Keep DetailingPrivacy policy
Last updated: 7 October 2026 · Versión en español
This policy explains what personal data the Keep Detailing app (the "app") for Android and iPhone processes, why we use it, where it is stored, for how long, and what rights you have. It complies with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Controller: Cristian Balbet Soler
Address: Calle Camino de los Luceros, 6, 04131 Almería (Spain)
Contact: soporte@keepdetailingapp.com
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account: email address, name, profile photo and user identifier (or those of your Google or Apple account if you sign in with them; with Apple you can hide your real email). When you sign in, the account system also records your IP address and the date. | Creating and managing your account and signing you in securely. | Performance of a contract (Art. 6(1)(b) GDPR) |
| Vehicles (make, model, year, colour, licence plate and photo) | Showing your garage and history. | Performance of a contract |
| Detailing jobs (dates, name, types, duration, who did it, cost, products used, notes, next maintenance and before/after photos), products (with dilutions, units, rating and notes) and wishlist | The app's main detailing log features. | Performance of a contract |
| Conversations with the AI assistant (the last 200 messages are kept; you can delete them at any time) | Answering your questions and showing your chat history. | Performance of a contract |
| Subscription status (plan, renewal date and whether you have ever had a paid plan) and usage counters (AI questions, jobs per day) | Giving you access to your plan's features and applying its limits. | Performance of a contract |
| Reports of AI answers (only if you report one): the answer, your question, the reason, your comment, the AI model, the language, the system, the app version and your account identifier | Reviewing and correcting wrong or dangerous answers from the assistant. | Legitimate interest in the safety of the service (Art. 6(1)(f) GDPR) |
| Usage statistics, only if you agree: screens visited, features used (e.g. logging a job or using the calculator), plan, language, number of vehicles, phone model, system, approximate country and a random installation identifier. They do not include your name, email, licence plate or the content of your data, or any advertising identifier | Knowing which features are used in order to improve the app. | Consent (Art. 6(1)(a) GDPR), which you can withdraw in Settings → Anonymous usage statistics |
| Crash reports: phone model, system version (Android or iOS) and app version, the screen where the error happened, a technical description of the error and your account identifier (not your name or email) | Detecting and fixing errors in the app. | Legitimate interest in the app working properly |
| Technical device data to check that the app is the original one (App Check) and an installation identifier to receive the app configuration | Protecting the service against abuse and knowing whether the app needs updating. | Legitimate interest in the safety of the service |
Maintenance reminders are scheduled on your own phone and are only shown if you grant notification permission. The app also keeps a copy of your data and your preferences (language, theme, your answer about statistics) on your phone so it can work offline.
We do not process location data, contacts or health data, we do not show ads, we do not use advertising identifiers and we do not sell your data. Payment details (cards, etc.) are handled exclusively by Google Play or Apple; we never have access to them.
3. Providers that process data on our behalf and where it is stored
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase – Authentication | Accounts and sign-in | USA |
| Google Firebase – Cloud Firestore | Database with your vehicles, jobs, products, chat and subscription | European Union (eur3 multi-region: Belgium and the Netherlands) |
| Google Firebase – Cloud Storage | Photos (vehicles, products, profile, before and after) | USA (Iowa, us-central1 region) |
| Google Firebase – Cloud Functions | App server (AI assistant, subscriptions, account deletion, reports) | European Union (Belgium, europe-west1 region) |
| Google Analytics for Firebase (only if you agree), Crashlytics, Remote Config and App Check (with Google Play Integrity on Android and Apple App Attest on iPhone) | Usage statistics, crash reports, configuration and protection of the app | USA |
| OpenRouter (OpenRouter, Inc.) and the AI model it gives access to (Google Gemini and, as a fallback, OpenAI) | Generating the assistant's answers | USA |
| RevenueCat (RevenueCat, Inc.) | Managing and verifying subscriptions. It receives your account identifier (not your name or email) and the status of your purchases | USA |
| Google Play (Google) and the App Store (Apple) | Charging subscriptions. They act as independent controllers under their own privacy policies | According to their policies |
| Apple (Apple Distribution International Ltd.) | Sign in with Apple, if you choose it | According to its policy |
Data sent to the AI. Only when you use the assistant, and solely to generate the answer, the following is sent to OpenRouter and the AI model:
- your question and the last 10 chat messages;
- today's date and the app language;
- your vehicles: make, model, year, colour and whether it is your favourite;
- your jobs (up to the 60 most recent): date, name, types, duration, who did it, cost, products used, next maintenance and notes (up to 200 characters);
- your products (up to 80): brand, name, family, category, units, remaining quantity, dilutions, rating and notes (up to 150 characters); finished products (date and rating) and your wishlist (name and priority);
- a hashed identifier that cannot reveal who you are, to prevent abuse.
Your name, email, licence plate and photos are not sent. We ask OpenRouter to only use AI providers that do not store queries or use them to train their models. We recommend not writing personal data in notes or in the chat.
4. International transfers
As shown in the table above, some data is stored or processed in the United States. These transfers are based on the EU-US Data Privacy Framework where the provider is certified (such as Google) and, in any case, on the Standard Contractual Clauses approved by the European Commission included in each provider's data processing agreement. You can ask us for more information at the contact email.
5. How long we keep data
- Account, vehicles, jobs, products, photos, chat and subscription: for as long as your account is active. If you delete it, they are deleted immediately from the database, photo storage, the account system and RevenueCat. Google's internal backups may take up to 180 days to be fully erased.
- AI conversations: the last 200 messages are kept; older ones are deleted automatically. You can delete them all from the app.
- Reports of AI answers: up to 24 months, then deleted automatically. If you delete your account, they are kept without being linked to it.
- Usage statistics: up to 14 months. They are not linked to your account but to a random installation identifier.
- Crash reports: 90 days.
- AI queries: OpenRouter and the model only process them to generate the answer; they do not keep them.
- Google Play and Apple may keep the purchase records required by tax law.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to soporte@keepdetailingapp.com, and withdraw your consent to usage statistics at any time from the app. You can delete your account and all your data from Settings → Delete account (see how to delete your account). If you believe we have not handled your request correctly, you can complain to the Spanish Data Protection Agency (AEPD).
7. Security
Communications are encrypted (HTTPS) and data is stored encrypted on Google's servers. Each user can only access their own data thanks to server-side security rules, and the keys of external services are only kept on the server, never in the app.
8. Minimum age
The app is intended for people aged 18 or over. It is not designed for minors and we do not knowingly collect their data. If you know that a minor has given us data, write to us and we will delete it.
9. Changes
If we change this policy, we will publish the new version on this page and, if the change is significant, we will let you know in the app.
This is a translation of the Spanish original. In case of discrepancy, the Spanish version prevails.