Privacy policy

Version 1 · in effect since October 14, 2026

This is version 1 of this text and it may be revised; important changes will be announced by email in advance.

1. Who looks after your data

mybyd (the mybyd team). For any request about your data, write to support@mybyd.app.

2. What we collect

• Account: email, password (stored only as a hash), language, country inferred from the browser's language, time zone and the preferences you choose.
• BYD account: BYD email or phone number and password, stored encrypted, used only to read the car's data.
• Car data, read from BYD: vehicle identification (model, VIN and plate, if BYD sends them), battery, range, mileage, location (GPS), tyre pressure, doors, windows, temperature and charging status, in periodic readings. From these we calculate trips, charging sessions, costs and the places you go to, and we keep the names you give them.
• Alerts: the channels you turn on (the Telegram chat, the browser notification subscription, email).
• Payment: Stripe processes the card; we neither see nor store the card number, only the customer and subscription identifiers and the payment status.
• App usage: which screens and buttons are used and errors, through PostHog (servers in the European Union), linked to an account identifier, never to your email, VIN or location; when it is on, session recording masks all text and fields. You can turn it off under Account → App usage. On the landing page, measurement is anonymous, uses no cookies and does not happen if the browser asks not to be tracked (Do Not Track or Global Privacy Control).
• Waitlist: the email, the language and where you came from (for example, the website that brought you).
• Server technical logs (IP address, date, page requested), for security and to limit abuse.

3. What we use it for

To provide the service (show and calculate your car's history and send the alerts you asked for), charge the subscription, keep the service secure, notify you about your account and subscription, invite people on the waitlist and understand what to improve in the app.

We do not sell your data, we do not use it for advertising and we do not send marketing.

4. Who we share it with

Only with providers the service needs, and only what is needed:

• BYD: receives your login when we read the car's data (that is where the data comes from).
• Stripe: payments.
• PostHog: usage analytics (European Union).
• Cloudflare: hosting of the landing page and the network that carries traffic to the server.
• The email delivery provider, for account emails and alerts.
• Telegram and your browser's notification service (Google, Apple, Mozilla or Microsoft), only if you turn those alerts on.
• OpenStreetMap (Nominatim): coordinates of places, to show the street or neighbourhood name.
• The maps on screen are loaded by your browser from OpenStreetMap and, in satellite mode, from Esri, which receive the request for the areas shown.

We may also hand over data when the law requires it.

5. Where it is kept

On the mybyd server and with the providers above, which may be in countries other than yours. We use providers that protect data in line with the applicable data protection laws.

6. How long we keep it

• While the account exists, we keep the car's history to show it to you.
• If access ends (trial over without a subscription, or subscription ended), data collection stops right away and, 7 days later, we delete the car's data: vehicles, readings, trips, charging sessions, places and the BYD password. The account (email and preferences) stays until you delete it, so you can subscribe again.
• Deleting the account (Account → Delete account) immediately deletes the account and everything linked to it. Payment records stay with Stripe for as long as tax law requires.
• The waitlist entry stays until you create an account or ask to be removed.
• Server technical logs are kept for a short time and then discarded.

7. Your rights

You can ask for access to, correction, a copy or deletion of your data, or object to a use, by writing to support@mybyd.app; we reply within 30 days. You can do most of it yourself in the app (preferences, turning measurement off, deleting the account).

You can also complain to the data protection authority of your country (for example, the ANPD in Brazil or your country's authority in the European Union).

8. Security

Always-encrypted connection (HTTPS), hashed mybyd password, encrypted BYD password, and each account can only access its own data.

9. Cookies and browser storage

The app uses a session cookie (to keep you signed in) and a language cookie; app usage measurement stores an identifier in the browser when it is on. The landing page stores the language you chose and a random visitor identifier, used only to count visits and to link a visit to the account created from it (PostHog).

10. Minors

The service is not for people under 18.

11. Changes

This policy may change; important changes are announced by email before they take effect. The version and date are at the top.