Last updated: 18 August 2026

XeTrack is a record-keeping app for your own vehicles. It holds what you type into it and the photos you attach — nothing is collected to build a profile of you, and nothing is sold. This page explains exactly what is stored, where it goes, and how to remove it.

This policy covers the XeTrack mobile app for iOS and Android and the accounts behind it. The service is operated by XeTrack (“we”, “us”).

What we collect

Why we use it

• To run the service — keeping your garage, expenses and documents available to you, and syncing them between your devices.
• To identify you — so only you can reach your records.
• To send what you asked for — reminders and service notifications you have enabled.
• To show ads on the free tier — Google AdMob serves and measures ads for Basic accounts using your advertising identifier and consent choices; Premium accounts are ad-free.
• To answer support requests — when you email us, we use the message and your account details to help you.
• To keep the service secure and working — diagnosing failures, preventing abuse, and meeting our legal obligations.

Where the GDPR applies, our legal bases are performance of a contract with you (running the app), your consent (notifications, camera and photo access, and personalized ads where required), and our legitimate interest in keeping the service secure. You can withdraw consent at any time in your phone settings or, for ads, through the consent prompt shown in the app.

Who else sees it

We share personal data only with the providers that make the app work:

• Google Firebase (Authentication, Cloud Messaging) — sign-in and push delivery.
• Google Sign-In and Facebook Login — only if you choose that sign-in method, and only to authenticate you.
• Google AdMob — shows and measures ads on Basic accounts, and receives your advertising identifier for that purpose. Not used on Premium accounts.
• RevenueCat — manages Premium subscriptions and purchases, linked to your account through your account ID.
• Our hosting and storage provider, Firebase and AWS (Vietnam), which stores your account, records and uploaded images.

These providers act on our instructions and may not use your data for their own purposes. Beyond them, we disclose data only if the law requires it, or to establish or defend a legal claim. Your data may be processed in Vietnam.

How long we keep it

Your account and records are kept for as long as your account exists. Delete an individual vehicle, expense or document and it is removed from the app immediately and cleared from our systems within 30 days. Delete your account and everything goes — see how to delete your account for the exact timing and the short list of records we are required to keep.

Your rights

• See and correct your data — in the app, under Profile.
• Take a copy with you — open a vehicle and use Export to save a PDF of its documents and expense history.
• Delete it — individual records in the app, or the whole account via the account deletion page.
• Object, restrict, or withdraw consent — write to us and we will act on it.

We answer requests within 30 days and never charge for them. If you are in the EU or UK and are not satisfied with our response, you may complain to your local data protection authority.

Security

Traffic between the app and our servers is encrypted in transit, sign-in is handled by Firebase rather than by us, and access to production data is limited to the people who need it. No service can promise perfect security, so please use a strong, unique password and keep your device locked.

Children

XeTrack is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from them; if you believe a child has an account, write to us and we will remove it.

Changes to this policy

If we change how we handle your data, we will update this page and move the date at the top. Significant changes will also be announced in the app before they take effect.

Contact