Privacy policy

Kioo is an app that puts drivers who need a car repair in touch with people nearby who can fix it. This policy explains what information Kioo keeps, why, and your rights. Kioo is run by [YOUR NAME], [ADDRESS], who is responsible for your information (the "controller"). Contact: [email protected].

What Kioo keeps

• Your phone number, verified with a text message code when you sign in.
• Your name and area. Your area is a postcode district such as KT16 and a rough position, never your address. Locations are rounded to about 1 km.
• If you fix cars: your business name and type, what you fix, and a Google listing if you link one.
• Repair jobs and quotes: the repairs, the car's make, model, year, fuel and mileage, budgets, prices, dates and messages about the job.
• Ratings you give and receive after a job.
• Tokens: your balance and what you spent them on; any purchases.

Your cars' registrations stay on your phone. Kioo looks a registration up with the DVSA (MOT history) and DVLA (vehicle details) through its own server, but doesn't store it there and never sends it to an AI service or to other users.

Who sees what

• A repair job shows fixers the repairs, the car's make and model, the budget and the area, never your address or registration.
• A driver's phone number is shown to a fixer only after the driver accepts the fixer's quote and the fixer confirms the job, and only while the job is confirmed or booked. The fixer's number is shown to the driver in the same way. Kioo doesn't copy numbers into the job.
• Names are checked before anyone else sees them.
• Photos you add to a job are checked, and number plates and faces are blurred on your phone. [Before launch: confirm how job photos are shared with fixers and when they're deleted.]
• Other users see rating totals, never who gave which rating.

Services that handle information for Kioo

• Supabase: Kioo's database and server.
• Twilio: sends the sign-in text message codes.
• Google: AI that writes repair descriptions, checks photos and names, and answers questions (Gemini); maps and nearby businesses (Maps and Places); repair videos (YouTube); notifications (Firebase Cloud Messaging); and Play Store purchases.
• DVSA and DVLA: official vehicle and MOT records, looked up by registration.

AI services receive the car's make, model and history and the repair, never your registration, name, number or address. [Where these services are, and how transfers outside the UK are protected, to be confirmed.]

Why Kioo uses it (lawful basis)

[To be confirmed by the solicitor: to provide the service you sign up for (contract); to keep Kioo safe and prevent misuse (legitimate interests); to keep sales records (legal obligation).]

How long it's kept

• Car lookups for a car you check once: up to 90 days.
• Phone numbers: each side sees the other's only while a job is confirmed or booked.
• Job photos: [to be confirmed before launch].
• Your account: until you delete it. Paid purchase records are kept for six years for the accounts, with nothing linking them to you.

Shared data that can't identify you

Kioo builds anonymous statistics from checks and repairs, such as what commonly comes up on a model at a given mileage. These contain no registration, name, number or device identifier.

Your rights

You can ask to see, correct or delete your information, object to how it's used, or take a copy of it. You can delete your account in the app at any time. Contact [email protected]. You can also complain to the Information Commissioner's Office (ico.org.uk).