Last updated 23 September 2026 · Türkçe
The short version: your records live on your phone. An account is optional. The free version shows ads through Google AdMob; we ask before showing personalised ones and you can decline. CarOS Pro removes ads entirely. There is no third-party analytics SDK in the app.
CarOS is published by Volkan İlkay Bedel. For anything on this page, including a request to see or delete your data, write to v.ilkay66@gmail.com.
Everything you enter: the car itself, odometer readings, fuel and charging, services, expenses, documents and their files, tyres, battery, warranties, incidents and their photos, symptoms, parking, trips, valuations and finance records. Your VIN, number plate, documents and financial records can be placed behind Face ID, and are excluded from widgets, notifications and exports you have not asked for.
If you never sign in, this data never leaves your phone. The app is fully usable that way.
Signing in exists for two reasons: a backup if you lose the phone, and the same car on a second device. Your records are then copied to a database we operate on Supabase, under row-level security rules that allow only your own account to read them. Files go to private storage buckets, served only through short-lived signed links.
We store the email address you signed in with. If you use Sign in with Apple and hide your address, we receive only Apple's relay address. No password is ever created or stored — sign-in is a one-time code or Apple's own flow.
| What | Where it goes | When |
|---|---|---|
| Your records and files | Your account on our Supabase backend | Only while signed in and sync is on |
| Your email address | Supabase authentication | When you sign in with email |
| A VIN, on its own | The public vPIC database of the US Department of Transportation | Only when you tap "Read the VIN". Nothing else is sent with it. |
| A Car Passport you chose to share | A link you generate and can revoke | Only when you create it, and only the fields you ticked |
| Purchase validation | RevenueCat and Apple | If you buy or restore Pro. Your card details never reach us. |
That is the complete list.
The free version of CarOS shows banner and interstitial ads through Google AdMob. A CarOS Pro subscription removes ads entirely.
To serve them, AdMob receives technical information from your device: device and operating system type, approximate location (country or city level, from your IP address), and whether an ad was shown or tapped. Your car records, service history, fuel logs, documents and saved places are never sent to the ad network.
Personalised ads and the advertising identifier (IDFA) are used only with your permission. If you choose Ask App Not to Track on the iOS prompt, your advertising identifier is not used and you see only non-personalised ads. You can change this at any time in Settings › Privacy & Security › Tracking.
In the European Economic Area, the United Kingdom and Switzerland, Google's own consent form is shown on first launch; you can change that choice in the app under Settings › Privacy options.
On your device, until you delete it. On the server, until you delete the record or the account. Ordinary infrastructure backups are overwritten within 30 days.
CarOS is not directed at children and does not knowingly collect data from them.
If this policy changes in a way that affects what leaves your device, the app will say so before the change takes effect, rather than only updating this page.