Tovolta privacy policy

What stays on your device

You can use the app without a website account. Your saved vehicle, preferences, home and recent addresses, and recent trips are stored on your device. Ordinary Bluetooth vehicle readings (OBD), such as battery charge and energy use, are processed there for driving and charging features; they are not continuously uploaded as a vehicle history.

Local storage does not mean those details never leave your phone. Relevant details are sent when you use a connected feature below, including saved addresses or trips supplied to Co-Pilot. Files you choose to export or share, and device backups you enable, are separate copies.

The website trip preview saves your selected vehicle, battery reserves, and recent address labels from completed previews in your browser. You can remove a label from Recent Addresses or clear the browser’s site data to remove the saved preview data. The preview sends the addresses and settings you choose for a trip when you submit it.

Search, routes and maps

Search and route requests can include the text you enter, addresses, precise coordinates, your current location when permitted, destinations, stops, vehicle details, battery settings and planning preferences. Navigation can send your current position and heading to refresh directions. We use these details to find places, plan routes and estimate driving and charging needs.

Submitted address and place searches go through our backend to OpenStreetMap/Nominatim. If no usable match is available, eligible address lookups can go to Geocodio, then Geoapify. These providers receive the submitted search text and, when relevant, a location or search area. As you type an address or place name, autocomplete can send partial search text and an optional location bias through our backend to Amazon Location Service and its data providers. Tovolta shows autocomplete suggestions temporarily. In the app, choosing one submits its address text to the geocoding chain, and saved trips use the geocoder's returned address. The website preview uses the selected label when you submit a trip. Typing does not contact Nominatim, Geocodio or Geoapify. Reverse address labels can send a selected location through the same provider chain. Nearby amenities use our Overture place catalog. Routing and maps use our own services where available; Apple or Google may process location and route details when their routing or map services are used. Weather and elevation lookups can send selected locations to providers, including Open-Meteo, Apple WeatherKit, Google or OpenTopoData. Map requests reveal the area being viewed to the map service.

Speech and optional Co-Pilot

Navigation speech sends instruction text, which can include road or place names, to Tovolta's speech service to generate audio. It does not send microphone recordings. The app can also speak directions on the device.

Dictation uses Apple's speech recognition and may send microphone audio to Apple. If you use Co-Pilot, your messages and supplied context can go to our backend and AI providers, including Jev/Typesafe and OpenAI, or a model running on our own server. Context can include your current location, home address, vehicle, preferences, active itinerary and saved recent trips. In development builds, activated command-center voice sends audio directly to OpenAI and can send requested diagnostic context for replies.

Optional vehicle diagnostics

Diagnostic captures and discovery history are saved locally. If you choose API analysis for OBD discovery, vehicle details, diagnostic responses and session context are sent through our backend to OpenAI. If you choose Codex via Xcode, the selected diagnostic batches are read through Xcode into your Codex session instead. Exporting or sharing a report sends it to the destination you choose. These optional actions are separate from ordinary OBD readings.

Service records and providers

Our servers and hosting providers receive connection information such as your IP address. API requests also carry an installation identifier. We keep usage, security and diagnostic records to limit abuse, manage provider costs, troubleshoot failures and improve service reliability. Records can include request times, features used, status, timing, hashed identifiers, route summaries and diagnostic excerpts; some error records can include search text or Co-Pilot content.

We share information with hosting and feature providers to perform the processing described here. Their own privacy terms also apply. We do not promise that external providers retain no data or use the same deletion schedule as Tovolta. We do not use advertising or cross-app tracking SDKs. The website can use a session cookie for session and security functions; the policy page itself sets no cookie.

How long information remains

Saved device data remains until you remove it, replace it, or clear the applicable history. Recent address and trip lists are limited in size. Our services use caches and temporary planning records to complete requests and avoid repeating work; these can contain location-related results and may be reused for later requests. Expiry rules differ by cache, and expiry does not mean every stored copy is immediately erased.

Operational logs, usage records and backups do not have one guaranteed automatic deletion deadline. They can remain until cleanup, rotation, replacement or manual deletion. Clearing the app's data does not remove these server records, provider copies or backups.

Your choices and deletion

You can revoke location, microphone, speech recognition or Bluetooth access in iOS Settings. Stop a voice or diagnostic session to end that capture. Co-Pilot is optional and can be hidden in Device settings; do not start optional AI features if you do not want their inputs processed by those providers.

In Tovolta, Device settings → Clear device data resets saved vehicle, addresses, trips and general preferences. It does not reset the installation identifier or remove all OBD pairing, calibration and diagnostic data. Use the diagnostic Clear History control for discovery reports. Deleting the app removes its remaining app-container data; exported files and backups need to be managed separately.

Email ask@tovolta.com with privacy questions or to request deletion of retained information we can identify. Include approximate request dates to help us locate relevant records. We use your email address and message to respond and handle your request. We may need information to verify it and will explain any records we cannot identify or must retain for security or legal reasons. This policy covers the Tovolta app, public website and supporting services. We update the date above when the policy changes.