Privacy Policy
Effective date: 29 August 2026
Odovia is a car maintenance and expense tracking app built by Kodrena. This page explains what data the app processes, why, and what rights you have over it. It is not boilerplate: it describes what the app actually does.
Data we collect
- Account: full name and email address. Passwords are stored only as irreversible hashes (bcrypt).
- Vehicles: plate, make, model, year, fuel type, engine size, colour, purchase date and purchase mileage.
- Records: odometer readings, fuel entries (litres, unit price, amount, full-tank flag), expenses, service records and reminders.
- Receipt images: the receipt photos you upload, the text extracted from them and the parsed fields.
- Technical: a session token to recognise your device, plus your language and currency preference.
Receipt images are processed on the server
A receipt photo does not stay on your device: it is uploaded to our server with the record, converted to text by a Tesseract OCR engine running on that server, and stored against your account. The image and the extracted text remain on the server until you delete your account. Receipts are not sent to any third-party service; the reading happens on our own server.
What we do not collect
- No location data. The app never asks for location permission.
- No analytics or tracking. There is no third-party measurement SDK.
- No advertising and no advertising identifiers.
- Contacts, call logs and other files on your device are never read. Camera and gallery access is used only for the receipt photo you choose.
Sharing
Your data is not shared with third parties, not sold and not used for marketing. It lives only on the servers that run the app. Lawful requests from competent authorities are answered where legally required.
Retention
- Your records are kept as long as your account exists.
- When you delete your account, vehicles, odometer readings, expenses, fuel entries, reminders, service records, receipt images and session tokens are erased immediately and permanently.
- Daily backups are kept for at most 7 days; deleted data disappears from backups within that window.
Your rights
Under GDPR and the Turkish data protection law (KVKK, no. 6698):
- Access: see every record in the app and export it as CSV from Settings > Data.
- Rectification: edit any record in the app.
- Erasure: Settings > Delete account removes your account and all data permanently.
- Portability: CSV/JSON export gives you a machine-readable copy.
- Objection and complaint: write to us, and if you are not satisfied you may complain to your data protection authority.
Security
- All traffic between app and server runs over HTTPS (TLS).
- Passwords are hashed with bcrypt; plaintext passwords are never stored.
- Session tokens are per device; resetting your password signs out every device.
Children
The app is not directed at children under 13 and does not knowingly collect data from them.
Changes
If this page changes, the effective date changes with it; significant changes are announced in the app.
Contact
Data controller: Kodrena
Email: destek@aracbakim.online