How PumpPilot UK uses your data.

1. Who we are

PumpPilot UK is a UK fuel-price comparison, alert, route fuel-stop, station review, Garage/My car and price-history app.

PumpPilot UK is operated by Rafal Karwowski. For privacy questions, contact support@pumppilot.co.uk.

2. What data we collect

Depending on how you use PumpPilot, we may collect and store:

• Account and sign-in data: email address, display name, authentication provider, verification status, account identifiers and linked sign-in methods.
• Google/Firebase sign-in data: identifiers and provider details needed to authenticate your account where Google/Firebase sign-in is used.
• Saved places: Home, Work and custom place labels, coordinates and address snippets that you choose to save or search.
• Location data: current or approximate location when you grant permission, plus places you search or provide manually.
• Garage/My car data: car name, fuel type, tank size, mpg or consumption preferences, preferred fill, max detour, preferred brands, fill-ups, odometer readings and notes.
• Alerts and notifications: alert rules, target stations or areas, fuel type, thresholds, notification history, read/delivery status, push tokens and device identifiers.
• Station interactions: favourites, hidden stations, selected station detail interactions and price history requests.
• Community content: reviews, ratings, price reports, corrections, moderation status and moderation reasons where relevant.
• Premium/subscription data: Google Play and RevenueCat entitlement status, product ID, expiry or renewal status and related account entitlement information.
• Android Auto bridge data: on-device session and Premium access data used to let the Android Auto surface read your signed-in access state and request nearby fuel options.
• Technical and operational data: logs, device and app version, basic analytics events, crash/error diagnostics, security events, rate-limit data and service reliability information.

3. How we use data

We use personal data to:

• provide accounts, station browsing, saved places, Garage, route fuel stops, alerts, reviews and moderation
• calculate route recommendations, price history, market context and station comparisons
• send in-app and device notifications when your alerts trigger
• moderate reviews, ratings, reports and corrections
• provide, verify and restore Premium access
• protect the service from fraud, abuse, scraping, excessive requests and security issues
• debug crashes and reliability problems, understand basic beta feature usage and improve service reliability
• meet legal, accounting, tax or compliance obligations

4. UK GDPR lawful bases

We use different lawful bases depending on the data and feature:

• Contract: to provide your account, app features, Premium access and subscription entitlement.
• Consent: for optional permissions such as device location and push notifications where permission is required.
• Legitimate interests: for security, abuse prevention, diagnostics, service improvement, fraud prevention and moderation.
• Legal obligation: where data is needed for compliance, accounting, tax, lawful requests or legal claims.

5. Location data

Location use is optional. PumpPilot uses your location only when you grant device permission, search for a place, save a place, or provide route/place details yourself.

Location helps show nearby stations, route fuel stops, alerts and recommendations. PumpPilot does not currently use continuous background location tracking.

You can disable location access in your device settings. Some features may rely on saved places or searched places instead.

6. Push notifications

Push notifications are optional and controlled by device permissions. If enabled, PumpPilot stores push tokens and device identifiers so alert notifications can be delivered.

Push tokens and installation identifiers are operational data. They are used to deliver alerts to the right device, handle token refresh, suppress duplicate devices and disable delivery after logout or account deletion.

You can disable notifications in the app or device settings. Delivery is best effort and may depend on your device, network, Firebase Cloud Messaging, Google services and PumpPilot backend availability.

7. Payments and Premium

Android Premium purchases are handled by Google Play. RevenueCat helps PumpPilot verify subscription entitlement and status.

PumpPilot stores subscription entitlement, product, expiry and status information. PumpPilot does not receive your full payment card details.

Web checkout is not currently available. Web can still reflect Premium bought on Android or granted by an administrator.

8. Reviews and community content

You may submit station reviews, ratings, reports or corrections. Reviews are moderated and approved reviews may be shown publicly.

Public review cards should not show your email address. Do not submit personal, unlawful, misleading or defamatory content.

9. Sharing and processors

PumpPilot uses service providers and processors to operate the app. These may include:

• hosting, backend and database infrastructure providers
• Firebase/Google authentication
• Firebase Cloud Messaging for push notifications
• Firebase Crashlytics and Firebase Analytics for crash diagnostics and basic product usage measurement
• Google Play Billing for Android purchases
• RevenueCat for subscription entitlement management
• email or SMTP providers for account and notification emails where used
• legal, regulatory or public authorities where required by law or necessary to protect rights, safety or security

10. International transfers

Some providers may process data outside the UK. Where that happens, PumpPilot relies on the provider's contractual, legal and technical safeguards for international data transfers.

11. Retention

Retention depends on account status, legal obligations, dispute needs, security and service operation. In general:

• account data is kept while your account remains active
• saved places, Garage data, alerts and favourites are kept until deleted or your account is deleted
• reviews and reports are kept while needed for publication, moderation, legal records or dispute handling
• public approved reviews may remain visible unless removed, deleted or moderated
• notification history and operational logs are kept for limited troubleshooting, security and reliability purposes, then deleted or anonymised where appropriate
• push tokens and device registrations are kept while needed for notification delivery and are disabled or anonymised when no longer associated with an active account or session
• payment and subscription entitlement records are kept while needed for account access, compliance, accounting or dispute resolution

12. Account deletion

The primary web route for account deletion requests is Delete your PumpPilot account. You can also contact support@pumppilot.co.uk. In the app, you can find this from Account > Account data > Delete account or Settings > Privacy & legal > Delete account.

Account deletion is currently request-based and handled by support/admin review after account ownership is verified. We aim to acknowledge requests within 7 days and complete verified requests within 30 days unless a longer period is needed for legal, security, fraud-prevention, dispute or provider reasons.

Deleting the app, app data or your PumpPilot account does not automatically cancel a Google Play subscription. If you do not want a subscription to renew, cancel it through Google Play.

13. Your rights

Depending on the circumstances, you may have the right to ask for access, correction, deletion, restriction, objection, portability, and withdrawal of consent where consent is used.

To make a request, contact support@pumppilot.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO).

14. Children

PumpPilot is not intended for children under 16. If you believe a child has provided personal data, contact us so we can review it.

15. Security

We use reasonable technical and organisational safeguards to protect personal data. No app, network or storage system can be guaranteed to be completely secure.

16. Changes to this policy

We may update this Privacy Policy as PumpPilot changes. When we do, we will update the date at the top of this page.

17. Contact

Email: support@pumppilot.co.uk