Privacy policy

Effective from . Data controller: . Contact: [at] .

This page describes what personal data the CANDIAG app, the CANDIAG portal and this website actually process, on what legal basis, why, who receives it and how long it is kept. We do not sell data, show ads or embed third-party trackers or ad modules — neither in the app nor on the website.

Who the controller is

The data controller is . For any question about your data write to [at] . We have no separate representative in the European Union and no separate data protection officer — requests are handled at this address.

What data, why and on what legal basis

Data	Why	Legal basis
Account: login, name, email address, phone number, password (stored only as a hash), time zone, language, currency; which versions of the terms and of this policy you accepted and when	sign-in, account recovery, contacting you, payments, proof of consent	performance of the contract; for the consent record — the controller's obligation
Devices: the serial number of your device (adapter) and its technical details during verification (firmware versions, Bluetooth address, vehicle supply voltage)	linking purchases to the device, verifying that the device and its licence are genuine	performance of the contract
Sign-ins and sessions: IP address, country, city and approximate map point derived from the IP address, device and program name; failed sign-in attempts (what was typed without an existing account is stored only as a fingerprint)	protecting your account, sign-in history, ending sessions you do not recognise	legitimate interest — security
App launches: time, IP address, country and city by IP, tablet model, app and Android versions, app installation number	protecting your account (which tablets use it and from where), usage records, support	legitimate interest — security and support
Tablet verification: the device's security state (whether the bootloader is locked, security patch level), the app signature	protection against tampered and cracked copies of the app	legitimate interest — security
App crash reports: model, versions, where the error happened (email addresses, phone numbers and VINs are removed before sending)	fixing errors	legitimate interest — keeping the service working
Purchases: orders, payments, refunds, balance; email address or phone number for the fiscal receipt; your acceptance of the purchase terms	access to purchased vehicle software, payment records, receipts	performance of the contract; accounting and receipts — legal obligation
Diagnostic history: workshop card, visits — VIN, licence plate, make, model, year, mileage, fault codes found, live data recordings	work history and reports, access from another tablet (visits are synchronised with the server)	performance of the contract
Requests to support and to your dealer: messages, photos and screenshots you attach (location data is removed from photos), device exchange logs	answering questions, troubleshooting, order cancellation requests	performance of the contract
Notifications: the Firebase Cloud Messaging token on the tablet, the browser notification subscription in the portal, the Telegram chat number if you linked the bot	delivering notifications about replies, orders and payments	performance of the contract; browser notifications and the bot are turned on by you
Downloads and network requests of vehicle software: what was downloaded, when and from which address; address and size of requests made by vehicle software (not their content)	delivering updates, troubleshooting, preventing abuse	performance of the contract; legitimate interest — security
Actions of support staff with your data (for example, viewing your card and visits) — in the action log	controlling access to your data	legitimate interest and controller's obligation — data security

The app does not read or send the location of your device. It asks for the location permission when it connects to your device — the permission is needed for a stable Bluetooth connection to the device.

If your phone number is Russian, at sign-up we ask for a separate consent to the processing of personal data (Russian Federal Law No. 152-FZ). By giving it you agree to the processing of the data listed above for the stated purposes, including disclosure to the recipients listed below, also outside Russia. The consent is valid while your account exists; you can withdraw it by writing to [at] . Withdrawal does not affect processing needed to perform the contract or required by law.

App permissions

Bluetooth and location — to find your device and keep the connection to it;
notifications — to show download and connection progress and replies to your requests;
installing apps — to update the app itself (you confirm the installation in the Android system installer);
network — to talk to our server and, when the vehicle software requires it, to the vehicle network.

The app does not read text messages, contacts or the list of installed apps. Photos — only those you choose to attach to a request.

