Who we are
Car Check is an iPhone, iPad and Android app published by Infinite Loop Development Ltd, Ballyliffen, Clonmany, Co. Donegal, Ireland, F93 V56N ("we", "us"). We also operate regcheck.org.uk, which provides the vehicle data the app shows. We are the data controller for the personal data described here, and we handle it in line with the GDPR and other applicable data protection laws.
What we collect, and why
| Data | Why we use it |
|---|---|
| Email address | On iPhone and iPad, when you sign in with Apple, Apple shares your email address, or a private relay address if you choose "Hide My Email". On Android, when you sign in with Google, Google shares the email address of the Google account you choose, and your name, which the app doesn't use. You can also type in a different address. We use it to create your regcheck.org.uk account, to send the activation link, a welcome email and your login details when you ask for them, and to reply if you contact us. |
| Account details | The app creates a regcheck.org.uk username and a random password for you. These identify your account and its credit balance, and let you log in to the website. |
| Vehicle searches | The registration numbers or VINs you look up, the country and, where needed, the state. They're sent to regcheck.org.uk with your username so we can return the vehicle details and deduct one credit per lookup. |
| Purchases | If you buy credits in the iPhone or iPad app, we receive Apple's signed record of the transaction (for example the product and the transaction ID). We use it to add the credits to your account. We never see your payment card details; Apple handles payment. The Android app has no in-app purchases. |
| Technical logs | Our servers record basic request information, such as IP address, time and the request made. We use it to keep the service secure, prevent abuse of the free credits and fix problems. |
Our legal bases are: performing our contract with you (providing the account, lookups and credits); our legitimate interests (security, preventing abuse and improving the service); and legal obligations (for example keeping records of purchases).
What we don't collect
Camera and photo plate reading happens entirely on your device (on Android, using Google's on-device ML Kit text recognition). Images are never uploaded. The app has no advertising and no third-party analytics, and it doesn't track you across other companies' apps or websites. We don't sell your personal data.
Where your data is stored
Your username, password and email address are stored on your device. On iPhone and iPad they're kept in the iCloud Keychain, which lets the account follow you to your other Apple devices, protected by Apple's end-to-end encryption. On Android they're encrypted with a key held in the device's Android Keystore, and also saved to Google's Block Store, which is included in your Google backup (end-to-end encrypted when your device has a screen lock), so the account is restored if you reinstall the app or move to a new phone. They are also stored in your regcheck.org.uk account. We use these service providers, under contracts that protect your data:
- Apple: Sign in with Apple, the Hide My Email relay and in-app purchases (iPhone and iPad).
- Google: Sign in with Google, Block Store backup and on-device ML Kit (Android).
- Amazon Web Services (Simple Email Service, EU region): sending the app's emails.
- Google Cloud (Cloud Run, EU region): the service that sends emails and verifies purchases. It doesn't store your data, apart from short-lived technical logs.
Some of these providers may process data outside the European Economic Area. Where they do, they rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
We keep your account, and the searches linked to it, for as long as the account exists. Technical logs are kept for up to 30 days. Purchase records are kept for as long as tax and accounting law requires.
Deleting your account
In the app, open the menu and go to My account → Delete account. If you no longer have the app, email info@infiniteloop.ie from the email address you signed in with, and ask us to delete your Car Check account. We delete your regcheck.org.uk account and the personal data linked to it within 30 days. The app also removes the account it saved on your device (and, on Android, from Block Store). On iPhone and iPad we revoke the app's Sign in with Apple access. You can also stop the app using your Apple ID at any time from your device's Apple ID settings, or remove its access to your Google account at myaccount.google.com/connections. Unused credits can't be recovered after deletion.
Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where we rely on it. To exercise any of these rights, email info@infiniteloop.ie. If you think we've breached data protection law, you can complain to a supervisory authority. In Ireland, that's the Data Protection Commission.
Children
Car Check isn't aimed at children, and we don't knowingly collect data from anyone under 16.
Changes to this policy
If we change this policy, we'll post the new version here with a new effective date.
Contact
Infinite Loop Development Ltd, Ballyliffen, Clonmany, Co. Donegal, Ireland, F93 V56N
info@infiniteloop.ie · +44 28 7122 6151
The general Infinite Loop privacy policy is at infiniteloop.ie/privacypolicy.html. Where it differs, this policy applies to the Car Check app.