Privacy Policy for VConnect

Effective Date: August 9, 2025

Developer: Kshmlg Technologies

This Privacy Policy describes how Kshmlg Technologies ("VConnect", "the Application", "we", "us", or "our") handles your information. Your privacy is of the utmost importance to us.

Our philosophy is one of **minimal data collection**. The Application is designed to act as a secure client between your device and your vehicle manufacturer's official servers, without storing or transmitting your personal data to our own servers.

1. Information the Application Handles

To function, the Application handles the following types of "Personal and Sensitive User Data":

• Authentication Information: When you log in, access and refresh tokens are generated by your vehicle's manufacturer. These are required to authenticate requests the Application makes on your behalf.
• Vehicle Identification Number (VIN): The Application stores your selected VIN to direct commands to the correct car.
• Vehicle Data: This includes real-time status information from your vehicle's API, such as door/window status, fuel/battery levels, and diagnostic data.
• Device Location: The Application requests access to your device's location to display your position on the map relative to your vehicle. The location feature is user-initiated and your location data is not stored or transmitted by us.
• Financial Information (Purchase Tokens): If you purchase the Premium version, a non-personally identifiable purchase token is handled by the Application to verify the transaction.
• Diagnostics and Crash Data: The Application uses Google Firebase Crashlytics to collect anonymous crash data to improve app stability. This does not include personally identifiable information.

2. How Your Data is Stored and Handled Securely

The security of your data is our top priority.

• Local, Encrypted Storage: Your authentication tokens and VIN are stored **solely within the secure, encrypted storage of your Wear OS device** using Android Jetpack's `EncryptedSharedPreferences`. These credentials never leave your device to be sent to our servers.
• Secure Transmission: All data transmitted by the Application, both to the vehicle manufacturer's servers and to our license verification server, is sent using modern cryptography (HTTPS).
• No Cloud Storage of Personal Data: We do not operate servers that store your credentials, vehicle data, location, or other personal information. VConnect acts as a secure intermediary, not a data storage service.
• No Sale of Data: We unequivocally **do not sell** your personal and sensitive user data to any third party for monetary consideration.

3. How Your Data is Used and Shared

Your information is used strictly for purposes that provide app functionality and are reasonably expected by you, the user:

• To Communicate with Vehicle Servers: Access tokens and your VIN are used to authenticate requests to your vehicle manufacturer's official API to execute commands (e.g., lock, unlock) and fetch vehicle status.
• To Verify Premium Purchases: The Google Play purchase token is sent to our server along with a Google Play Integrity token for a one-time, secure verification.
• To Improve the Application: Anonymous crash reports help us identify and fix software bugs.

The only third parties with whom data is shared are those essential for the app's core function:

• The Vehicle Manufacturer: All vehicle-related requests are sent directly to their secure servers.
• Google Play Services: For handling purchases, integrity checks, and crash reporting.

4. Data Retention and Deletion Policy

The Application adheres to a minimal data retention policy.

• Data on Device: All sensitive data (authentication tokens, VIN) is stored locally on your device and is under your control. This data is deleted when you uninstall the Application.
• Account Deletion: The Application does not require users to create a separate VConnect account. Your "account" is your link to the vehicle manufacturer's service. To delete your data and sever the connection, you can:
  1. Log out from within the Application's settings menu.
  2. Uninstall the Application from your device, which deletes all locally stored data.
  3. For complete revocation of access, we recommend visiting your vehicle manufacturer's official website or app and revoking third-party application permissions for VConnect.

5. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

6. Contact Us (Privacy Point of Contact)

If you have any questions or inquiries about this Privacy Policy or your data, please contact us through our developer contact information listed on our Google Play Store. page.

Also feel free to contact us under send us an email