Privacy Policy

Effective date: 18 September 2026

Car Ledger is an iPhone app published by Albatros Solutions ("we"). This policy explains what the app stores and what happens to it. The short version: everything you enter stays on your iPhone and, if you use iCloud, in your own private iCloud account — unless you choose to share a car with someone else, in which case that car goes to the Apple ID you invited. Either way, we never receive any of it.

We collect nothing

Car Ledger has no user accounts, no sign-in, no server of its own, and contains no analytics, advertising, tracking or crash-reporting code. We, and any third party, have no access to your data.

iCloud

So that your records survive a lost or replaced phone, the app can keep them in your own iCloud account, using Apple's CloudKit private database. This is the account already signed in on your iPhone — the app never asks for a password and never creates an account of its own.

A private CloudKit database belongs to you, not to us. We cannot read it, list it or recover it: Apple stores it under your Apple ID and handles it under Apple's privacy policy. The only way anyone besides you sees any of it is if you deliberately share a car, described next. Turning iCloud Drive off for Car Ledger in iOS Settings, or signing out of iCloud, leaves the app working normally with everything kept on the device alone.

Sharing a car

Car Ledger can share a single car with another person, but only if you ask it to — nothing is ever shared on its own. From that car's page, Share this car → Invite someone opens Apple's own sharing sheet, where you name the person by Apple ID, e-mail address or phone number. The invitation belongs to that person alone; anyone else who came across the link could not use it to get in.

Sharing a car sends that car and everything attached to it: its service records, fuel entries, oil top-ups, reminders, notes, photos and documents. You choose whether the person you invite can only view all of that or can add and edit it too.

You can see everyone who has access to a car right in the app, remove any one of them, or close sharing on the car altogether — their access ends the moment you do. Someone you shared with can also leave on their own whenever they like; either way, you keep the car and its full history.

All of this moves through Apple's CloudKit, directly between your iCloud account and the one you invited. We do not receive the shared data, and we have no way of seeing which cars you have shared or with whom.

What the app stores on your device

The data you enter is saved in the app's private storage on your iPhone, inside the app sandbox that iOS protects. It includes:

• vehicle details — name, make, model, year, licence plate, VIN, odometer readings and free-form notes;
• a photo of the vehicle, if you add one, and the colour you choose for its card;
• a profile picture for this iPhone, if you add one — it stays in the app's storage on this device, is never synced, and is removed the moment you tap "Remove photo";
• service records — date, odometer, category, cost, notes and any photos you attach;
• fuel entries and oil top-ups, with dates, volumes, odometer values and costs;
• maintenance reminders and the service intervals you set;
• documents you add — registration papers, receipts, manuals, photos and other files you import;
• notes and fault codes you record, with optional photos;
• a change log for each car — what was added, edited or deleted and when, tagged with the iCloud user identifier of whoever did it, so that a shared car can show who changed what;
• your settings — language, appearance, units and currency.

None of this is sent to us or to any third party. It syncs to your own iCloud account as described above, and it is included in your iPhone's own backups (iCloud backup or an encrypted computer backup) if you have those turned on; both are handled by Apple under Apple's terms, not by us.

Camera and photo library

You can attach photos to a vehicle, a service record or a note. If you choose the camera, iOS asks for camera permission and the photo you take is saved inside the app. If you choose an existing photo, iOS shows its own picker and hands the app only the images you pick — the app never browses your photo library. You can decline or revoke either permission in Settings; the rest of the app keeps working.

Files you import

When you add a document, iOS shows the system file picker and the app copies only the file you chose into its own storage.

Notifications

If you allow notifications, Car Ledger schedules reminders locally on the device for upcoming maintenance. When a car is shared with someone, the app can also tell you that the other person added or changed something in it: iCloud wakes the app, and the app writes the notification on your iPhone. You can switch those off on their own in Garage → Settings, and the reminders stay. We run no push server of our own, and no notification data reaches us.

Exporting your data

In Garage → Data you can export the service, fuel and oil logs as CSV files, export a PDF service history, and back up everything — including photos and documents — to a single JSON file. The iOS share sheet then lets you decide where that file goes: Files, Mail, another app. What happens to it after that is up to you and the app or service you send it to. The same screen restores a backup from a JSON file you pick.

Deleting your data

Every record — a service entry, fuel entry, oil top-up, reminder, note, document or a whole vehicle — can be deleted inside the app. Deleting the app from your iPhone removes all of its data with it. Because we never receive your data, there is nothing for you to request from us and nothing for us to delete on our side. If you have kept device backups, remove them through Apple's own controls.

Children's privacy

Car Ledger is a tool for vehicle owners and is not directed at children. It collects no personal information from anyone, children included.

Your rights

Data-protection laws give you rights to access, correct, export and delete your personal data. In Car Ledger you exercise all of them directly: the data is on your device, you can view and edit every record, export it in CSV, PDF or JSON form, and delete it. We hold no copy, so we cannot access, change or disclose it, and there is nothing we could hand over in response to a request.

Changes to this policy

If a future version of the app changes what it stores or adds any service that leaves the device, this page will be updated before that version ships, with a new effective date.

Contact

Albatros Solutions — albatrossolutions@icloud.com