A short, honest privacy policy.
This is a plain-English description of how GaadiLog handles your data. GaadiLog collects nothing by default. There is an optional analytics toggle in Settings → Privacy — off out of the box, opt-in only. The rest of this page describes what that toggle does if you turn it on.
What we collect — by default
Nothing.
Not a byte. Not a guess. Not a hash.
GaadiLog stores everything you log — vehicles, fuel-ups, services, documents, reminders, photos — only on your device. There is no server. There is no account system. No sign-up, no login, no cloud sync, no backup to our infrastructure, and no way for us to read what you log even if we wanted to.
What changes if you turn analytics on
Settings → Privacy has a toggle, off out of the box, labeled "Share anonymous usage data." Turning it on sends a small stream of anonymous events to our analytics provider, PostHog, so we can see which features get used and catch errors before they hit users at scale.
| Sent when on | What that means |
|---|---|
| Event names | The action you took — e.g. vehicle_added, fuel_logged, export_run. Never the contents — just that the action happened. |
| Anonymous device ID | A random UUID generated on this device on first launch and stored locally. Not tied to your name, email, phone, or any account. We cannot reverse it to identify you. |
| App & device metadata | App version, OS version, device model, locale, timezone. Used to know whether a bug is iOS-only, India-only, or specific to one build. |
| Crash stack traces | If GaadiLog throws an unexpected error, the stack trace is captured so we can fix it. The trace is code line references — it does not contain anything you have logged. |
What is never sent, even with analytics on:
- Your name, email, or phone number (we do not have these anyway).
- Vehicle plate numbers, makes, models, or any vehicle identifier.
- Fuel, service, or expense values.
- Photos — invoices, document scans, or vehicle pictures.
- Your location.
- Any free-text you have typed into the app.
You can flip the toggle off at any time. Once off, no further events leave the device. Events already sent before you turned it off remain in PostHog and decay per the retention policy below.
Permissions, and why
| Permission | Why we ask · what we do with it |
|---|---|
| CameraiOS & Android | To photograph your vehicle, service invoices, and document scans (RC, insurance, PUC) directly from inside the app. The image is saved into the app's private storage on your device. It is not uploaded anywhere. |
| Photo libraryiOS & Android | To attach photos you already have (existing invoice scans, document images) to a service or document record. The image is copied into the app's private storage. The original in your library is unchanged. |
| NotificationsiOS & Android | To remind you when a document is about to expire, or when a service interval is due. All reminder scheduling happens on your device via the operating system's local-notification system. No push servers are involved. |
| Receive boot completedAndroid only | To re-arm your scheduled reminders after you reboot your phone. The app does no other background work. |
What we share
If analytics is off — the default — nothing. There is no advertising SDK, no tracking pixel, and no other third-party telemetry in the app.
If analytics is on, the anonymous events described above are sent to PostHog, our analytics provider, acting as a contractual sub-processor. PostHog's own privacy policy is at posthog.com/privacy. They do not get a license to resell, repackage, or share your usage data — we use their platform only to read it ourselves.
The app's only other network use is downloading the Material 3 system fonts via Flutter's standard rendering, and only if your device has not cached them already.
Where your data lives
Everything you log lives in GaadiLog's private storage on your device, in a SQLite database file:
iOS: in the app's container directory, accessible only to GaadiLog itself and to iOS system tools.
Android: in the app's internal storage directory, accessible only to GaadiLog itself.
If you delete the app, this data is deleted along with it. There is no remote copy.
If you have turned analytics on, the anonymous events described earlier also live in PostHog's EU cloud infrastructure (GCP Frankfurt), retained for 12 months and then discarded. Uninstalling the app does not retroactively delete events already sent — but no new events will be sent.
Export
You can export your data at any time as CSV (per vehicle, or for all vehicles) and as PDF (a per-vehicle service-history report). The OS share sheet then hands the file to whichever app you choose. Once it leaves GaadiLog's share sheet, the receiving app's privacy policy applies — not ours.
Children
GaadiLog has no age gate because it does not collect personal information from anyone. The Indian-market context means most users will be adults registering vehicles, but there is nothing in the app that identifies, tracks, or profiles users of any age.
Changes to this policy
If the policy changes, the new version appears at the same URL with an updated effective date. Material changes — anything that affects what data leaves your device — also surface in-app via a one-time upgrade banner the next time you open it. The most recent such change was v1.2, which introduced the optional analytics toggle described above.
Contact
Questions, concerns, or notice of any kind: akagr@outlook.com.