Privacy Policy

What we collect

Nothing beyond what the purposes below require.

• Account: your email address, the language and theme you chose, and the country inferred from the preferences your browser declares.
• Identity provider identifier, if you sign in with Apple, Google or Tesla. With Apple, that identifier is enough: if you choose to hide your address, we only ever receive the relay address Apple gives us, never your own.
• Your grid: section names, bookmark titles and addresses.
• Paired vehicles: the name you give them, the model and trim, and the date of last activity.
• Tesla account, if you link one: an encrypted access token and your account's region.
• Data your vehicle sends, if it is transmitting: charge level and limit, range, odometer, door, lock and Sentry Mode state, the pressure of all four tires, inside and outside temperature, climate state, distance driven on Full Self-Driving, software version, the vehicle's GPS position, speed and heading, and whether it is at its home or work location: two indications the car gives without ever sending us the matching address.
• The destination set in the vehicle, if there is one: its name, its coordinates and the time remaining. Only the CURRENT destination is kept; no history of it is retained, and it stops being displayed after six hours without a refresh.
• Charging sessions: date, duration, start and end levels, energy delivered, charger used and cost. Cost is estimated from the rates you enter, or read from your Tesla billing if you allow us to read it.
• The charge limits you set for home and for work.
• Television channels you favorite, and your electricity rates if you enter them.
• Spotify account, if you link one: encrypted tokens, used to show and control what is playing. We keep neither your listening history nor your playlists.
• Subscription: its status, its renewal date, and the identifiers given to us by whoever takes the payment - Stripe for a purchase on the website, Apple or Google for a purchase inside the iPhone or Android app.
• Parking: the time the vehicle stopped and, if you left the setting on, the position of that stop, the bay marker and the parking-meter timer you may note yourself. Only the latest parking spot is kept; the next one replaces it.
• Charge level over time: one reading per one-percent change, kept for as long as your account exists. This is what draws the battery curve, and what lets you go back beyond the last thirty days to see how it ages. These readings are erased with the account.
• Trips: precise timestamped positions, distances traveled and the towns where they start and end. Recording is on by default and can be turned off at any time in your settings.
• Assistance, if you fill it in: your insurer's name, its assistance number, your policy number and the vehicle's warranty end date. This is only used to show it back to you on the car screen; it is shared with no one.

Your location (location data)

iCar for Tesla accesses the precise location of your phone, of your vehicle's browser and of the vehicle itself. This section explains where it comes from, when it is read, what it is used for, what is kept, who it is shared with and how to stop it.

• Phone, app open (iPhone and Android): with the location permission you grant, the app reads the precise GPS location, speed and heading while it is open. It is used to show the map, the weather and the Cockpit (speed, road you are on), to announce speed cameras, traffic, community reports and points of interest on your route, to find chargers within reach, to place a report you make, and to note where you parked when you ask it to.
• Phone, in the background: if trip recording is on, no Tesla on your account is already sending its own data, and only after you have allowed it ("Always" on iPhone, "Allow all the time" on Android), the app records your location while you travel, even when it is closed or the screen is off, to record your trips. On Android, a persistent notification shows it for as long as recording runs. These positions are used for your trips only.
• Vehicle browser: with the permission you give the browser, the iCar screen in the car reads its location for the same uses as the open app, and to record your trips while it is displayed.
• Vehicle, through Tesla: if you link your Tesla and turn data sharing on, the car sends its GPS position, speed and heading, the destination set in its navigation and the route currently planned. The "Locate the car" button also asks Tesla for its position at that moment.
• What we keep: your trips (timestamped positions, towns where they start and end), the latest parking spot, the current destination and route (no history, no longer shown after six hours without a refresh), the address of the parking spot in the Sentry Mode log (ninety days), the reports you make (their position, shown to other drivers without your name, until they expire) and the addresses you choose to save. Your recent destinations stay on the device and are not sent to us.
• Everything else is used to answer the request and then forgotten: the location used to announce a speed camera, look for a charger or show the road you are on is neither recorded nor retained. No location is ever written to our logs.
• Who it is shared with: our servers, hosted in France by OVH. To name the towns of your trips and the address of a parking spot, and to search for a destination, our servers send coordinates to Photon (Komoot, Germany); to read the speed limits along a trip, they ask Overpass (OpenStreetMap, Germany) for the roads of an area a few kilometers wide; to find the charger of a charging session, they send the point where the previous trip ended to the national charger registry (data.gouv.fr, France), to Open Charge Map and, failing that, to Overpass. No name, email address or identifier goes with them. The services the device contacts itself are listed below. Your location is never sold or used for advertising.
• How to stop it: withdraw the location permission in your phone or browser settings ("While Using the App" is enough to stop background recording), turn off trip or parking recording in your settings, or turn off vehicle data sharing. Features that need your location then stop using it. Deleting your account erases every location kept.

