Privacy Policy

1. Introduction

ALJARO MOTORS LIMITED ("Company", "we", "us", or "our"), a company registered in the United Kingdom at 247 Shirecliffe Road, Sheffield, S5 8XE, operates the Cinvo mobile application (the "App").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. It should be read alongside our Terms & Conditions and End User Licence Agreement. If you do not agree with the terms of this Privacy Policy, please do not access the App.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account or use our App, we may collect the following personal information:

Account Information: Name, email address, and password (if using email authentication)
Profile Information: Business name, phone number, and profile picture
Business Data: Customer records, vehicle inventory details, invoice information, expense records, and sales analytics you enter into the App
Payment Information: Subscription and purchase details (processed securely through third-party payment processors)

2.2 Information Collected Automatically

When you use our App, we may automatically collect:

Device Information: Device type, operating system, unique device identifiers
Usage Data: Features accessed, time spent in the App, crash reports and performance data
Authentication Data: Login timestamps and authentication tokens

2.3 Information from Third-Party Services

If you choose to sign in using third-party authentication providers, we receive:

Google Sign-In: Name, email address, and profile picture
Apple Sign-In: Name and email address (which may be a private relay email)
Facebook Login: Name, email address, and profile picture

3. How We Use Your Information

We use the information we collect to:

Provide and maintain the App: Enable core functionality including car inventory management, customer records, invoicing, and analytics
Create and manage your account: Authenticate your identity and maintain your user profile
Process subscriptions: Manage your subscription status and provide premium features
Improve our services: Analyse usage patterns to enhance App features and user experience
Communicate with you: Send service-related announcements, updates, and respond to support inquiries
Ensure security: Detect and prevent fraud, unauthorised access, and other malicious activity
Comply with legal obligations: Meet our legal and regulatory requirements

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using Firebase services provided by Google LLC:

Firebase Authentication: Secure user authentication and identity management
Cloud Firestore: Encrypted database storage for your business data
Firebase Cloud Storage: Secure storage for uploaded files and images

Data is stored on servers located within the European Union and/or the United States, with appropriate safeguards in place for international data transfers.

4.2 Security Measures

We implement industry-standard security measures including:

Encryption in transit (TLS/SSL) and at rest
Secure authentication protocols
Regular security audits and monitoring
Access controls and authentication requirements

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

Our App uses the following third-party services:

Service	Purpose	Privacy Policy
Firebase (Google)	Authentication, database, storage, cloud functions	Google Privacy Policy
RevenueCat	Subscription management and in-app purchases	RevenueCat Privacy Policy
Google Sign-In	Authentication	Google Privacy Policy
Apple Sign-In	Authentication	Apple Privacy Policy
Facebook Login	Authentication	Meta Privacy Policy

These third-party services have their own privacy policies governing the use of your information.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With trusted third-party service providers who assist us in operating our App (as listed in Section 5)
Legal Requirements: When required by law, court order, or governmental authority
Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets
Protection of Rights: To protect our rights, privacy, safety, or property, and that of our users or the public

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Specifically:

Active Accounts: Data is retained while your account remains active
Account Deletion: Upon your request to delete your account, all personal data is permanently and immediately deleted from our systems
Backup Data: Any backup copies are purged within 30 days of deletion request

8. Your Rights and Choices

8.1 General Rights (All Users)

You have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data
Data Portability: Request a machine-readable copy of your data
Withdraw Consent: Withdraw consent for data processing at any time

8.2 Rights for UK/EU Residents (GDPR)

Under the General Data Protection Regulation (GDPR), UK and EU residents have additional rights:

Right to Object: Object to processing of your personal data for certain purposes
Right to Restriction: Request restriction of processing in certain circumstances
Right to Lodge a Complaint: Lodge a complaint with a supervisory authority (in the UK, this is the Information Commissioner's Office at ico.org.uk)

Legal Basis for Processing: We process your data based on:

Performance of a contract (providing the App services)
Your consent (for optional features and marketing)
Legitimate interests (improving our services and security)
Legal obligations (compliance with laws)

8.3 Rights for California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have the right to:

Know: Request disclosure of the categories and specific pieces of personal information collected
Delete: Request deletion of personal information
Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
Non-Discrimination: Not be discriminated against for exercising CCPA rights

To exercise these rights, contact us at info@aljaromotors.com.

9. Children's Privacy

Our App is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@aljaromotors.com, and we will take steps to delete such information.

10. International Data Transfers

If you access our App from outside the United Kingdom, please be aware that your information may be transferred to, stored, and processed in the UK or other countries where our service providers operate. By using the App, you consent to the transfer of your information to countries that may have different data protection rules than your country.

For transfers from the EU/UK to countries without adequate data protection, we rely on:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions where applicable
Your explicit consent

11. Push Notifications

We may send you push notifications regarding your account, new features, or promotional offers. You can opt out of receiving push notifications at any time by adjusting your device settings.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the updated Privacy Policy in the App
Updating the "Last Updated" date at the top of this policy
Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the App after any modifications indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

ALJARO MOTORS LIMITED
247 Shirecliffe Road
Sheffield, S5 8XE
United Kingdom

Email: info@aljaromotors.com

We will respond to your inquiry within 30 days.

14. Supervisory Authority

If you are located in the United Kingdom or European Union and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with a supervisory authority:

Information Commissioner's Office (UK)
Website: https://ico.org.uk
Phone: 0303 123 1113

This Privacy Policy is effective as of June 21, 2026.