01. Data and purposes

• Account and profile: name, email, account identifiers, verification status, and an optional phone number support sign-in, profile management, and support.
• Google/Facebook: the authentication service receives the provider identifier, name, email, and basic profile information you authorize to create or link your account. QYZEL Drive does not receive your Google/Facebook password. This sign-in does not grant access to your mailbox, contacts, or social posting.
• Vehicles and devices: vehicle names, optional number plates, body styles and colors, device identifiers, network names, and connection settings support your garage and device connections. Garage and device preferences are stored on your phone. When you sign in, they also sync through Supabase so they are available on your other devices. OBD history, fault reports, maintenance records and trip statistics stored in the garage may also sync.
• Recordings and GPS: video, audio if recorded by the dashcam, timestamps, and GPS coordinates/speed if available support viewing and saving recordings. Recordings remain on the SD card or in copies you save on your phone. Saving recordings does not automatically upload them to QYZEL cloud storage.
• Orders: your verified account email is used to retrieve your orders from the QYZEL store through Shopify. Displayed information may include products, quantities, transaction amounts, status, and shipment tracking. The app integration uses read-only order access.
• Feedback and support: messages, images you choose to attach, app version, and support correspondence help answer questions and resolve issues. Messages and attachments are uploaded to QYZEL servers when you press send.
• Technical data: server services may log IP addresses, request times, device/browser information, and errors for service operation and security.
• Optional problem reports: if you enable Share problem reports in Settings, Firebase Crashlytics processes crash and feature-failure reports, technical stacks, phone model, Android/app version and SDK installation identifiers. Custom app records do not attach videos, GPS coordinates, email addresses, passwords or login tokens. Reports may wait on your phone until internet access returns. You can turn reporting off anytime; the app stops new reports and requests deletion of unsent reports. Reports already received by the provider follow its retention policy.
• Maps: loading map backgrounds requests tiles from OpenStreetMap services. Requests may disclose your IP address and the displayed map area to the provider. Offline map availability depends on map data already stored.

02. Phone permissions

Network, Wi-Fi/nearby-device, Bluetooth, and system-required location permissions support device discovery and connection. Some Android versions require location permission for Wi-Fi scanning; this is distinct from GPS data originating from the dashcam. Photo selection and storage support choosing a profile image, attaching feedback, or saving recordings. You can change permissions in phone settings; related features may not work if permission is denied.

03. Service providers and data sharing

QYZEL Drive uses Supabase for authentication and account/garage storage and sync, Firebase Crashlytics for optional problem reports, OpenStreetMap tile services for map backgrounds, Google or Meta/Facebook for social sign-in you choose, Shopify for order information, and QYZEL servers and hosting providers for services and feedback. These providers process the data needed for their respective functions; their infrastructure may be outside Indonesia.

Google/Facebook login data is used for authentication and account services, not sold or used for advertising targeting. Recordings or attachments are shared with others when you choose a sharing feature or send them for support. WhatsApp, email, maps, and external websites you open also apply their own privacy policies.

04. Retention and deletion

Account data is retained while the account is used or remains necessary to provide the service. Feedback and technical records are retained as needed for support, security, dispute resolution, or applicable obligations. In-app notifications are limited to seven days. Recording retention on SD cards and phones follows device settings and your deletion actions.

Deletion of an account and related data is targeted for completion within 30 days after account ownership is verified. Transaction data or certain records required for legal obligations, security, or disputes may be retained; support will explain the scope and reasons. Deleting the app account does not automatically format the SD card or erase phone gallery copies.

05. Your choices and rights

You can update your profile, revoke device permissions or Google/Facebook access, and request access, correction, or deletion through developer@qyzel.com. Account ownership is verified before handling requests involving personal data. Never send passwords or OTPs.

See the account and data deletion instructions and QYZEL Drive app page.

06. Security and policy updates

We use authentication and access restrictions to protect account data. Protect your passwords and recordings and use a phone screen lock. If data practices change, this policy will be updated with a new date.

Privacy contact: PT Qyzel Global Teknologi — developer@qyzel.com.