Your fuel data stays on your phone.

01What stays on your iPhone

Everything you put into TankIt is stored in the app's local database on your device, using Apple's SwiftData framework. That includes:

• Receipt photos you scan or import
• Fuel entries (volume, price per litre, total, fuel type, date, station)
• Odometer readings
• Vehicle information you've entered
• Your settings and preferences

Small pieces of data — like the latest cheapest-pump result — are shared between the main app and its widgets through an App Group container (group.com.tankit.app) on your device. This container never leaves your iPhone either.

02What leaves your iPhone

The only outbound network traffic from TankIt goes to two official government fuel-price registries, and only when you open the price finder:

• Austria: the federal energy regulator (api.e-control.at)
• France: the open fuel-price dataset (data.economie.gouv.fr)

We send your approximate GPS coordinate with each request so the registry can return nearby stations. We do not send any user identifier, device identifier, advertising ID, or anything that would identify you. Coordinates are quantised to a roughly one-kilometre grid for caching and to reduce request volume.

We do not operate any servers of our own. There is no TankIt backend, no analytics endpoint, no telemetry collector. Your iPhone talks directly to the two public government APIs above, and nothing else.

03Permissions

The app asks for two iOS permissions, both optional:

• Camera — to scan fuel receipts. Usage string: "Tank It uses the camera to scan fuel receipts." You can still use the app without granting camera access, by entering fills manually or importing a photo via the share extension.
• Location (when in use) — to find nearby fuel stations. Usage string: "Tank It uses your location to find nearby fuel stations." Without location access the price finder won't work, but every other feature does.

Both permissions can be revoked at any time in iOS Settings → Privacy & Security.

04Apple Privacy Manifest

TankIt ships a Privacy Manifest (PrivacyInfo.xcprivacy) declaring exactly which Apple "required-reason" APIs the app touches. All of them are standard iOS plumbing, not data collection:

• User Defaults (reason CA92.1) — storing app settings on your device.
• File timestamps (reason C617.1) — reading the dates of files you provide.
• Disk space (reason E174.1) — checking that there's room to save a receipt photo.
• System boot time (reason 35F9.1) — calculating local elapsed time inside the app.

The manifest declares NSPrivacyTracking as false, with no tracking domains and no collected data types.

05No tracking, no ads

TankIt has no analytics SDK, no crash reporter that phones home, no advertising identifier, no third-party trackers of any kind. We do not use cookies because there is no website session, no account, and no server to log in to.

We don't show ads. We never sell or share your data, because we don't have it.

06Children

TankIt isn't directed at children under 13. It doesn't knowingly collect any information from anyone, so it doesn't knowingly collect information from children either.

07Export & deletion

Your data is portable. From the Settings screen inside the app you can export:

• A CSV file with every fill-up.
• A ZIP archive bundling every receipt photo plus the CSV.

To delete everything: delete the app from your iPhone. iOS removes the app's local database, the App Group container, and all associated files. There is nothing on any server to delete, because there is no server.

08Changes to this policy

If we ever change how the app handles data, we'll update this page and bump the effective date below. Material changes will also be flagged in the app's release notes.

09Contact

Questions about this policy, or anything else about TankIt? Email tankit@tankit.app.

TankIt is built by an independent solo developer; responses are best-effort.