Legal

Privacy Policy

Effective 20 May 2026 · v1

In one paragraph

FuelNote stores your fuel log so you can read it from any device. We don't sell your data. We don't run ads. We don't use third-party analytics or advertising SDKs. We use one cookie (your sign-in session) and we honour data export and account deletion at any time, no questions asked.

What we collect

  • Account: your email address — required for magic-link sign-in.
  • Fuel log data: vehicles you add (name, type, fuel unit, currency), fill-ups (date, litres, price, trip distance, station name if you choose), and your preferences.
  • Technical: a session cookie (HTTP-only, scoped to fuelnote.in) used to keep you signed in, and minimal server logs (IP + user-agent for the last 30 days) used only for abuse prevention.

What we don't collect

  • No third-party advertising or marketing SDKs.
  • No third-party analytics (no Google Analytics, no Mixpanel, no Segment).
  • No location data beyond what you type yourself into a fill-up entry.
  • No contact list, photos, calendar, or device-identifier access.

How we use it

Solely to operate FuelNote. We use your email to send magic links and rare service emails (security or significant policy changes). We use your fuel log to render your app. We use server logs only to investigate abuse or service outages.

We never sell, rent, or share your personal data with third parties for marketing or advertising.

Where it's stored

Database is Supabase Postgres in eu-west-1 (Frankfurt). The marketing site and PWA are served from Vercel's global CDN. A local copy of your log lives in your browser's IndexedDB so the app works offline. Backups are encrypted at rest and retained for 30 days.

Sub-processors

  • Supabase — database, authentication.
  • Vercel — static hosting, edge CDN.
  • Resend — transactional email delivery (magic links).

Your rights

You can export everything as CSV or JSON from Settings → Export at any time. You can delete your account, with all server-side data, from Settings → Delete account. Deletion is irreversible and propagates within 24 hours.

If you're in the EU/EEA, UK, or California, you also have rights of access, rectification, restriction, portability, and erasure under GDPR / UK-GDPR / CCPA. Email us using the address below; we respond within 30 days.

Children

FuelNote isn't intended for use by anyone under 13. We don't knowingly collect data from children. If you believe a minor has created an account, write to us and we'll delete it.

Changes to this policy

If anything material changes, we'll email registered users at least 30 days in advance and post the new version here with a fresh effective date. The full history of this document lives in our public repository.

Contact

For any privacy question — including data export, deletion, or a DPA request — email privacy@fuelnote.in. A human replies, usually within one business day.