Privacy Policy

Last updated: October 29, 2026

AutoSup (“we,” “us,” or “the app”) respects your privacy. This policy explains what data we collect and how we use it.

Who we are

AutoSup is operated by an individual developer, Almas Zhanggabatyr (Kazakhstan), who is responsible for your personal information. Privacy contact: support@autosup.app.

What data we collect

Information about your cars, fuel-ups, maintenance, and expenses that you enter yourself.
Your email address and Google/Apple profile name — when you sign in with an account.
Photos and documents you attach to your records: receipts for fuel-ups, service, and expenses, as well as scans of your vehicle documents. If a car is shared, every member of that car can see these photos — see “Shared cars” below.
Whatever you enter into your vehicle documents: the registration certificate number, the insurance policy number and expiration date, the name of the driver’s license holder. This information may relate to people other than you.
Details of your places in the contacts book — the names, phone numbers, addresses, and map links of repair shops, stores, car washes, and other businesses, plus your notes about them. You enter this yourself; the app does not read your phone’s address book. The contacts book is stored on your phone and, if you use the cloud, in your personal cloud backup.
When you send feedback or a suggestion — the contact method you provide (email or phone number), the text of your message, and the app version and platform.
If you subscribe to AutoSup Pro or AutoSup Business — your subscription details (which plan and period you bought: Pro or Business, monthly or yearly) and its status (active, expired, canceled). The App Store or Google Play passes this information to us through RevenueCat, a service we use to check subscription status the same way on both platforms.

How we use your data

To store and sync your records through Firebase (Google Cloud).
To create reports and notifications inside the app.
To handle and reply to your feedback and suggestions: your message is saved in Firebase and sent to our support email.
For usage statistics (Firebase Analytics) and crash reports (Sentry) — so we can see which features people use and where the app crashes. Google and Sentry process this data on our behalf and do not use it for their own purposes.
To verify and provide paid features (Pro/Business), we use RevenueCat. It receives your account identifier (the same one you use to sign in to the app) and the purchase details from the App Store/Google Play — which subscription you bought and its current status. RevenueCat processes this data on our behalf and does not use it for its own purposes — just like Firebase and Sentry above.
We never receive your card number, CVV, or other payment details — only the App Store and Google Play see them. They are never passed to the app or to RevenueCat.
We do not sell your data or share it with third parties — with one exception. In the Android version, the app sends Meta (Facebook) your device’s advertising identifier: it lets us understand which ad led to an install. Only this identifier is sent — your records, documents, and photos are never shared. The iPhone version does not send it at all.

Data storage

Your data is stored locally on your device (SQLite) and, if you choose, in the Firebase cloud (Google Cloud) — on servers in Europe. Records of a personal car are stored under your unique identifier, and only you can access them. Records of a car you have shared with other people are stored separately — in that car’s own space — and all of its members can see them, as described below.

Shared cars

You can share a car with other people — your family, or your coworkers if you manage several cars. Once you do, the records for that car are no longer yours alone: its fuel-ups, service, expenses, and documents are visible to every member, including people who join later.

The same goes for photos. A photo attached to a record of a shared car is uploaded to the cloud (Google Firebase Cloud Storage, servers in Europe) and becomes available to the other members. Before you attach a photo, there are a few things you should know:

An uploaded photo is not deleted. If you replace a receipt, the new photo is added and the previous one stays with the record — that is what keeps the shared car’s history trustworthy. Removing an attachment on your phone removes only your copy: the group members keep seeing the uploaded photo. Deleting the record itself marks it as deleted for everyone, but does not erase its photos from storage.
Vehicle documents contain personal information. A scan of a registration certificate, an insurance policy, or a driver’s license carries a name, a document number, and sometimes an address — and this may be someone else’s information, not yours. The whole group will see it. Only add such documents to a shared car if the people named in them are okay with it.
PDF files are not uploaded — they stay on your phone only.
For how photos of a personal car are handled, see “Photos of a personal car” below.
Photo upload for shared cars is not turned on right away or for everyone: while it is off, photos stay on your phone.

Photos of a personal car

On the free plan, photos of a personal car — the photo of the car itself, receipts, and document photos — stay on your phone only: just the file name goes into your backup.

