Privacy Policy

Who we are

RegLog is a UK vehicle management service operated as a sole trader, accessible at reglog.co.uk. You can contact us at [email protected].

What we collect and why

• Name and email address — to create and manage your account.
• Vehicle registration numbers and DVLA/DVSA data (make, model, MOT history, tax status) — to provide the core service. This data is fetched from official government APIs on your behalf.
• Service logs, parts, costs, and uploaded receipts — to maintain your vehicle history.
• Fuel logs and mileage entries — to provide fuel and cost analytics.
• Insurance policy details (provider, dates, cost) — if you choose to record them, to remind you before renewal.
• Vehicle diagnostic data (fault codes and readiness monitors from an OBD2 scanner) — if you use the diagnostics feature, to show and explain vehicle faults.
• Search location (postcode or device location) — if you use the garage finder, to find garages near you. Your location is used for the search and is not stored against your account.
• Push notification tokens — to send MOT, tax, and service reminders to your device.
• Last-seen timestamps — to track when your account was last active, used only for internal platform reporting.

Third-party services

• DVLA Vehicle Enquiry API — used to look up vehicle details by registration number.
• DVSA MOT History API — used to fetch MOT test records.
• Cloudflare R2 — used to store uploaded receipt images and documents securely.
• Resend — used to send transactional emails (verification, reminders, password reset).
• Anthropic Claude API — used to scan receipt images when you use receipt scanning, and to generate plain-English explanations of vehicle fault codes when you use diagnostics. Data is sent for processing only and is not retained or used for AI training.
• Google Places API — used to search for nearby garages and load garage photos when you use the garage finder. Your search terms and search location are sent to Google.
• Google and Facebook sign-in — if you sign in with Google or Facebook, we receive your name, email address, and account identifier from them. We never see your password.
• Stripe — if you purchase a paid subscription, payments are processed by Stripe. We never see or store your card details.

Some of these providers process data outside the UK (primarily in the United States). Where they do, transfers are protected by UK-approved safeguards such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

Sharing features

If you invite someone to your household, they can see the vehicles you share with them. If you create a public share link for a vehicle, anyone with that link can view that vehicle's details and history until you disable the link. Both features are entirely optional and off by default.

How long we keep your data

Your data is kept for as long as your account is active. When you delete your account, all personal data — including uploaded receipts and photos — is removed from our live systems immediately. Residual copies in our routine database backups are automatically deleted within 8 days. You can delete your account at any time from Settings.

Your rights

Under UK GDPR you have the right to:

• Access your data — download everything we hold via Settings → Export my data
• Correct inaccurate data — edit your profile and vehicle records in the app
• Erase your data — delete your account via Settings → Delete my account
• Data portability — your export is provided in machine-readable JSON format

To exercise any right or if you have questions, contact us at [email protected].

Cookies and local storage

RegLog does not use tracking or advertising cookies. We use browser localStorage to store your authentication session, theme preferences, and selected vehicle. This is strictly necessary for the service to function and is exempt from cookie consent requirements under UK GDPR.

Legal basis for processing

We process your data on the basis of contract performance (providing the service you signed up for) and legitimate interest (security and abuse prevention).

Governing law and complaints

This policy is governed by the laws of England and Wales. If you have a complaint about how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.