1. Scope and data controller
EviTraCore is the controller of personal data processed under this policy. This policy applies to every app, website, desktop tool, service, and related support channel published or operated under the EviTraCore name (collectively, the “Services”).
Not every Service uses every type of data described below. The applicable app-store privacy information, in-app notices, and permission prompts describe which features and data practices apply to a particular Service. Those app-specific disclosures supplement this policy and must be read together with it.
Privacy, general, and security enquiries: hello@evitracore.com.
2. Data we process
Depending on the Service and the features you choose, we may process:
- Account and contact data: name, email address, organisation, account identifier, login or authentication information, and communication preferences.
- User-provided content: records, text, files, photos, measurements, notes, settings, or other content you choose to create, import, upload, synchronise, or send through a Service.
- Purchase, subscription, and licence data: product and plan identifiers, transaction or order identifiers, purchase status, subscription status and expiry, receipt or purchase token, licence entitlement, activation history, and limited billing or country information made available by a store or payment provider.
- Technical and usage data: device and operating-system details, app version, language, approximate region, IP address, timestamps, feature interactions, crash reports, diagnostics, performance data, and security logs.
- Support and business data: messages, attachments, survey responses, quote or contract details, and information needed to respond to support or commercial enquiries.
We do not receive your full payment-card number from Apple or Google. They process store payments under their own terms and privacy policies.
3. Device permissions and sensitive data
Some Services may offer optional features that need access to a camera, photos, files, microphone, location, Bluetooth, notifications, or similar device capabilities. A Service will request access through the operating system or an in-app disclosure before using a permission. We use permitted data only for the feature described at the point of access. You can normally revoke permission in device settings, although the related feature may then stop working.
Whether permitted data stays on your device or is sent to us or a service provider is disclosed in the relevant app’s store privacy information or in-app notice. We do not access sensitive device data for an undisclosed purpose.
4. How and why we use data
- Provide, maintain, personalise, synchronise, and secure the Services.
- Create and administer accounts and organisation workspaces.
- Process and verify purchases, restore entitlements, manage subscriptions and licences, prevent fraud, and provide customer support.
- Diagnose failures, improve reliability and usability, and develop requested features.
- Send service messages and, only where permitted, product news or marketing that you can opt out of.
- Comply with legal, accounting, tax, security, and store-platform obligations and enforce our terms.
Where the GDPR or similar law applies, our legal bases are performance of a contract, our legitimate interests in operating and protecting the Services, compliance with legal obligations, and consent where required. You may withdraw consent at any time without affecting earlier lawful processing.
5. Purchases, subscriptions, and licensing
Digital one-time purchases and subscriptions offered in an Apple or Google app are normally processed by the applicable app store. The store controls payment collection, renewal billing, cancellation, and store refunds. We receive limited transaction and entitlement information needed to unlock features, restore purchases, validate a licence, prevent abuse, and provide support.
Subscriptions renew automatically unless cancelled through the store or purchase channel before renewal. Current price, billing period, trial terms, renewal terms, and included features are shown at the point of purchase. A one-time purchase provides the entitlement described at purchase and is not a subscription. Deleting an app or account does not by itself cancel a store subscription.
For direct, business, or enterprise licences, we may process organisation, administrator, authorised-user, device, activation, invoice, and licence-status data. A licence may be linked to an app-store account, EviTraCore account, organisation, or device as disclosed when purchased. Licensing terms govern usage rights; this policy governs related personal data.
6. When we share data
We may share only the data reasonably necessary with:
- hosting, cloud, authentication, support, analytics, crash-reporting, email, payment, licence-management, and security providers acting for us;
- Apple, Google, or another authorised store or payment channel to process and verify a transaction;
- an organisation administrator where you use an organisation-managed account or licence;
- authorities or advisers where required by law or reasonably necessary to protect rights, users, and the Services; or
- a successor in a merger, acquisition, financing, reorganisation, or sale, subject to appropriate notice and safeguards.
Service providers must protect personal data to a standard consistent with this policy and applicable law. We do not sell personal or sensitive user data. We do not use data for cross-app advertising or tracking unless a particular Service clearly discloses it and obtains any consent required by the platform or law.
7. Retention and deletion
We keep personal data only for as long as needed for the purposes above. Retention depends on the Service, whether an account or licence remains active, support and security needs, legal limitation periods, and accounting or tax duties. Transaction and invoice records may be retained for the legally required period. Backups are deleted or overwritten on a controlled schedule unless preservation is legally required.
If a Service supports account creation, it will provide an in-app way to request account deletion. You may also use our public account and data deletion page. Verified deletion removes the account and associated personal data, except information we must retain for legal, fraud-prevention, dispute, or security reasons; any exception will be limited and isolated from ordinary use. Account deactivation is not treated as deletion.
8. Your privacy choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent, and receive a portable copy of your data. You may manage app permissions in device settings, marketing choices through an unsubscribe control, and subscriptions through the store or channel where purchased.
Submit a request through the privacy choices page or email hello@evitracore.com. We may need to verify your identity and authority. You may also complain to your local supervisory authority. In Denmark, this is Datatilsynet.
9. Security and international transfers
We use reasonable technical and organisational safeguards appropriate to the data and risk, including protected access and encryption in transit where data is transmitted. No system is completely secure, and users should keep credentials and devices protected.
Our providers may process data in countries other than yours. Where required, we use an approved transfer mechanism and appropriate safeguards, such as an adequacy decision or standard contractual clauses.
10. Children
The Services are not directed to children under 13 or the higher minimum age required in their country unless a particular Service and its store listing expressly say otherwise. We do not knowingly collect a child’s personal data without the consent or other legal basis required by law. Contact us if you believe a child has provided data improperly.
11. Websites, cookies, and external services
Our public website may generate essential hosting and security logs. Current cookie and website-tracking practices are described on the cookie page. The Services may link to third-party services governed by their own privacy policies. We are not responsible for independent third-party practices.
12. Changes to this policy
We may update this policy when our Services, suppliers, or legal duties change. We will post the revised version here, change the “Last updated” date, and provide additional notice where a material change requires it. App-store privacy declarations and in-app disclosures will be updated when an app’s data practices change.
