Legal
Privacy Policy
Last updated 20 August 2026
This policy explains what personal data Ikolvi collects, why we collect it, who we share it with, and how you can get it deleted. It covers ikolvi.com and every mobile application we publish, including Simple Mileage Tracker on Google Play.
Who we are
Ikolvi is a software development studio. For anything in this policy — questions, access requests, complaints — we are the data controller and you can reach us at hello@ikolvi.com.
What this policy covers
One policy, two kinds of product, because they collect very different amounts of data.
- The website (ikolvi.com). A static marketing site. It sets no advertising or analytics cookies and it does not track you across other sites.
- Our mobile apps. These may hold an account, store the content you create, show ads, and offer paid subscriptions. Section 4 sets out exactly what Simple Mileage Tracker does; any future Ikolvi app is covered by the same rules and will be listed here.
What we collect
We collect only what a feature actually needs to work. Nothing here is sold.
Account data
Your email address and an internal user ID, created only if you choose to sign in. Our apps work without an account; signing in is what enables cloud backup and syncing between your devices.
Content you create
The records you enter in an app — in Simple Mileage Tracker that means vehicles, fuel and charging entries, odometer readings, gauge levels, amounts and costs. This stays on your device unless you sign in, in which case a copy is synced to our database so you can restore it.
Photos you submit
If you use a camera capture feature, the photograph you take is sent to our processing endpoint and forwarded to Google's Gemini API, which reads the numbers off it. We do not store the image: it lives in memory for the length of the request and only the extracted values are returned to your device. Your camera is never accessed in the background.
Voice input
If you use voice logging, speech is converted to text on your device. Only the resulting text is sent for interpretation — we do not receive or store audio recordings.
Purchases
Subscriptions are processed by Google Play Billing. Google tells us which product you own so the app can unlock it. We never see or store your card number, bank details or billing address.
Advertising data
Free tiers of our apps show ads from Google AdMob. AdMob may access your device's advertising identifier and coarse technical data to select and measure ads. Where the law requires it, we ask for your consent first and honour a refusal.
Diagnostics
Server-side logs of requests to our own endpoints — timestamps, error codes and whether a request succeeded — kept to find faults and prevent abuse.
We do not collect your precise or background location, your contacts, your messages, your photo library, or any special category data such as health or biometric information.
Simple Mileage Tracker in detail
The app is offline-first. Everything it does — logging a fill-up, calculating mileage, drawing the charts — runs against a database stored locally on your phone and works with no network connection at all.
- Without an account: your data never leaves your device, except when you deliberately use a camera or voice feature, and except for the ad requests the free tier makes.
- With an account: your vehicles and entries are also stored in our Supabase database so they survive a lost phone and appear on your other devices.
- Paid tiers: the ad-free subscription stops ad requests entirely. The premium subscription additionally enables voice and camera logging, which are the only features that send content off your device by design.
- Uninstalling removes the local database with the app. It does not delete a synced copy — use our deletion form for that.
How we use it
- To provide the features you asked for — storing your entries, syncing them, reading a pump display you photographed.
- To keep your account secure and to authenticate you.
- To process subscriptions and honour what you have paid for.
- To show ads in free tiers, and to stop showing them the moment you subscribe.
- To diagnose crashes and faults, and to prevent abuse of our endpoints.
- To comply with legal, tax and accounting obligations.
We do not use your data to train AI models, we do not build advertising profiles of you ourselves, and we do not sell or rent personal data to anyone.
Legal basis for processing
Where the GDPR or similar law applies, we rely on: contract for the data needed to run an account and deliver a paid feature; consent for personalised advertising and for optional camera and voice features, which you can withdraw at any time; legitimate interests for security, fault diagnosis and preventing abuse; and legal obligation for records we are required to keep.
Where your data is stored
Our providers operate globally, so your data may be processed in countries other than your own, including the United States. Where data leaves the UK or EEA, transfers are covered by the safeguards those providers offer, such as Standard Contractual Clauses.
How long we keep it
Account and content
For as long as your account exists. Deleted within 30 days of a verified deletion request, and purged from encrypted backups within a further 60 days.
Photos and voice text
Not retained. Processed in memory for the length of a single request.
Server logs
Up to 90 days, then discarded.
Purchase records
Up to 7 years where tax and accounting law requires it. These are transaction records, not your app content, and survive account deletion for that reason.
Security
Traffic between our apps and our servers is encrypted in transit with TLS, and data at rest is encrypted by our hosting providers. Access to production data is limited to the people who need it. Row-level security rules mean one account cannot read another's records. API keys for third-party services are held server-side and never shipped inside the app.
No system is perfectly secure. If a breach affects your personal data and creates a risk to you, we will notify you and the relevant regulator as the law requires.
Your rights
- Access — ask for a copy of the personal data we hold about you.
- Correction — have inaccurate data fixed.
- Deletion — have your account and data erased.
- Restriction and objection — ask us to limit or stop certain processing, including advertising.
- Portability — receive your data in a machine-readable format.
- Withdraw consent — at any time, without affecting what was done beforehand.
Exercise any of these by writing to hello@ikolvi.com, or use the data deletion form for erasure. We respond within 30 days. If you are unhappy with our response you can complain to your local data protection authority.
Advertising choices
Ads appear only in free tiers. You can reset or delete your advertising identifier in your device settings (Android: Settings → Google → Ads), which stops ads being personalised against past activity. Any consent you gave for personalised ads can be changed from the app's privacy settings. Subscribing to any paid tier removes ads entirely.
Children
Our apps are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, write to hello@ikolvi.com and we will delete it.
Changes to this policy
We update this policy when what we do changes. The date at the top always reflects the current version, and material changes will be announced in the app before they take effect. Continuing to use our apps after a change means you accept the updated policy.
Contact
Questions, requests or complaints about this policy go to hello@ikolvi.com. We aim to reply within five working days.