Privacy notice
Last updated: 12 October 2026
This notice explains which personal data the Galindo app processes, why, who we share it with, how long we keep it, and what your rights are. It is written under Regulation (EU) 2016/679 (GDPR).
It applies to Galindo 2.0. The previous version (1.x), which remains available for devices on iOS 17, works partly differently: where something changes, we say so.
1. Data controller
The data controller is Luca Carnaroli, based in Italy.
For anything about your data, write to support@galindo.app.
2. What data we process
2.1 Data you enter about your vehicles
- Make, model, number plate, registration date, fuel type, transmission, engine size, tyres, dimensions
- Purchase date and price, mileage
- Deadlines (road tax, insurance, inspection, servicing, fines) with amounts, dates and payment status
- Jobs and events (maintenance, breakdowns, accidents, modifications) with costs, garage and notes
- Refuels and charges with amounts, quantities and station
- Notes you choose to add
- Photos you attach to vehicles and to individual entries
In version 2.0 this data stays on your device and, if you use iCloud, in your private iCloud space, managed by Apple: we cannot read it and it does not pass through our servers.
In version 1.x it is stored in our database. If you have moved to 2.0, the copy on the server remains until you delete your account; once version 1.x is no longer in use we will delete it, telling you in the app beforehand.
Number plates and photos of vehicle documents are personal data, because they relate to a vehicle that can be linked to a person. Only enter documents that are yours or that you are authorised to use.
2.2 Account data
In version 2.0 an account is optional: the app works without one, and it is used to recover your data from version 1.x. If you create one, you sign in with Sign in with Apple or with your email address and a code we send you, without a password. We keep your email address and an account identifier.
With Sign in with Apple you can choose to hide your real address: in that case we receive a relay address generated by Apple and never learn the real one.
In version 1.x an account is required and we also collect the name you give. There you can also sign in with Google, from which we receive your email and name, or with email and password: we never see your password, because the authentication provider stores it encrypted.
2.3 Preferences
Language, currency, country and units stay on your device. Version 1.x also saves them in your profile, so we can write to you in your language.
2.4 Technical usage data
To apply plan limits we count your scans each month. In version 2.0 the count is linked to an identifier of your installation of the app, created with Apple's App Attest service, which also lets us check that requests really come from the app; if you have Galindo Pro, it is linked to the subscription identifier assigned by Apple. Neither contains your name or your email.
In version 1.x we also count the documents you generate and keep a record of service emails already sent (which email and when), so we never send you the same notice twice.
We do not profile your behaviour, do not use advertising trackers and do not show ads.
2.5 Purchases and subscriptions
Payments are handled entirely by Apple: we never receive or store your card details.
In version 2.0 the app checks purchases and subscriptions directly with the App Store, on your device. When you scan with Galindo Pro, it sends our server the proof of purchase signed by Apple, which we use only to verify the subscription and count scans.
In version 1.x we use RevenueCat, which receives purchase receipts from Apple linked to a random identifier of your account and shows us overall statistics on subscriptions and renewals; in our database we keep the state of your subscription (active plan, expiry date, whether a free trial is running, automatic renewal). Apple also sends RevenueCat the renewal, cancellation and refund notifications for purchases made with 2.0. We never share your name or email with RevenueCat.
3. Why we process this data
| Purpose | Legal basis |
|---|---|
| Showing you your vehicles' data and, in version 1.x, storing it in our database | Performance of a contract |
| Creating and managing your account, if you create one, and bringing your version 1.x data into 2.0 | Performance of a contract |
| Sending deadline reminders on your device | Performance of a contract |
| Extracting data from documents you photograph | Performance of a contract, at your request |
| Managing plans, free trials, subscriptions and purchases | Performance of a contract |
| Sending service emails: the sign-in code and, in version 1.x, account confirmation, password recovery and the reminder before a free trial ends | Performance of a contract |
| Protecting the service from abuse and automated use | Legitimate interest |
| Answering support requests | Legitimate interest |
| Complying with tax and legal obligations | Legal obligation |
We do not send newsletters or promotional messages.
4. Document scanning
When you use scanning, the photo goes through our server to Anthropic, which analyses it to extract the fields (garage, amounts, dates, mileage) and returns the result to us. Along with the photo the app sends the language and country you have set, which are needed to read dates and amounts correctly.
- A photo is sent only when you start a scan, never automatically.
- Our server does not store the photo: only the extracted data you confirm is kept.
- Anthropic keeps the photo and the result for up to 30 days, then deletes them automatically, and does not use them to train its models. It may keep them longer only if a request breaches its usage policies or if the law requires it.
- Anthropic is based in the United States: sending the photo is a transfer outside the European Union (see § 6).
- You can always enter the data by hand: scanning is a convenience, not a required step.
5. Who we share data with
We rely on the following providers, who process data on our behalf and only for the purposes listed.
| Provider | What it does | Where |
|---|---|---|
| Supabase | Database, authentication and server functions (scanning, accounts); in version 1.x also photos | European Union (Ireland) |
| Anthropic | Extracting data from photos | United States |
| RevenueCat | Managing purchases and subscriptions in version 1.x, App Store notifications | United States |
| Resend | Sending service emails, including the sign-in code | United States |
| Apple | iCloud, App Attest, Sign in with Apple, payments, app distribution | United States / EU |
| Sign in with Google (version 1.x) | United States / EU | |
| Cloudflare | Hosting this website, managing the domain and the support address | United States / global network |
The vehicle data that 2.0 syncs to iCloud sits in your Apple account and is processed by Apple under its own privacy policy: we have no access to it.
We do not sell your data and do not share it with third parties for advertising or marketing.
6. Transfers outside the European Union
Some providers are based in the United States. These transfers rely on the safeguards in Chapter V of the GDPR: the standard contractual clauses adopted by the European Commission and, for providers that have joined it, the EU-U.S. Data Privacy Framework.
7. Security and retention
Data is encrypted in transit. In our database, access rules let each user read only their own data; version 1.x photos are kept in a private area and open only through temporary links generated for their owner and valid for one hour.
In version 2.0 your vehicle data stays on your device and in iCloud until you delete it from the app; to remove it from iCloud as well, you can use your device's iCloud settings.
We keep account data for as long as the account is active. When you delete it, we irreversibly delete your profile and, if there is any, your version 1.x data: vehicles, deadlines, events, refuels, photos, usage counts and the log of emails sent. Deleting your account does not delete the data that 2.0 keeps on your device and in iCloud.
The scan count and the installation identifier contain neither your name nor your email: we keep them for as long as they are needed to apply monthly limits and prevent abuse.
The only things that remain, outside our direct control, are:
- at RevenueCat, the purchase history linked to your account's random identifier, which contains neither your name nor your email;
- at Apple, the purchase data it keeps under its own privacy policy;
- at Anthropic, any scans from the last 30 days, until they are deleted automatically.
Deleting your account does not cancel an active subscription: you cancel it from your Apple ID settings.
8. This website
galindo.app uses no profiling cookies, analytics tools or advertising pixels. Fonts are served directly from our own domain. Cloudflare, which hosts the site, processes visitors' IP addresses to deliver pages and protect them from attacks.
The account confirmation and password recovery pages talk to Supabase only to complete the action you requested.
9. Your rights
You can ask at any time to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. In the app you'll find "Download my data" and "Delete account" to do this directly.
For any other request write to support@galindo.app. You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it) or with the authority of the country where you live.
10. Children
Galindo is not intended for anyone under 16, and we do not knowingly collect their data.
11. Changes
If we update this notice, we publish the new version here with its update date. For material changes we also let you know in the app.