Privacy Policy

MotIQ is a vehicle fuel, maintenance and expense manager made by Kurvo, a company based in the Philippines ("Kurvo", "we", "us"). This Privacy Policy explains what personal information MotIQ handles, why, where it's kept, and the choices and rights you have.

We wrote it with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission in mind. It applies together with our Terms of Service.

MotIQ is currently a preview. It works in two parts:

• Your account is a Kurvo account, kept on Kurvo's servers so you can sign in securely, confirm your email, reset your password and, later, use the same account in other Kurvo apps. See Where your data is stored.
• Your garage data (vehicles, fuel logs, expenses, maintenance, receipt photos, notifications, settings, your activity (audit) log and restore points) is saved in your web browser and, if you turn on sync, also in your account on Kurvo's servers, so it's on every device you sign in on and is backed up. MotIQ asks before uploading anything from a browser for the first time.
• Stays on your device: AI assistant questions. All calculations, insights and AI assistant answers are computed in your browser.

If you don't turn on sync, Kurvo doesn't receive your garage data, and it's only as safe as your device: it disappears if your browser data is cleared (see Retention and deletion).

Kurvo's servers hold your account details:

• your first and last name and email address;
• your password, stored only as a secure one-way hash that can't be turned back into your password;
• which versions of these Terms and this Privacy Policy you accepted, and when;
• your MotIQ plan and billing cycle (no payment details: payments aren't connected yet);
• sign-in records kept by our authentication provider for security, such as sign-in times, IP address and browser type.

Depending on how you use it, MotIQ stores the following on your device, and the items marked "synced" also in your account when sync is on:

• A copy of your account details (name, email, plan) and your sign-in session, so MotIQ opens quickly.
• Vehicle details (synced): name or nickname, make, model, year, type, plate number, fuel type, tank size and odometer readings.
• Fuel logs (synced): date and time, liters, pump price, total, discounts and promo names, what you paid and saved, payment method, odometer or trip-meter readings, fuel gauge readings, station name, the weather at the station, photos and notes. Fill-ups whose station you picked on the map, or imported from other apps, also include the station's map position and its OpenStreetMap id (the station's position, not yours).
• Expenses (synced): category (such as parking, tolls or insurance), amount, date, vendor, payment method and notes.
• Maintenance records (synced): services performed, dates, costs, shops and notes, plus registration and insurance due dates.
• Receipt photos (synced): images you take or upload, compressed and saved with the related entry. In your account they're kept as private files that only your account can open; other devices show them through links that expire after an hour.
• Activity log and restore points (synced): the record of sign-ins, changes and exports described in the app's Audit log, and the snapshots taken before risky actions (without photos). The server seals the log again so changes to past entries can be detected.
• Payment methods and fuel wallets (synced): the payment methods you add (names and any discount you set for them), and fuel wallets such as PriceLOCQ: their name, the brand they work at, an optional account owner name you type, and the fuel you bought into them (litres, fuel type, locked price, date and notes). MotIQ never asks for card numbers, account numbers or passwords for these services.
• Preferences (synced, except the theme): settings such as currency, monthly budget, reminder timing, notification choices and which notifications you've read.

MotIQ asks for your device's location only when you tap "Use my location" on the station map (see Location and the station map). It doesn't ask for your contacts, government ID numbers or payment card details. Please avoid putting sensitive personal information, such as health details or ID numbers, in free-text notes or receipt photos. If you enter information about other people, for example a family member who shares a car, please make sure they're comfortable with it.

Your information is used only to provide the features you ask for:

• to create and secure your account, confirm your email, sign you in, reset your password, and keep your records separate from other accounts on the same browser;
• to show your garage, logs and expenses, and calculate fuel efficiency, costs, trends, budgets and forecasts;
• to generate maintenance, registration and insurance reminders;
• to answer your questions through the AI assistant using figures computed from your own data;
• to read receipt photos and suggest values for you to review;
• to let you export, restore and delete your data.

