Privacy Policy
EV Chargify · Effective 19 August 2026
EV Chargify finds EV chargers, tells you the moment a busy one frees up, and estimates what a charge will cost. This policy says exactly what the app handles, why it is allowed to, how long it keeps it, and how to get rid of it. The app works fully without an account and without sharing anything optional.
Who is responsible
The data controller is Ali Khoshraftar, operating EV Chargify from the Netherlands. Contact for any privacy question or request: akhoshraftarmonfared@gmail.com.
What we handle, why, and on what basis
| Data | Purpose | Legal basis (GDPR Art. 6) | Kept for |
|---|---|---|---|
| Device location (precise, foreground only) | Show nearby chargers, sort by distance | Consent — the OS permission prompt; refusing leaves the app usable | Not stored on our servers |
| Email address (and name/photo with Google or Apple sign-in) | Sign-in and syncing your data across devices | Contract — you asked for an account | Until you delete your account |
| Watchlist (which chargers you watch) | So the server can poll them and alert you | Contract — this is the core feature | Until you delete the watch or your account |
| Push token | Delivering the "a charger freed up" notification | Contract | Until sign-out or account deletion |
| Favourites, quiet hours | Your settings, synced | Contract | Until you delete them or your account |
| Community reports (category + optional note) | Warning other drivers about a broken charger | Legitimate interest — keeping charger data accurate; shown without your name | 14 days, then deleted automatically |
| Connected car data (battery %, range, capacity, charging state) | Charge-time and cost estimates for your actual car, and a "charged" notification | Consent — you connect it explicitly and can disconnect any time | Latest snapshot only, until you disconnect or delete your account |
| Subscription status | Unlocking the plan you bought | Contract | Duration of the subscription plus statutory record-keeping |
| Usage analytics | Seeing which features are used, to improve them | Consent — off unless you turn it on | Up to 14 months |
| Crash diagnostics | Fixing crashes | Consent — off unless you turn it on | Up to 90 days |
| Advertising identifier | Personalised ads, if you allow them | Consent — off unless you turn it on | Per Google's retention |
Consent is asked before anything optional runs. Analytics, crash reporting and personalised advertising are switched off in the app until you choose, and you can change or withdraw your choice at any time in Profile → Privacy. Withdrawing is as easy as giving it, and the app keeps working either way.
Who else receives data
| Recipient | Role | What it receives |
|---|---|---|
| Google Firebase (Auth, Firestore, Cloud Functions, Messaging, Analytics, Crashlytics, Performance, AI Logic) | Processor | Account, watchlist, tokens, and — only with consent — analytics and crash data |
| Mapbox | Processor | Map tile and geocoding requests, including approximate location |
| NDW (Dutch national road-data point) | Independent source | Nothing about you — we read public charger data |
| Open Charge Map, TomTom | Processors / sources | Search coordinates when used as charger-data fallbacks |
| Tesla, Inc. (Fleet API) | Independent controller | Only if you connect a car: the OAuth grant and vehicle data requests |
| RevenueCat | Processor | Subscription entitlement status — never payment details |
| Google Play / Apple App Store | Independent controllers | Your purchase; they handle payment, we never see card data |
| Stripe | Processor | Only for web checkout: your email and payment handled entirely by Stripe |
| Google AdMob | Processor / controller | Only if you allow personalised ads |
Where your data is stored
The database sits in Google's eur3 European multi-region and the app's
server code runs in europe-west1 (Belgium), so your account data stays in the
EU at rest. Some processors — notably Google's analytics, crash-reporting and account-deletion
services — may process data in the United States. Google LLC is certified under the EU–US Data
Privacy Framework, which is the safeguard relied on for those transfers.
AI features
Search text you type or speak may be sent to Google's Gemini model through Firebase AI Logic to work out what you meant, and community reports may be summarised by the same service. Those requests carry the query or report text and nearby charger context — not your identity.
Your rights
Under the GDPR you can ask for access, correction, a copy of your data, deletion, restriction, or object to processing based on legitimate interest. Two routes:
- In the app — Profile → Delete account erases your account and everything synced to it.
- Without the app — use evchargify.app/delete-account, or email us. We answer within one month.
You also have the right to complain to a supervisory authority. In the Netherlands that is the Autoriteit Persoonsgegevens.
Children
EV Chargify is not directed at children under 16, and we do not knowingly collect their data.
Changes
When this policy changes we update the effective date above. Material changes will be announced in the app.