Privacy Policy

1. Who we are

CarCY (carcy.site) is a motoring directory and toolkit for drivers in Cyprus. For any privacy question, write to [email protected].

2. Information the app uses

• Location (optional): if you allow it, your device location is used to centre the map on you and show nearby services, fuel stations and chargers. To show an address, coordinates may be sent to our server for reverse geocoding. We do not link them to your identity and do not keep a location history. The app works without this permission.

• Calendar (optional): only when you tap the MOT reminder button, the app asks for calendar access and creates one event with reminders in a calendar on your device. Your calendar contents are not uploaded or shared.

• VIN you enter: when you use the VIN decoder, the VIN is sent to our server, which queries the public US NHTSA vPIC database to decode it. We do not link it to you.

• Map tiles: map images are loaded from OpenStreetMap servers, which receive your IP address as part of any web request, under their own privacy policy.

• On-device storage: your language setting and cached content (news, guides, listings) are stored only on your device and are removed when you clear app data or uninstall.

• Server logs: like any web service, our servers record IP address, time and requested address in technical logs for security and operation.

3. Website

• Contact form: if you write to us through the form, we store your name, email, message and IP address to answer you and prevent abuse.

• Analytics: the website (not the app) uses Google Analytics and Yandex Metrika to understand how pages are used. They may set cookies and process your IP address and device data under their own policies. You can block them in your browser settings.

4. Sharing

We do not sell your data. Data is shared only with service providers needed to run CarCY (hosting, the NHTSA VIN database, OpenStreetMap, and the analytics tools above) or when required by law.

5. Retention

Contact messages are kept as long as needed to handle your request. Technical logs are kept for a limited period. On-device data stays until you delete it.

6. Your rights

Under the GDPR and Cyprus law you may ask us to access, correct or delete personal data we hold about you, or object to its processing, by writing to [email protected]. You may also complain to the Office of the Commissioner for Personal Data Protection of Cyprus. You can withdraw location and calendar permissions at any time in your device settings.

7. Children

CarCY is not directed at children under 16 and we do not knowingly collect their personal data.

8. Security

All app traffic uses HTTPS. No method of transmission or storage is completely secure, but we limit the data we collect to what is needed.

9. Changes

We may update this policy. The date at the top shows the latest version; material changes will be reflected here.

10. Contact

Questions about this policy: [email protected].