Privacy

Controller and scope

The operator named above is responsible for processing through CarCrew. This notice describes the marketing website and the webapp at the stated stage of operation. Additional services must be included here before activation.

Data stored

CarCrew stores your username, display name, calendar colour, password hash, optional profile image and the time of your last successful login. It also stores groups and memberships, group codes, hashed joining passwords, vehicle details and images, planned and actual trips, odometer readings, fuel levels, parking locations, notes, refuellings, amounts and receipt images, cost allocations, message board posts and change logs. Calendar subscriptions store a hash of the private token, scope, creation time and revocation. Reminder settings and delivery states are also stored.

How data is used

Data is used for login, group separation, trip organisation, fuel and cost calculations, communication within groups and traceability of changes. Private calendar feeds are provided at your request. The server also processes IP addresses and request information to establish connections. The operator must specify whether and for how long the hosting environment stores access logs before publication.

Who can access data

Current members of your group can see the shared vehicle, booking, fuel, cost, message and history data in that group. Group admins manage members, the joining password and the vehicle. Every group member can correct completed trips; old and new values are recorded with their name, time and reason. The operator and technical service providers may have access as needed for operation, maintenance and backups. Data is not sold for advertising.

Hosting and external services

The operator has stated that hosting is in Switzerland. The hosting provider, any further recipients, backup locations and possible international transfers still need to be specified. Fonts, calendar libraries and the preview are served by CarCrew itself. The app contains no embedded advertising trackers or analytics tools. The reminder delivery adapter is not connected by default. Before connecting a provider, such as WhatsApp, its identity, transmitted data and processing locations must be added here.

Stated hosting location: Schweiz.

Necessary cookies

The app uses a session cookie for login and session protection. Sessions expire after eight hours of inactivity. A language cookie remembers your German or English preference for up to one year. Both cookies serve their respective functions. This version sets no additional marketing or analytics cookies. Your manual choice of light or dark appearance is stored locally in your browser and shared with embedded previews on the same website.

Private calendar links and exports

A private calendar link allows names, the vehicle name and booking times to be retrieved without login. Depending on your choice it contains your own or all group bookings, including past and cancelled entries. A calendar provider receives this data when you subscribe to the link there. You can revoke or replace the link. Revocation does not remove data already stored by the provider. You are responsible for exported CSV files and downloaded receipts after export.

Retention and deletion

The app currently has no automatic deletion period for accounts, groups, completed trips or change logs. The provided backup script does not automatically delete backups either. Specific operational retention periods must be decided and added before public operation. You can request deletion from the operator. Legal obligations and legitimate interests in shared accounting may require some data to be retained. The operator will explain the specific scope and reasons.

Your rights and contact

Subject to applicable data protection law, you may request access to, correction or deletion of your data and object to processing where the requirements are met. Contact the email address above. Reasonable proof of identity may be requested to avoid disclosure to unauthorised persons. You may also contact the Swiss Federal Data Protection and Information Commissioner with questions or complaints. Additional mandatory rights under other applicable data protection laws remain unaffected.

Changes to this notice

This notice is updated when processing, service providers or features change. The date above identifies the version. Material changes should be communicated appropriately.