Who receives data

We share data only to the extent each purpose needs:

payment services and fiscal receipt operators — the amount and purpose of the payment, your email address or phone number for the receipt; you enter card details on the payment service's page, we never receive them;
Infobip — to deliver the confirmation code as a WhatsApp message (WhatsApp is a Meta service): your phone number and the one-time code;
SigmaSMS — to confirm your number with a call (flash call): your phone number and the one-time code (the last digits of the calling number);
an email delivery service — your email address and the text of the email (confirmation codes, order notifications);
an IP geolocation service — your IP address when you visit the website, sign in and launch the app;
VIN decoding and online-function services of vehicle software — the vehicle's VIN and the device serial number when you use such a function. Some of these requests are sent by the vehicle software over unencrypted HTTP — this is how the software itself works, and where the recipient does not support HTTPS the request travels without encryption;
a machine translation service — texts of vehicle software screens, if you turned translation on (they contain none of your data);
Google (Firebase Cloud Messaging) and browser notification services — the notification token or subscription and a short notification without the message text;
the Telegram messenger — if you linked the bot: the chat number and notification texts;
hosting and content delivery providers — data passing through our servers is stored and transmitted by our infrastructure providers;
your dealer — if the device was bought through a dealer: login, name, the device and its subscriptions (not your email or phone);
anyone you give a report link to — a diagnostic report opens by its link without sign-in for 90 days (VIN, licence plate, workshop details);
public authorities — only on a request provided for by law.

We check the app file with antivirus services — they receive only the app file itself, which contains none of your data.

Transfers abroad

Some of the recipients above (notification services, the messenger, the WhatsApp message delivery service, translation, VIN decoding and online-function services, payment services) are located or process data outside the country where you live, including outside the European Union and Russia. You can ask at [at] which countries your data is transferred to and on what terms.

How long data is kept

Your account and the devices, purchases, licences, diagnostic history and requests linked to it are kept for as long as the service exists: accounts are not deleted, because payments, device licences and purchase history depend on them;
logs (sign-ins, actions, downloads, app launches) are not deleted: after their working period they are moved to archive storage;
one-time confirmation codes — up to 7 days; crash reports — 30 days; diagnostic report links — 90 days; the server's technical log — 14 days;
fiscal receipts and payment records — at least as long as accounting and cash register laws require.

Protection

Data travels only over encrypted connections (HTTPS) between the app, the portal and our server. On the tablet, vehicle software, the database and sign-in keys are stored encrypted, and cloud backup of the app is turned off. Passwords are stored only as hashes, card details only at the payment service. Staff access to your data is limited by role, and every time a support employee views your data it is logged.

Automated decisions

Two decisions are made without human involvement, both for protection: (1) after a series of failed sign-in attempts the address they came from is temporarily blocked from signing in; (2) a tablet that fails the authenticity check (unlocked bootloader, modified system or tampered app) does not receive vehicle software and licences. If you believe a decision is wrong, write to [at] — an employee will review it.

Website and portal: cookies and browser storage

The website sets no cookies and loads no third-party counters. The portal keeps in browser storage (localStorage) only what it cannot work without:

candiag.rt — the sign-in key (so you do not have to sign in on every page); removed when you sign out;
candiag.cid — the installation number (to tell this browser apart in your session list);
candiag.lang and candiag.theme — your chosen language and appearance;
candiag.recent.… — recent searches (staff only).

If you turn on browser notifications, the portal registers a browser notification service. You can clear the storage in your browser settings — you will then need to sign in again.

Children

The service is meant for vehicle diagnostic professionals and is not intended for anyone under 16. We do not knowingly collect children's data; if you learn that a child has signed up, please write to us.

Your rights

Within the limits of the applicable law (the GDPR for EU residents, Federal Law No. 152-FZ for Russia, the personal data protection law of the Republic of Moldova) you have the right to: find out what data about you is processed and get a copy of it; have inaccurate data corrected; ask for erasure or restriction of processing — where the law provides for it and the data is not needed to perform the contract, keep payment records or comply with the law; object to processing based on legitimate interest; receive your data in a machine-readable format where the law provides for it; withdraw consent where processing is based on it.

Some data (name, email, phone, language, password) you change yourself in the app and in the portal. For anything else write to [at] from the address in your account — we will reply within the time set by the applicable law.

Complaints to a supervisory authority

If you believe we process your data unlawfully, you have the right to lodge a complaint with a supervisory authority: in the Republic of Moldova — the National Center for Personal Data Protection; in the European Union — the data protection authority of the country where you live or work; in Russia — Roskomnadzor. We would appreciate it if you wrote to us first — we will try to resolve the matter ourselves.

Changes

If this policy changes, the new version will appear on this page with a new date. We will tell you about significant changes in the app or in the portal. The terms of use of the service are on a separate page.