GoTank Privacy Policy
Last updated: 14 October 2026 · GoTank · Terms of use and disclaimer · Delete your account
GoTank ("the app", "we", "us") is an app for Android phones and Android Automotive cars that shows nearby fuel stations and their prices. This policy explains what personal data the app handles, why, for how long, and your rights. It applies wherever you use GoTank. We collect only what the app needs to work.
Who is responsible
The controller for your personal data is Forkly, the developer of GoTank. Contact: privacy@forkly.co. We are not required to appoint a data protection officer. Write to the address above about anything in this policy.
Summary
- Your fill-up log, car, home location and settings stay on your device.
- The server receives the map area you are looking at, only to answer that request. We don't store it.
- An account holds just your email address and your favourite stations and brands.
- No advertising, no analytics, no tracking, and we never sell or share your data.
- You can download or delete your account data in the app at any time.
Data stored only on your device
The following stays on your phone or car and is never sent to us:
- Your fill-up log (dates, litres, prices, odometer readings)
- Your car setup (fuel type, tank size and similar preferences)
- Your home location and recently searched places
- App settings such as language and preferred map app
We have no access to this data. It is removed when you clear the app's storage or uninstall the app.
What we process, why, and for how long
| Purpose | Data | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Showing stations and prices near you | Coordinates of the map area, the fuel type, and the country | Contract, Art. 6(1)(b) | Not stored. Used only to answer the request |
| Your account and sign-in | Email address, account ID, sign-up and last sign-in time | Contract, Art. 6(1)(b) | Until you delete your account |
| Syncing favourites between phone and car | Favourite stations (name, brand, address, coordinates) and favourite brands | Contract, Art. 6(1)(b) | Until you remove them or delete your account |
| Sending sign-in codes | Email address, language | Contract, Art. 6(1)(b) | Delivery logs at our email provider for up to 30 days |
| Sign-in security and investigating abuse | Sign-in events with IP address and email | Legitimate interest in a secure service, Art. 6(1)(f) | 30 days, or until you delete your account if that comes first |
| Protecting the service from overload and abuse | IP address (rate limiting) | Legitimate interest, Art. 6(1)(f) | A few minutes |
| Answering your requests | What you send us by email | Legitimate interest, Art. 6(1)(f); legal obligation, Art. 6(1)(c) | As long as needed to handle your request, then up to 3 years as a record |
You need an account to use the phone app, because we need your email address to sign you in. The car app can be used without one. We make no automated decisions that have legal or similarly significant effects on you, and we do no profiling.
Location
With your permission, the app uses your device's precise or approximate location to find fuel stations near you. It sends our server only the coordinates of the area you are looking at, and the server returns the stations and prices for that area. We don't store these coordinates, build a location history or link them to your account.
You can deny or withdraw location permission at any time in Android settings, and search for a place by name instead. Place-name search uses your device's built-in Android geocoder, which Google provides.
Google Maps SDK
The phone app shows its map using the Google Maps SDK for Android. Google collects the following data through this SDK and processes it under Google's privacy policy, not ours:
- Device and request metadata: Android version, device name, model, brand and form factor; SDK version; number of results returned; and an internal usage attribution identifier
- Crash logs and diagnostics from crashes inside the SDK
- IP address
- A pseudonymous Maps SDK identifier, used to count daily active users
- Map interactions such as panning and zooming
Google says it uses this data to maintain and improve its services and the SDK's stability, and that the attribution identifier is not used to identify you or for advertising. See Google's Maps SDK data disclosure. The car app does not use the Google Maps SDK. When you tap Navigate, the map app you choose opens. That app's own privacy policy then applies.
Service providers and recipients
These providers process data only on our behalf, under data processing agreements (Art. 28 GDPR):
- Supabase Inc. (USA): database, sign-in and server functions
- Cloudflare Inc. (USA): network protection, rate limiting and request routing
- Resend (Plus Five Five Inc., USA): delivery of sign-in code emails
- Google LLC / Google Ireland Ltd.: map display in the phone app (see above)
Fuel prices come from public government price services, for example in Germany, France, Spain, Italy, Austria, Portugal, Croatia and Slovenia. Our server fetches the prices. Your app never contacts these services, and we never send them any of your personal data.
