Your car data stays on your phone

Who we are

Badger is a car service book app: it keeps your maintenance schedule, service records, fuel and charging, documents and reminders in one place. The app is operated by HighTengry LLP (in Kazakhstan: ТОО «HighTengry»), BIN 260840032425, registered in Astana, Kazakhstan. In this policy “we” and “us” mean HighTengry LLP.

The short version: Badger has no accounts, and we do not keep the data you enter. This policy explains the few cases where your device talks to the internet.

What data we handle and where it stays

There is no sign-up, no login and no Badger account. We do not ask for your name, e-mail address or phone number inside the app.

Backups work the same way. When you export a backup, the app creates a file and hands it to you. You choose where to save it (your files, a cloud drive, a message to yourself). We never see that file. The same applies to the PDF service history and CSV table you can create with Badger Pro.

Reminders are local notifications created by your phone. They do not use a push server of ours or anyone else’s.

If you delete the app, the data stored inside it is deleted with it. Because we do not keep a copy, we cannot restore it for you, so we suggest keeping a backup file.

Network requests

Badger contacts the internet only in the cases below. All of them start with an action of yours. Only one of them (receipt scanning, for Pro subscribers) passes through a server operated by us, and that server does not store anything you send.

These requests go straight from your device to the service named. Like any internet request, they expose your IP address to that service. NHTSA, Apple, Google and RevenueCat handle that information under their own privacy policies. We receive none of it.

We do not use advertising, analytics, crash-reporting or tracking tools, and we do not build profiles of you.

Receipt scanning (Pro)

Badger Pro can read a photo of a receipt and prepare a draft entry (a fill-up, a charge, a service or an expense) for you to check and save. This is the one feature that sends a photo off your phone, so it works like this:

• Only on your request. Nothing is sent until you tap “Scan a receipt”, take or choose a photo, and agree on the consent screen shown before the first scan. Without Pro the feature is not available.
• Where the photo goes. The photo is sent to our receipt server, hosted on Cloudflare Workers (it runs in the Cloudflare data center closest to you). The server forwards it to Anthropic (United States), which reads the receipt and returns the amounts, date and items as text. The server checks the result and sends it back to the app.
• Not stored. We do not save the photo or the text read from it, and our server logs contain no receipt content. Under Anthropic’s commercial API terms, inputs sent through the API are not used to train its models; Anthropic may keep them for a limited period for safety and abuse prevention under its own policy (see anthropic.com/legal/privacy).
• What we keep. To enforce a monthly limit, our server keeps a counter linked to a hashed form of your anonymous customer ID and the month. It contains no photo and no receipt data, and it deletes itself after about 40 days.
• Your copy. If you save the entry, the photo is also attached to it. That copy lives only on your phone, like the rest of your data, and is not included in backup files.

You can use Badger fully without this feature; you can always type an entry by hand.

Purchases

Badger is free for one car. Badger Pro is an optional auto-renewing subscription ($0.99 per month or $9.99 per year, or the local price shown in your store).

• Payment is taken by Apple or Google. We never see your card number, name or billing address.
• To confirm that your subscription is active, the app uses RevenueCat. RevenueCat gets an anonymous customer ID generated for the app and the history of your purchases from the store. It does not get your name or e-mail address.
• Your subscription belongs to your Apple ID or Google account. You can restore it on a new phone with “Restore purchases”.
• You manage or cancel the subscription in your store settings. See the Terms of Use for details.

RevenueCat’s privacy policy is at revenuecat.com/privacy.

Children

Badger is not intended for children under 13, and we do not knowingly collect data from them. In fact we do not keep personal data from anyone: your entries stay on your device. If you are a parent and believe a child has made a purchase, contact the store that processed it.

Your rights

Depending on where you live, you may have rights under the GDPR (European Union), the UK GDPR, or the California Consumer Privacy Act as amended by the CPRA, among others. These include the right to know what data is held about you, to access it, correct it, delete it, take a copy of it, and object to its use.

Because Badger keeps your data only on your device, you already control it:

• Delete one car: use “Delete car” in the app. Its records are removed from the device.
• Delete everything: use “Erase all data” in the app settings. This clears the data stored by the app on your device, including attached photos.
• Take a copy: use the backup export to save a file with your data.
• Subscription data: purchase records are held by Apple, Google and RevenueCat. You can ask them directly, or write to us and we will pass your request on to RevenueCat where we can.

We do not sell or share personal information, and we do not use it for targeted advertising. We do not make automated decisions about you.

You can send any privacy request to privacy@badger.autos. We will answer within 30 days. If we hold no data that can be linked to you, we will tell you so. You also have the right to complain to your local data protection authority.

International transfers

We do not transfer your stored data anywhere, because we do not keep it. The requests described above go only when you start them: VIN decoding and recalls go from your device to NHTSA in the United States; subscription checks go to RevenueCat in the United States; a receipt photo goes to our server on Cloudflare and on to Anthropic in the United States. By using these features you start these transfers yourself. If you prefer to avoid them, do not use VIN decoding, recalls or receipt scanning; the rest of the app works without them.

Changes to this policy

If we change how Badger handles data, we will update this page and the effective date at the top. If a change is significant, we will also tell you inside the app. The current version is always available at this address.

Contact

Questions about privacy or about this policy: