and related vehicle documents. The app is operated by Krzysztof Kosecki, based in the United Kingdom.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

Krzysztof Kosecki
Email: privacy@streetflow.work

2. What data we collect

When you use Car Timeline, we may collect and process:

• Vehicle registration numbers — entered by you to look up vehicle, tax, and MOT data from official UK government sources.
• Vehicle details — make, fuel type, colour, year of manufacture, MOT status, MOT expiry date, tax status, and tax due date, as returned by DVLA and DVSA.
• MOT history — test dates, results, mileage readings, advisory notices, and defect items, as returned by DVSA.
• Service and maintenance logs — dates, mileage, costs, garage names, and notes that you enter manually.
• Reminder dates — MOT, tax, insurance, and service reminder preferences you set.
• Document photos — photos of receipts, invoices, or other vehicle documents you choose to upload.
• Insurance renewal dates — entered by you manually.

We do not collect your name, email address, phone number, location, or any other personal identifiers in version 1 of the app. There is no account or login required.

3. How we use your data

We use the data described above to:

• Retrieve official vehicle, tax, and MOT information when you enter a registration number.
• Display your saved vehicles, service history, and upcoming dates in the app.
• Send you local push notification reminders for MOT, tax, insurance, and service dates.

We do not use your data for advertising, profiling, marketing, or any purpose other than providing the app’s core functionality to you.

4. Lawful basis for processing

Under Article 6 of the UK GDPR, we process your data on the following bases:

• Consent (Article 6(1)(a)): You provide consent when you enter a vehicle registration number and request a lookup. You can withdraw consent at any time by deleting the vehicle from the app.
• Legitimate interest (Article 6(1)(f)): We have a legitimate interest in processing vehicle data to provide the app’s core vehicle-management functionality that you have requested.

5. Where your data is stored

In version 1 of Car Timeline, the majority of your data — including saved vehicles, service logs, reminders, and document photos — is stored locally on your device. This data does not leave your phone unless you explicitly choose to export it.

When you look up a registration number, the request is sent from your device to our secure server-side function (hosted on Vercel in the EU/UK region), which then calls the official DVLA or DVSA API on your behalf. The server-side function does not store registration numbers or vehicle data beyond the duration of the API response.

6. Third parties

We share data with the following third parties, solely to provide the app’s functionality:

• DVLA (Driver and Vehicle Licensing Agency, UK Government) — to retrieve vehicle and tax status data via the Vehicle Enquiry Service API.
• DVSA (Driver and Vehicle Standards Agency, UK Government) — to retrieve MOT history data via the MOT History API.
• Vercel Inc. — hosting provider for our server-side lookup functions. Vercel processes the API request transiently and does not retain vehicle data.
• RevenueCat Inc. — subscription and purchase management. RevenueCat processes anonymous transaction identifiers only. No vehicle or personal data is shared with RevenueCat.
• TelemetryDeck GmbH — privacy-first analytics. We collect anonymous usage events (e.g. “vehicle added”, “reminder set”) with no personal identifiers. No registration numbers, vehicle details, or device identifiers are sent to TelemetryDeck.
• Apple Inc. / Google LLC — for processing in-app purchases through the App Store or Google Play Store.

We do not sell, rent, or share your data with any other third parties.

7. Data retention

Vehicle data, service logs, reminders, and documents are stored on your device for as long as you keep them in the app. You can delete individual vehicles or all data at any time from within the app.

Our server-side lookup functions do not retain registration numbers or vehicle data. API responses are returned to the app and are not logged or stored on the server.

8. Your rights under UK GDPR

Under the UK General Data Protection Regulation, you have the right to:

• Access your data — all data is visible within the app on your device.
• Correct your data — you can edit service logs, reminders, and vehicle details within the app.
• Delete your data — you can delete individual vehicles or all app data from within the app. Uninstalling the app also removes all locally stored data.
• Export your data — a data export feature will be available in a future update.
• Withdraw consent — you can stop using the app at any time. Deleting a vehicle removes all associated data.
• Lodge a complaint — you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.

To exercise any of these rights, contact us at privacy@streetflow.work.

9. Children

Car Timeline is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

10. Security

All communication between the app and our server-side functions uses HTTPS encryption. API keys for DVLA and DVSA are stored in secure server environment variables and are never included in the mobile app or exposed to users.

Registration numbers are sent in POST request bodies as required by DVLA and are not included in URLs, query strings, or log files.

Local data on your device is protected by your device’s own security (passcode, Face ID, Touch ID). The app also offers an optional in-app biometric lock for additional privacy.

11. Changes to this policy

We may update this privacy policy from time to time. The “last updated” date at the top of this page will be revised accordingly. If we make material changes, we will notify users through the app or the App Store update notes.

12. Contact us

If you have questions about this privacy policy or how your data is handled, contact:

Krzysztof Kosecki
Email: privacy@streetflow.work