We never sell your personal data, never share it for advertising, and never disclose it to anyone else unless the law requires us to.
International transfers
Some providers above are based in the United States or use servers outside the European Economic Area, the UK or Switzerland. Where personal data leaves those regions, we rely on the EU–US Data Privacy Framework (and its UK and Swiss extensions) for certified providers, or on the European Commission's Standard Contractual Clauses (with the UK Addendum and the Swiss amendments where needed). You can ask us for a copy of the relevant safeguards.
Your rights
Under the EU and UK General Data Protection Regulation (GDPR), you have the right to:
- Access your data and get a copy (Art. 15). In the app: Settings → Account → Download my data.
- Data portability, in a machine-readable format (Art. 20). The download above is JSON.
- Rectification of inaccurate data (Art. 16). You can edit your favourites in the app. Write to us to change your email address.
- Erasure (Art. 17). In the app: Settings → Account → Delete account. This immediately and permanently deletes your email address, your favourites and your sign-in log entries from our servers.
- Restriction of processing (Art. 18).
- Object to processing based on legitimate interest (Art. 21).
- Withdraw consent at any time, for example location permission in Android settings. Withdrawing doesn't affect what was done before.
- Complain to a data protection supervisory authority, especially in the country where you live or work (Art. 77).
To use any right not built into the app, email us. We answer within one month, and it is free of charge. We may ask you to confirm your request from the email address on your account.
Information for your country
European Union and EEA
The GDPR applies. Your local supervisory authority is listed by the European Data Protection Board. For the countries GoTank covers:
- Germany: the data protection authority of your federal state, or the BfDI
- Austria: Datenschutzbehörde (DSB)
- France: CNIL
- Spain: Agencia Española de Protección de Datos (AEPD)
- Italy: Garante per la protezione dei dati personali
- Portugal: Comissão Nacional de Proteção de Dados (CNPD)
- Croatia: Agencija za zaštitu osobnih podataka (AZOP)
- Slovenia: Informacijski pooblaščenec (IP RS)
The app stores and reads data on your device only to provide the service you ask for, as allowed by the ePrivacy rules (for example § 25(2) TDDDG in Germany). It sets no cookies and uses no tracking technologies.
United Kingdom
The UK GDPR and the Data Protection Act 2018 apply, and you have the rights listed above. You can complain to the Information Commissioner's Office (ICO).
Switzerland
The Federal Act on Data Protection (FADP) applies, and you have equivalent rights. You can complain to the Federal Data Protection and Information Commissioner (FDPIC).
United States
Residents of California and other states with privacy laws (for example Colorado, Connecticut, Virginia and Texas) have the right to know, access, correct and delete their personal information, and the right not to be discriminated against for using these rights. In the last 12 months we have collected identifiers (email address, IP address) and approximate geolocation (the map area you view), for the purposes and retention periods described above. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics. So there is nothing to opt out of. Send requests to the email above. An authorised agent can also make a request for you.
Brazil, Canada and elsewhere
If you live in Brazil (LGPD), Canada (PIPEDA), or a country with similar laws, you have comparable rights to access, correct and delete your data. Write to us and we will honour them. In Brazil you can also complain to the ANPD.
Security
All communication between the app and our servers is encrypted with HTTPS. Each user can read and change only their own favourites, and this is enforced in the database. Sign-in uses one-time codes, so there are no passwords to leak. The sign-in session on your device is kept in app-private storage. If a breach is likely to put your rights at risk, we will tell the supervisory authority within 72 hours and tell you without undue delay.
Children
GoTank is meant for drivers and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update this page and the date at the top. If a change is significant, we will also tell you in the app before it takes effect.
Contact
For questions about this policy or your data, email privacy@forkly.co.