With an AutoSup Pro or AutoSup Business subscription, they are uploaded to cloud storage (Google Firebase Cloud Storage) — to your personal folder, which only you can access. This lets you get your photos back on a new phone. Storage is limited: 2 GB with Pro, 10 GB with Business.

Automatic upload is turned on and off with the “Automatic backup” switch on the account screen. The “Save to cloud” button uploads photos manually.
PDF files are not uploaded — they stay on your phone only.
A photo is kept in the cloud as long as its record exists. If you delete the photo or the record, the file is erased from storage about 14 days later.
When you delete your account, your personal photo folder is deleted.

Data retention

Your records stay on your device and, if you use the cloud, in the cloud until you delete them or delete your account. The specific periods described in this policy — for photos of a personal car (about 14 days after deletion), for photos of shared cars (see “Account deletion”), and for voice phrases (up to 12 months) — apply on top of that. Feedback messages are kept after account deletion only in anonymized form (see “Account deletion”).

Account deletion

You can delete all of your data and your account at any time in the app under “Profile → Account → Delete Account.” If you cannot access the app, see autosup.app/delete-account.

Here is how this works for photos of shared cars. They are stored with the car itself, not with your account, and they are deleted together with it — when the owner disbands the group, deletes the shared car, or deletes their own account. The files are erased from storage 30 days after that. Uploaded files that never became part of a record (for example, an upload that was interrupted halfway) are deleted after 14 days. If you delete your account, the groups you own are disbanded, and their photos are deleted under the same rule. Photos you uploaded to someone else’s group stay with that group: they are part of the shared history of a car that the other members keep using.

When you delete your account, your feedback messages and support requests are anonymized: the contact you provided and your account identifier are removed. The message text, the app version, and the platform remain — no longer linked to you.

Deleting your account also erases the record of your subscription in our database. It does not cancel the subscription itself — the App Store or Google Play will keep charging you for it until you cancel it in your account settings in that app store.

Permissions

Camera — to take photos of your car and documents.
Photo library — to attach photos from your library.
Notifications — for maintenance and document expiration reminders.
Microphone — for adding records by voice.
Speech recognition (iPhone) — to turn what you say into the text of a record.

Voice input

To turn speech into text, the app uses the system speech recognizer — Apple’s on iPhone or Google’s on Android. It may process audio on Apple’s or Google’s servers under their own policies. Kazakh dictation runs on a model downloaded to your phone, so the audio never leaves the device. The recognized text is turned into a record on your phone; we do not receive or store any audio.

Voice phrases to improve recognition

Off by default. Recognized phrases do not reach us. Separately, and only with your explicit consent, you can help us make recognition more accurate — in that case, your phrase log is sent to us.

If you turn collection on, here is exactly what is sent:

the phrases themselves — spoken or typed, word for word, as the app heard them;
what the parser understood from the phrase: the record type (fuel-up, service, expense, mileage) and the names of the fields that were filled in — without their text values: the names of gas stations, repair shops, categories, and notes are not sent;
numbers from the phrase — volume, amount, price, mileage: they are already spoken in the phrase itself;
the dictation language, the date (without the time), the app version, and the platform.

Phrases that were already in the log before you turned collection on are sent too, not just new ones. A phrase may contain anything you said — including things said by accident. So it is worth deleting anything unwanted before turning collection on: the phrase log is right next to the switch, and a long press deletes a line.

Why we need this: the collected phrases help us find recognition errors and teach the app to understand you more accurately — especially in Kazakh, for which there are almost no ready-made voice models. Phrases are kept for up to 12 months and then deleted automatically.

Phrases are anonymized and not linked to your account or your device. We deliberately store nothing next to them that would show whose they are. The flip side of this decision: once sent, specific phrases cannot be returned or deleted — we would not be able to find yours among them. Turning the switch off stops further sending, but anything already sent stays.

You can turn collection on or off at any time in the same place as the phrase log: open the voice panel (the microphone button) and tap “Phrase log” — the “Help improve recognition” switch is right next to the list, so you can see exactly what will be sent before you turn it on.

