Privacy policy
FuelPilot tells you where it's worth stopping for fuel. To do that it needs to know where you are at that moment. It doesn't need to know anything else, and it doesn't ask.
In short
- No account in this version. There is no registration, no login, and we don't ask for your name, email or phone number. A profile with an account is planned for a future version: when it arrives, this policy will be updated first and the date above will say so.
- No tracking. We use no advertising identifiers, there is no profiling, and we share no data with advertisers or data brokers.
- Location is read only while the app is open, never in the background. While the results screen is on show it is updated as you drive, to keep the list consistent with where you are: none of it is kept, and there is no history of your movements, not even with us.
- The answer is computed on your phone. The Fuel Score, the price comparison and the cost of the detour all run locally.
Location
When. Only if you have given permission, and only with the app in the foreground. One reading when the search starts; then, as long as you stay on the results screen, your position is read again roughly every two hundred metres to reorder the list as you drive — a station now behind you is not a worse alternative, it is not an alternative. Updates stop when you leave that screen or put the app in the background: FuelPilot neither requests nor holds background location permission.
What remains of it. Nothing. Each reading serves the calculation of the moment and is replaced by the next: positions are not written to disk, are not sent to us, and do not compose a route.
Why. Without a starting point there is no way to work out what a detour costs you in kilometres and minutes, which is the only thing the app does.
Where it goes. Your precise location does not leave the phone. To download the prices for the area, the app requests a few cells of a geographic grid: a cell is a square about five kilometres across and appears in the address of the file requested, so our server (and the CDN serving it) can infer which general area you were searching in, not where you were. These requests are not tied to a user identifier or to previous requests.
If you say no. The app remains usable: you can enter the starting point by hand. Permission can be withdrawn at any time in Settings → FuelPilot → Location.
What stays on the phone
- Recently downloaded station data, cached so you can use the app without a signal — in tunnels, on mountain passes, where coverage fails and fuel is exactly what you need. It is public data, not yours, and it is cleared by emptying the app's cache or uninstalling it.
- The answer you gave at first launch: which vehicle you drive and which fuel you use. We don't see it.
- The language and theme you chose. They stay on the phone.
None of this data is sent to us or to third parties.
What we don't collect
Name, email, phone, address, date of birth, contacts, photos, address book, advertising identifiers, journey history, payment data.
Third-party services
Apple MapKit provides maps, route calculation and destination search. When you compute a route or search for a destination, the necessary coordinates are handled by Apple under its privacy policy. Apple states that it does not associate this data with a personal identifier.
CDN provider. The price files are served by a distribution network which, like any web server, records IP address and requested file in technical logs, kept for a limited period for security and diagnostics.
There are no analytics, advertising or social network SDKs.
Origin of the prices
Prices and the station registry are open data from the Italian Ministry of Enterprise and Made in Italy, published under IODL 2.0. Every operator is required by law to report its own prices.
The Fuel Score, the detour calculation and the reconciliation of positions are FuelPilot's own work: the Ministry neither produced them nor answers for them. Every price shows the date it was reported, and reports older than thirty days do not enter the calculation.
Legal basis and retention
Location is processed on the basis of the consent you give through the operating system (Art. 6(1)(a) GDPR) and is limited to the time you keep the results screen open: the data is not retained after the calculation, and each reading replaces the previous one.
Your rights
Because we process no data that identifies you, we cannot link information to a person and therefore cannot carry out individual access, rectification or erasure requests: there is nothing to extract you from. For any question, or to exercise the rights under Articles 15-22 GDPR, write to the contact address above; you also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it).
Children
FuelPilot is not directed at children under 13 and does not knowingly collect data concerning them.