What the vehicle sends us, and what we send it

Two distinct exchanges, with different reach and different permissions.

• The vehicle PUSHES its data to our servers, continuously, over an encrypted link Tesla establishes at your request when you turn the feature on. We ask for nothing: the car transmits, and only the information listed above.
• iCar for Tesla can also SEND commands to your vehicle, and only when you ask for them: a destination to its navigation, the charge limit when you have set one for the place you plug in, Sentry Mode, Dog Mode, Camp Mode, Valet Mode, opening either trunk, the media player controls, and the headlights or the horn to find the car again. No command is ever sent on its own, with one exception you set yourself: the charge limit, applied once per parking when you plug in.
• Those commands require a permission Tesla does not split up: the one it asks you for also covers the doors, the trunk and Sentry Mode. iCar for Tesla does not use it for those, and will not without telling you. You can withdraw it at any time from your settings, or from your Tesla account under “Third-Party Apps”.

What we do not collect

Weather and map tiles are requested directly by the vehicle's browser or by the app, without passing through us: we see nothing of them.

Your vehicle's identification number is never kept in the clear: we keep only a fingerprint of it, enough to recognize the car but not to recover the number.

Your home address and your work address are never sent to us. The car says it is there; it does not say where that is.

Where you plug in is not retained: we keep only the identifier of the charger recognized, never its coordinates.

To announce points of interest and speed cameras along your route, and to work out which chargers you can still reach, the vehicle sends its position to our servers. It is used to answer the request and then forgotten: it is neither recorded nor retained.

Two features are the exception and do keep a position. Trip recording, which keeps the route you drove. And parking, which keeps the last place the car stopped so that you can find it again - that one only, replaced at the next stop. Each has its own setting under "Privacy", and you can turn them off independently.

When you turn parking recording off, the position already on file is erased and no further one is recorded. We still keep the DATE the car stopped, without the place: that is what lets Sentry Mode arm itself and the departure alert fire only once. In exchange, Sentry Mode alerts no longer carry the address of where they happened.

The “Locate the car” button in your settings also asks Tesla, at the moment you tap it, for the vehicle's current position. It is shown to you and not retained.

No position is ever written to our logs, under any circumstance.

Why, and on what basis

• Providing the service (your account, your grid, its sync to the vehicle): performance of our contract.
• Using the location of your phone, browser or vehicle for the map, weather, Cockpit and announcements: the location permission you grant, which you can withdraw at any time in the device settings.
• Recording your trips: our legitimate interest in providing the trip log the service offers. Recording is on by default and can be turned off at any time from your settings; background recording by the phone only starts with the permission you grant the system. Turning it off stops recording without erasing the history already collected.
• Receiving your vehicle's data and sending it a destination, a charge limit or a command: your consent, given to Tesla when you sign in, and withdrawable on either side.
• Sending you a monthly summary of your trips and charging: your consent, given by ticking the matching box in your settings and withdrawable in one click from any of those emails.
• Keeping the service secure and preventing abuse: our legitimate interest.

Who else has access

We sell no data and pass none on for advertising purposes.

• OVH (France) hosts the service and its backups.
• OVH carries the emails you ask for: sign-in link, note, trip.
• Brevo (France) carries recurring mail, including the monthly summary if you asked for it.
• Apple, if you sign in with an Apple account or subscribe inside the iPhone app.
• Spotify, if you link your account.
• Google and Tesla, if you choose to sign in through them or to link your vehicle, and Google if you subscribe inside the Android app. These exchanges leave the European Union.

What the vehicle and the app contact directly

Some features are requested by the vehicle's browser or by the app itself, without passing through our servers. Those services therefore see the device's IP address and what it asks for, including the area of the map shown or the place it asks the weather for. We receive nothing from these exchanges, but you should know they happen.

