Privacy Policy
Last updated:
In short
Your cars, documents and attached photos are stored on your phone: the app has no server, so they never reach us. The few cases where something leaves your phone (the check for updates, every time the app starts and, on Android, when you come back to it after at least half an hour in the background, at most once every three hours; error reports; the nearby places search; on Android the document scanner's technical data, sent to Google; your phone's Google or iCloud backup if it's turned on) are clearly described in Settings → About → Privacy.
This summary does not replace the policy below.
For the Nu-mă-uita mobile app. You'll find the same text in the app, under Settings → About → Privacy; there you see only the parts that apply to your phone.
Data controller: Paraschivoiu Alexandru Nicolae
The basic principle
Your documents stay on your phone. Nothing is synced to any server of ours — the cars, documents and expiry dates you enter are stored locally, in a database on your phone. We don't have access to them.
What you enter in the app
Your licence plate, make and model, VIN (optional), the name, category and expiry date of each document and your reminder times, and optionally: the name you'd like us to greet you by, whose each document is (“Whose is it?”), and amounts and notes for costs. If you attach a photo or PDF of a document — your ID card, for example — the file contains everything on that document (name, personal numeric code, address, photo). Your phone's camera also writes data you can't see into a photo file: the date and time, and the phone model. Some photos may also contain the place where they were taken. When you add a JPEG photo, the app removes this data from it; it leaves it only in very large photos (over 32 MB) and in ones it can't read reliably. Photos added before version 1.3.0 and PDFs stay as you added them. All of this stays on your phone. The app asks your phone to leave photos and PDFs out of its automatic backup; they only go into the password-protected manual backup if you include them yourself, and there they are encrypted. The app never asks you to type in your personal numeric code or payment details.
Backup
The manual backup (Settings → Data safety) creates a file that you save or send yourself, wherever you choose — we never receive it. If you choose a password, the file is encrypted (AES-256) and can't be opened without it, not even by us; the password isn't kept anywhere, neither in the app nor by us. Only with the password on can you also include the photos and PDFs attached to your documents (“Include the document photos”): they go into the file encrypted with the same password. Without a password, photos never go into the file. The file stays wherever you put it, and you delete it from there yourself. On Android, if you choose “Save on the phone”, the phone gives the app access to the folder you choose, so that it can put the file there. Apart from the backup file it puts there itself, the app doesn't read or send anything from that folder. The access stays until you remove it in your phone's settings or until you uninstall the app. Separately, if your phone's automatic backup is on (Google on Android, iCloud on iPhone), the system saves the app's data to your account by itself: your cars, documents, reminders and settings. On Android 12 and newer, this only happens if your phone has a PIN, pattern or password: the backup is encrypted with it, and without one the app asks the phone not to make it. That backup is managed and encrypted by Google or Apple, and we have no access to it; you can turn it off at any time in your phone settings. The app asks your phone to leave the photos and PDFs attached to your documents out of this automatic backup.
Automatic road vignette check
The app does not check road vignettes automatically, and it sends neither your licence plate nor your VIN to CNAIR. You enter the vignette date yourself.
The “nearby” search (location)
The app reads your phone's position only when you search for nearby ITP stations, car services, tyre shops, car washes or petrol stations (Resources → Cars) and allow location access. It then sends your approximate coordinates (rounded to about 1 km), together with the types of place listed above (usually all five, in a single request), to the public OpenStreetMap Overpass service, to get the list of places. Like any server, the one that answers also sees your phone's IP address. Your location is not saved in the app or used for anything else. The “See all in Google Maps” button opens Google Maps with the search text only, without your coordinates.
Error reports
If the app runs into an error or a technical problem (for example, a notification that could not be scheduled), if it freezes for a few seconds or if it closes by itself, it automatically sends a technical report to Sentry (Functional Software, Inc.; data stored in the European Union) so we can fix the problem. The report contains: the error message and where in the code it happened; your phone model and the system and app versions; your language and time zone; the state of the phone at that moment (for example battery, memory and free storage, type of connection, screen size); on Android, which permissions the app has; a short log of the technical steps before the error (for example “the app went to the background”, or the address of a server a request went to, without the content of the request); and a random identifier, created the first time the app starts, which shows us whether the same error keeps happening. We do not store your IP address. Reports do not include your documents, licence plates, expiry dates or photos, and are not used for advertising.
App updates
To get fixes to you quickly, every time it starts the app asks the Expo update server (EAS Update, run by 650 Industries, Inc., USA) whether a new version is available and, if there is one, downloads it from there. On Android, it also asks when you come back to the app after at least half an hour in the background, at most once every three hours. These requests contain technical data: a random identifier, created the first time the app starts; the type of phone (Android or iPhone); the app version and its update channel; which update is running now and which ones failed to start; rarely, also the text of an error of the update system itself. The server also sees your IP address. The requests do not contain your documents, cars or photos. If you move your data to another phone, restore your phone from a backup or, on Android, reinstall the app and Google backup brings your data back, the random identifier for updates comes with it; on Android, so does the one for error reports. The transfer to the USA relies on Expo's contractual safeguards (EU Standard Contractual Clauses / EU-US Data Privacy Framework). On Android, this can also happen when your phone starts the app in the background for the daily notification check.