Under the Data Privacy Act, we rely on your consent when you create an account and add information, and on the processing being necessary to provide the service you've chosen to use. We don't use your information for advertising, profiling for marketing, or automated decisions that have legal or similarly significant effects on you.

Account details are stored with Supabase, the database and authentication provider that runs Kurvo's servers on our behalf, in its Singapore data centre (Amazon Web Services, Asia Pacific). This is a transfer of personal information outside the Philippines. Supabase processes it only to provide the service to us, under its data processing terms, and we remain responsible for it under the Data Privacy Act. Account emails (confirmations and password resets) are sent through Supabase.

Garage data is stored in your browser's local storage for the MotIQ site. When you turn on sync, the synced items listed in Information MotIQ handles, including receipt photos as private files, are also stored with Supabase in the same Singapore data centre, where database and storage rules let only your account reach them. Turning sync off stops further uploads; to remove synced data from our servers, use Settings → Delete account or contact us.

Some things to keep in mind:

• Anyone who can use your browser profile may be able to open MotIQ and see the copy of your garage data saved there. Use a screen lock and your own browser profile.
• Your password is checked and stored on the server as a secure one-way hash; MotIQ doesn't keep it on your device. Using a password you don't use anywhere else is still a good idea.
• If your browser or device syncs or backs up site data (for example, a device backup), that copy is handled by your browser or device provider under their own terms.
• Backup files you download from Settings → Your data → Download backup contain all your MotIQ data in readable JSON. Store and share them carefully.

When you scan a receipt, MotIQ uses Tesseract.js, an open-source OCR library, to read the text on your device. Your photo and the text read from it are not sent to Kurvo or to an OCR service.

To work, Tesseract.js downloads its program files and language model from the public jsDelivr CDN the first time it's needed. That request reveals the usual technical details (see Third-party services) but does not include your receipt.

OCR can make mistakes, so please check the suggested values before saving. Saved receipt photos stay in your browser storage with the expense they belong to.

In the preview, the AI assistant's answers are computed in your browser from your own records. Your questions and data are not sent to Kurvo or to a third-party AI provider.

If we later connect the assistant to an online AI service, we'll update this policy first, explain what would be sent and to whom, and give you a choice before it applies to you.

When you log a fill-up, you can pick the station on a map. The map lists fuel stations from OpenStreetMap (see Third-party services).

• Your location is optional. MotIQ asks your browser for it only when you tap Use my location, and your browser asks for your permission first. You can always search or move the map instead. If you've allowed it before, the map may use it right away when it opens; you can turn this off in your browser's site settings.
• It stays on your device. Your position is used only to centre the map and sort stations by distance. It isn't sent to Kurvo, isn't saved, and isn't added to your fill-ups or activity log.
• What's saved is the station you choose: its name, its map position and its OpenStreetMap id. If you drop a pin for a station that isn't listed, that pin's position is saved as the station.
• Weather: when a fill-up has a station position, MotIQ looks up the weather there at the fill-up time from Open-Meteo, sending only the station's position and the date. You can change it or set it yourself.
• Over time, the stations in your fill-ups can show where you usually refuel, so they're protected like the rest of your garage data, and synced only if you turn on sync.

MotIQ's pages load some files from public content delivery networks. When your browser fetches them, the provider can see standard request information such as your IP address, browser and device type (user agent), the time of the request, and usually the page that requested it (referrer). They do not receive your account details or the records and photos stored in MotIQ.

Separately from these CDNs, Supabase hosts Kurvo's servers and receives your account details as described in Where your data is stored.

These providers may operate servers outside the Philippines and handle this request data under their own privacy policies. Before public launch we plan to reduce or remove these external requests where practical.

MotIQ itself doesn't set cookies, and it doesn't use analytics, advertising or tracking tools. It uses your browser's local storage to keep your sign-in session, a copy of your account details, your garage data (and, with sync on, a record of what has been synced) and your preferences (such as your theme) on your device. If you don't tick "Remember me", the session is kept only until you close the browser. The third-party providers above may use their own technologies as described in their policies.