California residents (CCPA/CPRA)

AutoSup is operated by an individual developer, Almas Zhanggabatyr (Kazakhstan); for any request under this section, contact support@autosup.app. This section describes our practices using the categories of the California Consumer Privacy Act, as amended by the California Privacy Rights Act. It does not change how the app works; it describes the same data listed above.

Categories of personal information we collect

Identifiers — your email address, your Google/Apple profile name, your account identifier, a phone number or email you provide with feedback, and (Android only) your device’s advertising identifier.
Personal information described in Cal. Civ. Code § 1798.80(e) — names and document numbers you enter into vehicle documents (registration certificate, insurance policy, driver’s license), which may belong to people other than you; names, phone numbers, and addresses you save in the contacts book.
Commercial information — your subscription plan, period, and status; the vehicle expenses and fuel-ups you record.
Internet or other electronic network activity information — app usage statistics (Firebase Analytics) and crash reports (Sentry).
Audio, electronic, visual, or similar information — photos you attach to records; and, only if you turn it on, the anonymized text of voice phrases.
Sensitive personal information — a driver’s license number, only if you type it into a vehicle document. We use it only to show the document back to you (and to the members of a shared car) and to remind you before it expires — not to infer anything about you.

Sources

Directly from you — everything you enter, attach, or send to us.
From Google or Apple — your email and profile name, when you sign in with them.
From the App Store or Google Play, through RevenueCat — your subscription status.
Automatically from your device — usage statistics, crash reports, and (Android only) the advertising identifier.

Purposes

The purposes are those listed in “How we use your data”: providing and syncing the app’s features, reports and reminders, handling your feedback, usage statistics and crash diagnostics, verifying subscriptions, and (Android only) measuring which ad led to an install.

Sale and sharing

We do not sell your personal information. We do not give your records, documents, or photos to anyone in exchange for money or anything else of value. Firebase (Google), Sentry, and RevenueCat act as our service providers and process data on our behalf.

One transfer may count as “sharing” for cross-context behavioral advertising under California law: in the Android version, the app sends Meta (Facebook) your device’s advertising identifier so we can understand which ad led to an install. The iPhone version does not do this. To stop it, you can delete or reset your advertising ID in your Android settings (on most devices: Settings → Privacy → Ads, or Settings → Google → Ads), or opt out of ads personalization there. We do not offer a separate switch for this inside the app. You can also contact us at the address below with any question about this.

We do not knowingly sell or share the personal information of consumers under 16.

Your rights

Right to know — you can ask what personal information we have collected about you, its categories and sources, and why.
Right to delete — you can delete your account and data in the app at any time (see “Account deletion”) or ask us to do it.
Right to correct — you can edit your records in the app yourself, or ask us to correct inaccurate information.
Right to opt out of sale or sharing — as described in “Sale and sharing” above.
Right to non-discrimination — we will not treat you differently for exercising any of these rights.

To make a request, email support@autosup.app. To protect your data, we may ask you to write from the email address you use to sign in, or otherwise confirm that the account is yours. You may also make a request through an authorized agent, in which case we may ask for proof of the agent’s authority. Note that we cannot identify anonymized voice phrases (see above), so we cannot return or delete them.

Canadian users (PIPEDA)

Accountability. The person accountable for your personal information is the developer, Almas Zhanggabatyr (Kazakhstan): support@autosup.app.
Consent. We collect and use your personal information for the purposes described in this policy, which you accept by using the app. Optional collection — such as voice phrases — happens only if you turn it on. You can withdraw your consent at any time: turn off the voice phrase switch, reset your advertising ID in your Android settings, or delete your account.
Access and correction. You can see and edit your records in the app. You can also ask us for access to the personal information we hold about you, or for a correction, by emailing support@autosup.app.
Complaints. If you are not satisfied with our answer, you can file a complaint with the Office of the Privacy Commissioner of Canada.

International transfers

Your cloud data is stored with Google Firebase (Google Cloud) on servers in Europe. The system speech recognizer (Apple or Google) may process audio on its own servers. Our other service providers — Sentry, RevenueCat, and, for the Android advertising identifier, Meta — may process data in the United States or other countries. This means your information may be processed outside the country where you live, where privacy laws may differ.

Children

AutoSup is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, please contact us and we will delete it.

Contact

Privacy questions: support@autosup.app