Privacy Policy

1. Introduction

ALJARO MOTORS LIMITED ("Company", "we", "us", or "our"), a company registered in the United Kingdom at 247 Shirecliffe Road, Sheffield, S5 8XE, operates the Cinvo mobile application (the "App").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. It should be read alongside our Terms & Conditions and End User Licence Agreement. If you do not agree with the terms of this Privacy Policy, do not access the App.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account or use our App, we may collect the following personal information:

Account Information: Name, email address, and password (if using email authentication)
Profile Information: Business name, phone number, and profile picture
Business Data: Customer records, vehicle inventory details, invoice information, expense records, and sales analytics you enter into the App
Payment Information: Subscription and purchase details (processed securely through third-party payment processors)

2.2 Information Collected Automatically

When you use our App, we may automatically collect:

Device Information: Device type, operating system, unique device identifiers
Usage Data: Features accessed, time spent in the App, crash reports and performance data
Authentication Data: Login timestamps and authentication tokens

2.3 Information from Third-Party Services

If you choose to sign in using third-party authentication providers, we receive:

Google Sign-In: Name, email address, and profile picture
Apple Sign-In: Name and email address (which may be a private relay email)

2.4 Cinvo Business Line Information (optional feature)

If you subscribe to the Cinvo Business Line, we additionally collect and store:

Your business phone number and the mobile number you ask us to forward calls to (verified by a one-time code we text you)
Call records for every call to your business number: the caller's telephone number, the date and time, how long the call lasted, whether it was answered, and the number of minutes it used
The car you link a caller to, where you choose to make that link

Note: call records necessarily include the telephone numbers of members of the public who ring your business number. Those callers are not Cinvo users. We store this information solely so that we can show you your own call history and connect callers to vehicles in your inventory, and we do not use it for marketing, do not sell it, and do not share it with anyone else. We do not record, listen to, or store the audio of any call.

2.5 Information on Your Own Device

With your permission, Cinvo reads telephone numbers only from your phone's address book, on your device, so that saving a buyer updates an existing entry instead of creating a duplicate. Nothing from your address book is stored by us or sent anywhere. See Your Phone's Contacts and Calendar for the full detail.

3. How We Use Your Information

We use the information we collect to:

Provide and maintain the App: Enable core functionality including car inventory management, customer records, invoicing, and analytics
Create and manage your account: Authenticate your identity and maintain your user profile
Process subscriptions: Manage your subscription status and give you access to the App and, if you buy it, to the Cinvo Business Line
Improve our services: Analyse usage patterns to enhance App features and user experience
Communicate with you: Send service-related announcements, updates, and respond to support inquiries
Ensure security: Detect and prevent fraud, unauthorised access, and other malicious activity
Comply with legal obligations: Meet our legal and regulatory requirements

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using Firebase services provided by Google LLC:

Firebase Authentication: Secure user authentication and identity management
Cloud Firestore: Encrypted database storage for your business data
Firebase Cloud Storage: Secure storage for uploaded files and images

Data is stored on servers located within the European Union and/or the United States, with appropriate safeguards in place for international data transfers.

4.2 Security Measures

We implement industry-standard security measures including:

Encryption in transit (TLS/SSL) and at rest
Secure authentication protocols
Regular security audits and monitoring
Access controls and authentication requirements

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

Our App uses the following third-party services:

Service	Purpose	Privacy Policy
Firebase (Google)	Authentication, database, storage, cloud functions	Google Privacy Policy
RevenueCat	Subscription management and in-app purchases	RevenueCat Privacy Policy
Twilio	Cinvo Business Line only — the telephone number, call forwarding, and verification text messages	Twilio Privacy Notice
Google Sign-In	Authentication	Google Privacy Policy
Apple Sign-In	Authentication	Apple Privacy Policy

These third-party services have their own privacy policies governing the use of your information.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With trusted third-party service providers who assist us in operating our App (as listed in Section 5)
Refund Requests: When you ask Apple for a refund, Apple asks us how much of the purchase you used before deciding. We answer with usage figures from your account — how long you have had the App, how much of the purchase has been used, and what has been bought and refunded before. This is required by Apple to process your own refund request, and is shared only with Apple and only when you have asked for a refund
Legal Requirements: When required by law, court order, or governmental authority
Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets
Protection of Rights: To protect our rights, privacy, safety, or property, and that of our users or the public

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Specifically:

Active Accounts: Data is retained while your account remains active
Lapsed Subscriptions: If your Cinvo subscription ends and you do not resubscribe, your account and all its data are deleted 12 months after it ended. Resubscribing at any point inside those 12 months takes the account off this clock
Inactive Free Accounts: An account that has never held a subscription is deleted 12 months after the App was last opened on it. Opening the App restarts those 12 months. This rule began on 7 September 2026, and time before that date is not counted
Warnings Before Either Deletion: Four are sent — 30 days before, 7 days before, and twice on the final day itself, once in the morning and once in the evening — each as a notification to your device and as an email to the address on your account. If all four have not been sent, the deletion is postponed and the warnings start again. An account is not on either clock while it holds an active subscription, complimentary access we have granted, or a Cinvo Business Line number
Account Deletion: Upon your request to delete your account, all personal data is permanently and immediately deleted from our systems, apart from the two records described in the next two points. Everything else goes: your vehicles, invoices, expenses, drafts, saved clients, viewings, contacts, call records, uploaded photographs and logo, shared calendars, and every sign-in method on the account
Free Trial Record (kept): Cinvo gives each new account one free trial, and one only. To make that possible we keep a one-way fingerprint of the email address the trial was given to. A fingerprint is produced by a calculation that cannot be reversed: it cannot be turned back into your email address, it cannot be read or used to contact you, and it is never shared. It records nothing except that an address has already had its free trial. This record is kept after an account is deleted — otherwise deleting an account and signing up again on the same address would give an unlimited number of free trials. We keep it on the legal basis of our legitimate interest in preventing repeated misuse of a free offer
Support Messages (kept): If you have written to us through Contact Us, that message is kept after your account is deleted, together with the name and email address you gave when you sent it. We keep it so that we have a record of what was asked and what we answered — for our own support history, and so that we can evidence how a complaint or a billing question was handled. We keep it on the legal basis of our legitimate interest in maintaining a record of our correspondence, and you may ask us to delete a particular message at any time using the contact details in Section 14
Backup Data: Any backup copies are purged within 30 days of deletion request
Cinvo Business Line call records: Automatically and permanently deleted 90 days after each call. This happens on its own, whether or not your account remains active, because these records contain the telephone numbers of members of the public

8. Your Rights and Choices

8.1 General Rights (All Users)

You have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Data Portability: Request a machine-readable copy of your data
Withdraw Consent: Withdraw consent for data processing at any time

8.2 Rights for UK/EU Residents (GDPR)

Under the General Data Protection Regulation (GDPR), UK and EU residents have additional rights:

Right to Object: Object to processing of your personal data for certain purposes
Right to Restriction: Request restriction of processing in certain circumstances
Right to Lodge a Complaint: Lodge a complaint with a supervisory authority (in the UK, this is the Information Commissioner's Office at ico.org.uk)

Legal Basis for Processing: We process your data based on:

Performance of a contract (providing the App services)
Your consent (for optional features and marketing)
Legitimate interests (improving our services and security)
Legal obligations (compliance with laws)

8.3 Rights for California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

Know: Request disclosure of the categories and specific pieces of personal information collected
Delete: Request deletion of personal information
Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
Non-Discrimination: Not be discriminated against for exercising CCPA rights

To exercise these rights, contact us at info@aljaromotors.com.

9. Children's Privacy

Our App is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, contact us immediately at info@aljaromotors.com, and we will take steps to delete such information.

10. International Data Transfers

If you access our App from outside the United Kingdom, be aware that your information may be transferred to, stored, and processed in the UK or other countries where our service providers operate. By using the App, you consent to the transfer of your information to countries that may have different data protection rules than your country.

For transfers from the EU/UK to countries without adequate data protection, we rely on:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions where applicable
Your explicit consent

11. Push Notifications

We may send you push notifications regarding your account, new features, or promotional offers. You can opt out of receiving push notifications at any time by adjusting your device settings.

12. Your Phone's Contacts and Calendar

Cinvo can work alongside the Contacts and Calendar apps already on your phone. It only ever does so with your permission, and only when you ask it to. Everything described in this section happens on your device.

12.1 What Cinvo reads from your contacts

When you save a buyer, Cinvo first checks whether the telephone number you entered already exists in your phone's address book, so that it updates that person's existing entry instead of creating a duplicate.

This check reads telephone numbers only — not names, email addresses, notes, photographs, addresses or any other field. It is performed entirely on your device. Nothing from your address book is stored by Cinvo, transmitted to our servers, or shared with anyone.

12.2 What Cinvo writes to your contacts

When you choose to save a buyer to your phone's contacts, Cinvo writes the following to that person's entry:

The name, telephone number and email address you entered in the App
The date, time and length of each upcoming viewing you have arranged with them
The cars they are coming to see, with registration numbers and the prices you quoted
Any note you typed against the viewing
A link that opens the booking in Cinvo, and a link to the viewing page you can share with that buyer
A picture assembled from the manufacturer badges of those cars

Cinvo replaces only the entries it created itself. Anything you have typed on that contact — a surname, a nickname, a work number, your own labels — is left untouched. Deleting a viewing in the App removes these details again but keeps the person's name, telephone number and email address.

12.3 Calendar

Cinvo can open your phone's own new-event screen with a viewing already filled in, for you to save yourself. Cinvo never reads your existing calendar events.

12.4 Turning this off

You can withdraw contacts or calendar permission at any time in your device settings (iOS: Settings, then Privacy & Security; Android: Settings, then Apps, then Cinvo, then Permissions). The rest of the App continues to work; it simply stops reading or updating anything outside itself.

12.5 Buyers are not our users

People whose details you save in this way are not Cinvo users and have no relationship with us. You decide what to record about them and where it goes. In data protection terms you are the controller of that information, and we are your processor only in respect of what you store inside the App — details written into your own phone's address book sit outside the App entirely and are yours to manage.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated Privacy Policy in the App
Updating the "Last Updated" date at the top of this policy
Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the App after any modifications indicates your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us:

ALJARO MOTORS LIMITED
247 Shirecliffe Road
Sheffield, S5 8XE
United Kingdom

Email: info@aljaromotors.com

We will respond to your inquiry within 30 days.

15. Supervisory Authority

If you are located in the United Kingdom or European Union and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with a supervisory authority:

Information Commissioner's Office (UK)
Website: https://ico.org.uk
Phone: 0303 123 1113

This Privacy Policy is effective as of September 7, 2026.