We don't sell, rent or trade your personal information. Your account details, and your garage data when sync is on, are shared only with Supabase, which stores and processes them on our behalf (see Where your data is stored). Otherwise your data only leaves your device when you choose to move it, for example by downloading a backup file and sending it somewhere.

If we're ever legally required to disclose information we hold, we'll only do so as the law requires.

Account details and synced garage data on our servers are protected with encrypted connections, access rules in the database that let each account reach only its own records, and one-way password hashing. Data kept only on your device depends largely on your device and browser for its security. We recommend a screen lock, an up-to-date browser, not using MotIQ on shared or public computers, and a unique password.

No system is perfectly secure, and the preview isn't meant for highly sensitive information. For the information we hold on servers, we use organisational, physical and technical security measures appropriate to the risks, as the Data Privacy Act requires, and we'll handle any personal data breach, including notifying the National Privacy Commission and affected users where required, in line with the law.

Account details and synced garage data are kept while you have an account. Data in your browser stays until you remove it. You're in control:

• Settings → Your data → Start fresh removes all vehicles, fuel logs, expenses and services (from your account too when sync is on), but keeps your account and preferences.
• Settings → Delete account permanently removes your MotIQ account and all its synced data (including receipt photos, activity log and restore points) from our servers, and all its data from this device. Your Kurvo sign-in stays so you can use other Kurvo apps; to delete it as well, email us (see Contact) and we'll erase it.
• Clearing your browser's site data for MotIQ (or all browsing data) removes everything MotIQ stored in that browser, including other accounts on it.

Deletion is immediate and can't be undone, and we can't recover deleted data. Sign-in records kept by our authentication provider for security are deleted on its own schedule. Remember to delete any backup files you've downloaded if you want those gone too.

As a data subject under Republic Act No. 10173, you have the right:

• To be informed whether and how your personal information is processed. That's what this policy is for.
• To access your information. Your garage data is visible in the app, and your account details in Settings. You can also ask us for a copy of what our servers hold.
• To object to processing, or to withdraw consent. You can stop using MotIQ and delete your data at any time.
• To erasure or blocking. Use Start fresh, Delete account, or clear your browser data, or ask us to erase your Kurvo account.
• To rectification. You can edit your profile and any record directly in the app.
• To data portability. Settings → Your data → Download backup exports everything in a structured, commonly used JSON format.
• To damages if you suffer harm from inaccurate, unlawfully obtained or unauthorised use of your personal information, as provided by law.
• To file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your privacy rights have been violated.

During the preview you can exercise most of these rights yourself, instantly, in the app. For anything else, or if you'd like help, email us at kurvo2026@gmail.com. We'd appreciate the chance to address your concern before you go to the Commission, though you're free to contact it at any time.

MotIQ is designed for drivers and vehicle owners and isn't directed at children. If you're under 18, please use MotIQ only with the consent and supervision of a parent or legal guardian. If you're a parent or guardian and think a child has used MotIQ without consent, you can remove the data by deleting the account or clearing the browser's site data on that device, or contact us for help.

Garage sync is now available, as described above. The first time you sign in on a browser that already holds a garage, MotIQ asks whether to upload it; nothing is uploaded unless you choose "Upload and sync", and you can turn sync on later in Settings → Your data. Before we sync anything further, such as AI assistant questions, or share data with any new service, we will:

• update this policy to explain what's collected, where it's stored, who processes it on our behalf, any cross-border transfers, and how long it's kept;
• notify you in the app, and by email where we can reach you, before the change applies; and
• ask for your consent where the law requires it. Moving your existing on-device data to the cloud will be your choice.

We may update this policy as MotIQ evolves. We'll change the "Last updated" date at the top, and for significant changes we'll give you notice in the app, and by email when we have a way to reach you, before they take effect.

Kurvo will designate a Data Protection Officer before MotIQ's public launch. Until then, and afterwards, privacy questions, requests and concerns can be sent to kurvo2026@gmail.com, and they'll reach the person responsible for privacy at Kurvo.