Photographing a document
On Android, the app contains Google's document scanning library (ML Kit). When you take a photo of a document, the app may use it to open Google's document scanner, which comes with Google Play services, if your phone has it: it finds the edges of the document, straightens it and cuts away the background. The photo is processed on your phone and stays on your phone; it reaches neither Google nor us. However, Google's library sends Google technical data about its use: information about your phone (manufacturer, model, system version and the components that can speed up processing), the app's name and version, a device identifier and an installation identifier, how long processing took, the request settings (such as image format and resolution), the size of the data processed, the scanner version, what kind of operation it was (start-up, download, scanning) and error codes. Google says it uses them for diagnostics and usage statistics, to measure how the library performs, to debug, maintain and improve it, and to detect misuse or abuse; that it sends them encrypted (HTTPS) and does not pass them on to others. From time to time the library may also contact Google's servers to receive things like fixes, updated models and information about the components of your phone that can speed up processing. How Google processes this data is described in its privacy policy (policies.google.com/privacy). According to that policy, for people living in the European Economic Area or Switzerland the controller of this data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), and the data may be processed on servers outside the country where you live; for transfers out of the European Economic Area, Google says it relies on adequacy decisions, the EU-U.S. Data Privacy Framework and standard contractual clauses (policies.google.com/privacy/frameworks). Your phone starts the library together with the app, not only when you take a photo, and the app cannot turn this off.
Notifications
All notifications are local, scheduled directly on your phone by the operating system — they don't go through any external server. They show the document name, the licence plate or whose document it is — on the lock screen too, if your phone is set to show notification content. If you turn on App lock (Settings), their text becomes generic, without these details. On Android, once a day, your phone starts the app in the background for a few seconds to check and reschedule your notifications, even if you haven't opened it in a while. This check shows nothing on screen and sends none of your data anywhere; as at any app start, the app may also ask whether an update is available (see “App updates”), and Google's document scanning library is started too (see “Photographing a document”). On Android, so that a reminder rings exactly at the time you chose, the app may ask you for the “Alarms & reminders” permission (you turn it on in your phone’s Settings). It is optional: without it, notifications still arrive, they may just be a few minutes late.
Ads
The app doesn't show ads and doesn't collect data for advertising purposes.
Links to other websites
The app links to official websites (RAR, AIDA, CNAIR, MAI) and to a single commercial site, marked as such (an RCA price comparison site). We receive no commission from any of them and send them no data about you — tapping a link simply opens the website in your browser. For “Check your RCA policy with BAAR”, the app puts the car’s number on the clipboard so you can paste it yourself; it never reads the clipboard.
Your phone's calendar
If you tap “Add to calendar”, under “More…”, on a document's page, the event goes to your phone's calendar; if that calendar is synced with an account (Google, Samsung, iCloud) or shared with other people, the event goes there too, under that account's rules. Events stay in your calendar after you uninstall the app; you can delete them from your calendar app.
How long we keep data, and on what basis
Your documents, cars, photos and settings stay on your phone (and in the backups you make yourself) for as long as you keep them or keep the app installed; we have no copy. The location sent to the map servers (the public OpenStreetMap Overpass service) is used only to answer your request, which you start yourself (Art. 6(1)(b) GDPR); the app does not save it, and how long those servers keep it in their logs is governed by the rules of whoever runs them. Error reports are kept for at most 90 days and then deleted automatically; we send them on the basis of our legitimate interest in fixing the app (Art. 6(1)(f) GDPR) — you can object by writing to us. We send update requests on the basis of our legitimate interest in bringing you fixes (Art. 6(1)(f) GDPR). How long Expo keeps them is governed by Expo's policy. Sentry and Expo process this data for us, under contracts that require them to protect it at least as this policy says and as the GDPR requires. The map servers don't work for us: about you, they receive only your rounded position and, like any server, your IP address. On Android, the document scanner's technical data goes from Google's library straight to Google; we do not receive it. We use Google's scanner on the basis of our legitimate interest in giving you a well-framed photo of your document (Art. 6(1)(f) GDPR). How long Google keeps this data is governed by Google's policy, which states no specific period. All transmissions are encrypted (HTTPS).
Your rights
You can view, edit or delete any document at any time, directly in the app. You can export your documents, cars, reminders and (with a password) photos to a file (Settings → Data safety → Export backup) and import them on another phone. Uninstalling the app deletes the data from your phone; on Android, if Google backup is on in your phone settings, a copy stays in your Google account and can come back after a reinstall. Google has no button to delete just one app's copy, so empty it: delete your cars, documents and reminders in the app (and in the Archive and the Trash), then in your phone's settings go to Google → All services → Backup and tap “Back up now”. The new backup replaces the old one. Only then uninstall the app. On iPhone, if iCloud Backup is on, a copy stays in your phone's backup and can come back if you restore your phone from it. Delete it before you uninstall: Settings → your name → iCloud → Manage Account Storage → Backups → your iPhone; turn off Nu-mă-uita and tap “Turn Off”. Apple says this removes all of the app's information from iCloud. For what Sentry or Expo received, you can ask us to delete it or object, by writing to us; error reports are deleted automatically within 90 days anyway. You can file a complaint with ANSPDCP, the Romanian data protection authority (www.dataprotection.ro), if you believe your rights have been violated.
Who is responsible for your data
The data controller under the GDPR is Paraschivoiu Alexandru Nicolae, who can be reached at numauita.app@gmail.com.
Contact
For questions about your data or this policy, write to numauita.app@gmail.com.
This website
This website doesn't use cookies, visitor analytics, or fonts and scripts loaded from third parties.