Carfolio Privacy
Effective 5 September 2026. This policy applies to the Carfolio app (com.x70.carfolio). A private vehicle archive, offline research catalog, Watchlist, and transparent Owner Estimate workspace.
Visiting this policy website is covered by the separate x70 website Privacy Policy.
1. Controller and contact
Daniel Ensminger, trading as x70
Altheimer Eck 15
80331 München
Germany
Email: contact@x70.one
2. What x70 collects
- x70 does not receive your Garage, vehicle identifiers, photographs, documents, notes, Watchlist, Owner Estimates, purchase records, or search history.
- Carfolio has no account, advertising SDK, analytics SDK, or developer-operated vehicle database. The bundled launch catalog and its credited photographs ship inside the app.
3. Data kept by the app
- Garage and Watchlist records, vehicle details, ownership periods, photographs, documents, notes, estimate inputs, preferences, and purchase-entitlement state are stored in the app container.
- A portable archive is created only when you choose Export, and imported data is validated before replacing the current archive.
4. When data leaves the device
Optional NHTSA VIN lookup
VIN lookup is optional. When you choose Look up with NHTSA vPIC, Carfolio sends the full VIN and any model-year hint directly to that U.S. government service to suggest vehicle details. The lookup does not send your name, photographs, documents, or Garage archive, and it does not pass through a Carfolio server. NHTSA also receives ordinary connection and request metadata, such as your IP address, client information, request time, and requested resource. We conservatively apply NHTSA's published website privacy policy to this integration and disclose vehicle lookup data and service-access data as collected and potentially linked to you. Carfolio adds no advertising or developer-operated analytics to this lookup. You can enter vehicle details manually without making the request.
Optional private iCloud sync
If you choose Synced mode, Carfolio sends the app records needed for sync to your private Apple CloudKit database so they can appear on your devices. x70 does not operate a sync server or use that content for analytics, advertising, or profiling.
Apple StoreKit
Apple processes App Store purchase information. Carfolio receives only transaction and entitlement information needed to unlock or restore Carfolio Full.
Links you open
Sources, image credits, privacy, and support links open websites controlled by their respective operators. Those sites receive ordinary web request data under their own policies only after you open a link.
5. Permissions
- Photo Library and Camera access occurs only after you choose to add a personal vehicle photograph.
- Files access occurs only through the system picker when you add a document, export, or import an archive.
- iCloud access is used only after you select Synced mode.
- Network access is used only after you request an NHTSA VIN lookup, enable private iCloud sync, or open a link.
6. Tracking, advertising, and analytics
Carfolio does not track you across apps or websites, sell app data, show third-party advertising, or include a developer-operated product-analytics SDK. System diagnostics remain controlled by your Apple device settings unless you deliberately share information with support.
7. Retention and deletion
- Local records remain until you delete individual content, erase Carfolio data, or remove the app, subject to backups controlled by Apple.
- Synced records remain in your private CloudKit database until you delete them or stop and erase sync data through Carfolio, subject to Apple's retention and recovery behavior.
- NHTSA's published website privacy policy describes access records used to operate and secure its services, measure visits, and improve its websites. It states that this access information is retained indefinitely and may be shared with other federal agencies for security or as required by law. This disclosure follows that published policy; it does not claim a separate, verified retention period for vPIC API requests. Erasing Carfolio data does not erase records retained by NHTSA.
8. Support, rights, and security
If you email support, x70 receives the contact information and message you choose to send. Do not include sensitive app records unless they are necessary for your request. Support correspondence is handled under the main x70 website Privacy Policy.
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. Email contact@x70.one. You may also complain to the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).
The app uses Apple platform protections appropriate to the data it stores. No storage method is risk-free, so keep your device updated, use a device passcode, and protect exported archives yourself.
9. Audience and safety
Carfolio is a general vehicle-record utility. It does not create an x70 account or knowingly collect children's personal data.
10. Changes
A material change to the app's data handling will be reflected in this policy and, where required, in the App Store privacy disclosure before the changed feature is released.
Useful notes, sent when there is something worth sharing.
Occasional, practical notes from x70 about product design, web engineering, and managed digital services. No fixed cadence and no noise.