Privacy Policy

This Privacy Policy describes how Car Zone (“we”, “us”, or “the app”) collects, uses, stores, and shares information when you use the Car Zone mobile application (the “App”).

Car Zone helps you manage vehicles, maintenance and fuel history, optional location-related features, and a marketplace for automotive listings.

1. Who we are

The data controller responsible for the App is:

• Potentia Motus Ventures Ltd
• Address: 15 Nsambya Estate Road, Kampala
• Contact (privacy): motuspotentia@gmail.com

If you use a separate developer or publisher account for app stores, ensure those details match what you declare in Google Play and the Apple App Store.

2. Information we collect

2.1 Account and authentication

When you create or sign in to an account, we process:

• Email address and password (if you register with email/password).
• Google account profile information if you choose Google Sign-In (for example, name, email address, and profile photo URL as provided by Google).
• A unique user identifier assigned by our authentication provider (Firebase Authentication).

Authentication is handled through Google Firebase Authentication. Google processes certain data according to its own policies when you use Google Sign-In.

2.2 Vehicle and insurance-related information

Depending on what you enter or upload, we may process:

• Vehicle details such as nickname, make, model, year, VIN, license plate, vehicle type, and related metadata you provide.
• Insurance policy identifiers, expiry dates, and similar administrative dates you choose to store.
• Photos of your vehicle and images or scans of documents you attach (for example, driver’s license, logbook, or service-related documents), when you provide them.

2.3 Cloud sync (premium feature)

If you enable premium cloud synchronization, vehicle profiles and associated media you choose to sync may be stored in Google Cloud Firestore and Firebase Storage under your account so they are available across devices.

If cloud sync is not enabled, core vehicle lists may still be handled according to your session and local storage behavior as implemented in the App.

2.4 Maintenance, fuel, service book, and tracking data (device storage)

The App may store fuel logs, service events, service book entries, and location samples used for tracking history on your device using local storage (for example, via platform APIs such as shared preferences). This data is primarily intended to stay on your device unless you later export it or it is combined with features that upload content as described elsewhere in this policy.

2.5 Location information

When you use features that rely on device location (for example, vehicle tracking), the App requests permission to access approximate or precise location from your device through the operating system’s location services.

Location is used to provide those features while they are active and as permitted by your OS permissions. You can revoke location access in your device settings.

2.6 Marketplace listings

If you create marketplace listings, we process the information you submit, which may include:

• Listing title, description, price, category, and image URL.
• Vendor identifiers and contact fields you provide (for example, vendor name and phone number) as implemented in the App.

Listings are stored in our cloud database so they can be shown to users of the App.

2.7 Vendor verification (where offered)

If you participate in vendor verification flows in the App, you may provide email, phone, and identity document images. How this data is transmitted and retained depends on the production implementation; describe any backend storage and retention rules here when you connect verification to a live service.

2.8 Purchases and premium status

If you purchase premium access through Apple App Store or Google Play, the stores process payment and provide transaction-related signals to the App. We store premium entitlement status locally on your device (for example, that your account or device has unlocked premium features) so the App can enable or disable functionality such as cloud sync and reduced advertising.

2.9 Advertising

For users who are not premium subscribers where ads are enabled, the App may use Google Mobile Ads to show advertisements. Ad networks may collect identifiers and usage-related signals (such as advertising IDs and coarse technical data) according to their own privacy policies and your device’s privacy settings.

2.10 Technical and diagnostic data

Like most apps, Firebase and related Google services may generate technical logs (for example, crash diagnostics, security events, and operational metrics) as configured in your Firebase project. The exact categories depend on your Firebase console settings and applicable SDK defaults.

2.11 Links and external content

The App may open third-party websites or apps (for example, via URL launcher). Those services have their own privacy policies; we do not control them.

3. How we use information

We use the information above to:

• Provide authentication, account management, and customer support where offered.
• Store and display vehicle profiles, documents, and photos you upload.
• Enable optional cloud backup/sync for subscribers who enable it.
• Power fuel, service, service book, and tracking experiences as implemented in the App.
• Operate the marketplace (listing, discovery, and vendor-related fields you submit).
• Process in-app purchases and remember premium entitlement.
• Deliver advertising to non-premium users where ads are configured.
• Maintain security, fraud prevention, and service reliability.

We do not sell your personal information as “sale” is commonly defined in US state privacy laws; we also do not use your personal information for automated decisions that produce legal or similarly significant effects solely based on profiling, unless we notify you separately.

4. Legal bases (EEA, UK, Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on:

• Performance of a contract — to provide the App and features you request.
• Legitimate interests — for example, securing accounts, improving stability, and fraud prevention, balanced against your rights.
• Consent — where required (for example, optional analytics or marketing cookies on web properties, or sensitive permissions such as location where consent is the appropriate basis under local law).
• Legal obligation — where we must comply with applicable law.

5. Sharing with third parties

We share data with service providers as needed to operate the App:

These providers process data under their own terms and privacy policies. We encourage you to review:

• Google Privacy Policy
• Firebase / Google Cloud privacy documentation
• Apple App Store privacy information
• Google Play data safety disclosures

We may also disclose information if required by law, court order, or to protect rights, safety, and security.

6. International transfers

Firebase and related Google services may process and store data in the United States and other countries where Google operates. Where required, we rely on appropriate safeguards such as standard contractual clauses approved by regulators, or other lawful transfer mechanisms.

7. Retention

• Account data — retained while your account exists and as needed for legitimate business purposes after deletion requests are processed.
• Vehicle and synced media — removed when you delete associated content or use in-app account data deletion features where implemented; residual backups may persist for a limited period according to cloud provider practices.
• Marketplace listings — retained until you delete them or we remove them for policy violations or service changes.
• Local device data — remains until you uninstall the App or clear app data, unless the OS manages it differently.
• Advertising and analytics artifacts — governed by Google’s retention settings and your device controls.

8. Security

We use industry-standard measures appropriate to the nature of the App, including encryption in transit for communications with Firebase where configured by the SDKs, access controls on backend resources, and reliance on platform security features. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access, correct, or delete personal information we hold.
• Export certain data (where technically feasible).
• Object or restrict certain processing.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with a supervisory authority.

Device controls: You can manage permissions (camera, photos, location), reset advertising IDs, and limit ad personalization in iOS and Android settings.

Account deletion: Where the App provides a way to delete Car Zone–scoped cloud data, use that flow and review what it removes versus what remains with Google or Apple accounts.

10. Children

Car Zone is not directed at children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at info@potentiamotus.biz and we will take appropriate steps.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy in the App or on your website and update the “Last updated” date. If changes are material, we will provide additional notice as required by law.

12. Contact us

For privacy questions or requests, contact:

info@potentiamotus.biz