FuelFox Privacy Policy
FuelFox helps you find cheap fuel near you and along your route. This policy explains what personal data the FuelFox app and its server (api.fuelfox.me) process, why, and what rights you have.
Who is responsible
The data controller is Massimiliano Vinciprova, Italy. For any privacy question or request, write to [email protected].
What we process and why
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Your location (GPS coordinates), only while you use the app and only if you allow it | Showing stations and prices near you or along a route. Coordinates are sent with each search and are not stored in your account. | Legitimate interest in providing the service you asked for (6.1.f) |
| Searched places and route start/end points | Turning a typed address into a place and calculating a route. Results are cached on our server for up to 24 hours (places) and 6 hours (routes) to keep the app fast; the cache is not linked to your account. | Legitimate interest (6.1.f) |
| Account data: email, optional name, password (stored only as a one-way hash). If you sign in with Apple or Google: the email (or Apple's private relay address) and name they share, and their user ID for you. We never see your Apple or Google password. | Creating and securing your account. | Contract (6.1.b) |
| Your vehicles (type, fuel, tank size, consumption, optional name) and the refuels you log (date, litres, amount paid, price per litre, station and brand, full tank or not, optional odometer reading) | Calculating savings for your vehicle, and showing your refuel history and statistics (spend, consumption, cost per km). Without an account this stays on your device; with an account it is saved to it so it syncs across your devices. | Contract (6.1.b) |
| Your price alerts (station, fuel, target price) and, if you allow notifications, a push token for your device | Notifying you when a station's price reaches your target. The token is deleted when you sign out or the app is uninstalled. | Contract (6.1.b) |
| The same vehicle and refuel data, combined across all users | Aggregated statistics without names or emails (for example how often drivers refuel, average litres, popular fuel types and brands) to understand fuel use and improve FuelFox. We do not share them with anyone. | Legitimate interest (6.1.f). You can object at any time by writing to us, or by deleting your refuels or your account. |
| Favourite stations and fuel prices you report | Saving your favourites and improving price data for everyone. Reported prices may be shown to other users without your name. | Contract (6.1.b) |
| Technical server logs: IP address, time, requested address, app/browser version | Security, abuse and fraud prevention, troubleshooting. | Legitimate interest (6.1.f) |
| Advertising identifiers and consent choices (see below) | Showing ads that fund the free app, measuring them and preventing ad fraud. | Consent for personalised ads and device storage (6.1.a, ePrivacy); legitimate interest for non-personalised ads |
We do not sell your personal data, and fuel rankings are never influenced by advertising.
Advertising and your consent
FuelFox shows ads through Google AdMob (Google Ireland Limited). If you are in the European Economic Area, the UK or Switzerland, the app asks for your consent before any ads are requested, using Google's consent message. Depending on your choice, Google may use your device's advertising identifier, IP address and app interactions to show personalised or non-personalised ads. On iPhone, the app asks for Apple's tracking permission before the advertising identifier is used.
You can change your choice at any time in the app (Savings tab → Ad privacy settings), and on iPhone in Settings → Privacy & Security → Tracking. How Google uses data: policies.google.com/technologies/partner-sites.
Who else receives data
- OVH (France) hosts our server and database.
- OpenStreetMap Foundation serves the map images. Your device loads them directly, so OSM receives your IP address and the map area you view (their policy).
- Photon by komoot (Germany) turns place searches into map locations. Our server sends the search text and an approximate location, not your account or IP address.
- OSRM (Project OSRM) calculates routes. Our server sends the route's start and end points only.
- Google provides fuel prices for some countries (e.g. Czechia, Slovakia; our server sends the area being searched, not your account) and ads through AdMob (see above). If you choose Sign in with Google, Google confirms your identity to us.
- Google Firebase Cloud Messaging delivers price-alert notifications. It receives your device's push token and the notification text, not your email or location.
- Apple confirms your identity if you choose Sign in with Apple, and processes in-app purchases.
- Official price sources, such as the Italian Ministry (MIMIT), only send data to us; we send them nothing about you.
Some of these providers may process data outside the EU. Where that happens, transfers rely on an adequacy decision (for example the UK, or the EU-US Data Privacy Framework for Google) or on standard contractual clauses.
How long we keep data
- Account data, vehicles, refuels, favourites, price alerts and price reports: until you delete them or your account.
- Server logs: up to 14 days.
- Place and route cache: up to 24 hours.
- On your device: your sign-in token and app settings stay until you sign out or uninstall the app.
Your rights
Under the GDPR you can ask to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw consent at any time (this does not affect processing before the withdrawal). To delete your account and all data linked to it, email [email protected] from the address you signed up with. We answer within one month.
You can also complain to a data protection authority. In Italy this is the Garante per la protezione dei dati personali.
Children
FuelFox is not directed at children under 14, and we do not knowingly collect their data.
Security
All traffic between the app and our server is encrypted (HTTPS), passwords are stored only as hashes, and the server is reachable only through a hardened proxy.
Changes
If we change this policy, we will update the date above and, for significant changes, tell you in the app.