• Open-Meteo, for the weather where you are driving.
• OpenStreetMap, for map tiles.
• OpenFreeMap, for the detailed map on the navigation screen, its fonts and its icons.
• Wikimedia, for photographs of the points of interest announced.
• Waze, if your grid holds its shortcut and you open it. The address opened then tells Waze the vehicle's position and, if one is set, its destination, which is what saves you from entering them again. Nothing is opened unless you tap the tile.
• Google Maps, if you start a route without Tesla authorization: the address opened tells it the chosen destination. Nothing is opened unless you tap.

Who processes data on our behalf

These providers act on our instructions and for the purposes described here only.

• Stripe Payments Europe, Ltd., for subscriptions and billing. Your card details are entered on Stripe's pages: they never pass through our servers and we store none of them. All we know about your payment is its status and its renewal date.
• Brevo, for recurring mail, including the monthly summary.
• OVH, for carrying the emails you ask for.
• Apple, for signing in with an Apple account and for subscriptions purchased inside the iPhone app.
• Spotify, if you link your account.
• OVH SAS, which hosts the service in France.
• Google and Tesla, if you choose to sign in or link your vehicle through them, and Google for subscriptions purchased inside the Android app.

For how long

• Account, grid, vehicles and charging sessions: as long as the account exists.
• Recorded trips: as long as the account exists. We do not yet apply automatic erasure; deleting your account erases them right away, and you can otherwise ask us to delete them at any time.
• Destination set in the vehicle: only the current one, cleared as soon as the vehicle stops reporting it, and never shown beyond six hours.
• Charge level over time: as long as the account exists. We do not apply automatic erasure: that is what makes it possible to compare the battery from one year to the next.
• Parking: the latest one known, replaced at the next stop. Turning the setting off erases the position already on file.
• Community reports: until they expire, then erased.
• Saved addresses: until you remove them, or with the account.
• Vehicle event log - Sentry Mode passes and alarms, openings, departures: ninety days, then automatic erasure. Each event carries the address of where the car was parked, when it is known. Software version changes are the exception and are kept as long as the account exists: they form the vehicle's firmware history.
• Sign-in links and codes, and the deletion confirmation link: one hour.
• Encrypted backups: thirty days on the server, ninety days on their off-site copy, after which rotation destroys them. Data deleted from your account may therefore survive in those backups until they are destroyed.

Deleting your account and your data

You can delete your account yourself, at any time, without writing to us: from your settings in the app, or from the geticar.com/suppression-compte page.

It takes TWO steps. You first retype the account's address, which erases nothing; we then send you an email, and the link it contains is what triggers the deletion. Without that confirmation your account stays intact - and if you receive the message without having asked for it, doing nothing is enough to stop it. The link is valid for one hour and works only once. Once confirmed, deletion is immediate and permanent.

It erases the account and everything attached to it: your favorites grid, your vehicles, your trips and their tracks, your charges, your parking, the Sentry Mode log, your battery readings, and the access tokens for the services you had linked. Beyond the encrypted backups, destroyed by rotation on the schedule set out above, one single thing remains, and it is described right below.

ONE TECHNICAL RECORD PER VEHICLE is kept for statistics: model, model year, trim, color, mileage, battery capacity and health, average consumption, energy charged, distance driven and share of self-driving, along with the country, the units, the insurer you had entered, the subscription origin and the MONTHS the account opened and closed. It carries neither your address, nor your name, nor any position, nor any trip, and no link back to your account remains, since the account no longer exists.

A running subscription taken out on the website is canceled right away, before the erasure, and one taken out in the Android app is stopped with Google. A subscription taken out in the iPhone app is canceled in your iOS settings: Apple does not let us do it for you, and the deletion screen says so.

Two authorizations cannot be revoked by us, because their interfaces do not allow it: the one on your Tesla account and the one on your Spotify account. You withdraw those with them, under third-party apps. We stop using them the moment you delete your account.

So that an irreversible step is not taken by accident, deletion asks you to retype your email address.

Your rights

You may request access to your data, its correction, erasure or portability, object to a processing operation, or withdraw a consent.

Erasure takes no request at all: it happens from the app or from geticar.com/suppression-compte, as described above. For anything else, write to contact@geticar.com.

You may also lodge a complaint with your national data protection authority.

Security

Traffic is served over HTTPS. Tokens granting access to third-party services are encrypted at rest and unreadable without a key held separately. Backups are encrypted before being written to disk.