DeelaryPrivacy Policy
Last updated: 21 September 2026
This policy explains what data the Deelary app collects, why, where it is stored and what rights you have. We keep it in plain language on purpose.
1. Who is responsible for your data
The data controller is:
Dokao, MB
Company code 305621626 · VAT code LT100014003710
Kalvarijų g. 125, LT-08221 Vilnius, Lithuania
Email: privacy@deelary.com
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email address, name (if your sign-in provider shares it), account identifier | To create and secure your account and to restore your data on a new device | Performance of a contract |
| Business content you enter: vehicles, expenses, sale records, appointments, contacts, business details, photos and receipt images | This is the app’s core function. It is stored on your device and backed up to your account | Performance of a contract |
| Usage statistics (screens opened, feature usage), device model, operating system version, app version, approximate country | To understand which features are used and to improve the app | Legitimate interest |
| Crash and performance diagnostics | To find and fix crashes | Legitimate interest |
| Subscription status | To unlock Deelary Pro features | Performance of a contract |
We do not collect: your location, contacts from your address book, advertising identifiers, or any data for advertising or cross-app tracking. Deelary contains no ads and no third-party trackers.
3. Data you enter about other people
If you record a customer’s name or phone number for an appointment, you are the controller of that data and we act as your processor. Only enter what you need for your business, and do not use the app to store special categories of personal data.
4. Where your data is stored
Your business content lives primarily on your device. A backup copy is stored in your account using Google Firebase (Authentication and Cloud Storage), in the europe-west3 region — Frankfurt, Germany (European Union).
Usage statistics and crash diagnostics are processed by Google Firebase (Analytics and Crashlytics) and may be processed outside the European Economic Area. Google is certified under the EU–U.S. Data Privacy Framework and we rely on the European Commission’s Standard Contractual Clauses for such transfers.
5. Service providers we use
| Provider | Purpose |
|---|---|
| Google Ireland Ltd. / Google LLC (Firebase) | Account sign-in, cloud backup, usage analytics, crash reporting |
| Apple Inc. | App distribution, subscription payments, Sign in with Apple |
We never sell your data and never share it for marketing purposes.
6. Payments
Subscriptions are purchased through the Apple App Store. Apple processes the payment and we never see your card details. Apple provides us only aggregated sales reports and your subscription status.
7. Features that use your device
The app asks permission before using:
- Camera — to photograph vehicles and receipts. Receipt text recognition runs entirely on your device; images are not sent anywhere for analysis.
- Photo library — to attach existing photos.
- Calendar — only if you choose to mirror an appointment into your iPhone calendar.
- Notifications — only if you enable reminders.
You can withdraw any of these permissions in iPhone Settings at any time. Refusing them does not block the rest of the app.
8. VIN lookup
If you use the VIN decoding feature, the VIN is sent to the public vehicle database of the U.S. National Highway Traffic Safety Administration (NHTSA) to retrieve technical specifications. No personal data is sent with it.
9. How long we keep data
Your account and its backup are kept while your account exists. When you delete your account, the backup is deleted immediately and the account record is removed. Analytics and crash data are retained for up to 14 months in aggregated form. Data stored on your device is removed when you delete the app.
10. Your rights
Under the GDPR you have the right to access, correct, delete and port your data, to restrict or object to processing, and to withdraw consent. In practice:
- Access and portability — export your data yourself at any time: Settings → CSV export, or a full backup file with photos.
- Deletion — More → Settings → Account → Delete Account. See the account deletion page.
- Anything else — write to privacy@deelary.com; we reply within 30 days.
You may also lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or your local supervisory authority.
11. Security
All connections use encrypted HTTPS. Your cloud backup is readable only by your own account — access rules prevent any other user from reading it. Nobody at Dokao, MB browses your business data.
12. Children
Deelary is a business tool and is not directed at children under 16.
13. Changes to this policy
If we change this policy, the new version appears on this page with a new date, and material changes are announced in the app.