Last updated: November 9, 2026
This Privacy Policy describes how Ticatoo collects, uses, and discloses your information when you use the Service, and explains your privacy rights and how the law protects you.
We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Words with an initial capital letter have meanings defined below. The definitions apply equally in singular and plural forms.
For the purposes of this Privacy Policy:
The Data Controller responsible for your personal data is:
Ticatoo (AutoDr Oy, FI25098921)
Ruustinnankuja 7 B, 05400 Jokela, Finland
Email: info@ticatoo.com
The Company has not designated a Data Protection Officer (DPO), as it is not required to do so under applicable law. For any privacy-related inquiries, please contact us at the email address above.
The Application does not require registration. When you first launch the Application, it automatically assigns you a unique anonymous device identifier stored securely on your device, and an anonymous user identifier from Firebase Authentication. Although these identifiers do not directly identify you by name, they may be considered personal data under the GDPR.
The Application does not ask for your name, email address or phone number to use its services. We ask for personal details only where they are needed, for that purpose: for example, an email address when you want a reply to a support request (see "Support Requests").
Earlier versions of the Application offered an optional profile with a display name, email address and phone number. Current versions no longer ask for these, and details entered in earlier versions will be deleted once those versions are no longer in use.
Usage Data is collected automatically when you use the Service. It may include information such as your device's IP address, mobile device type, unique device identifiers, mobile operating system, and diagnostic data such as crash reports and performance diagnostics.
In order to provide certain features, the Application may collect the following, with your prior permission:
You can enable or disable access to this information at any time through your Device settings.
Payment card details are handled directly by Adyen N.V., our payment processor. We do not store full card numbers. When you choose to save a payment method, the card is tokenized by Adyen and we store only the payment token, card type, last four digits, and expiry date to display your saved cards in the Application.
The Service also supports Apple Pay and Google Pay. When these methods are used, payment credentials are handled entirely by Apple or Google respectively and are never shared with us or Adyen in unencrypted form. Only the resulting payment token is passed to Adyen for processing.
You may choose to sign in with your Apple ID or Google account. Signing in is optional, and the Application works fully without it. Its purpose is to keep your receipts, documents and saved payment cards available to you when you change or reinstall your phone, or use the Application on more than one phone.
When you sign in, we receive from Apple or Google an account identifier and the email address of your account. If you use Apple's "Hide My Email" option, we receive only a relay address created by Apple. We do not receive your password. This information is stored in Firebase Authentication and is used solely to identify your account. It is not used for marketing.
If you stop using Sign in with Apple for the Application, or delete your Apple Account, Apple notifies us. We then remove the Apple sign-in from your account, and if it was your only way to sign in, we delete your account as described under "Delete Your Personal Data".
Your purchase and service history is stored in association with your anonymous user identifier and device identifier, and with your account if you have signed in. This data is used to support order tracking, customer service, and dispute resolution.
When you use car diagnostics services, the Application processes vehicle information such as the VIN (Vehicle Identification Number), car brand, model, and year, the registration number if you identified the car by it, as well as diagnostic fault codes retrieved from the vehicle. This data is stored as a diagnostics report linked to your session and anonymous device identifier. It is used solely to generate and deliver the diagnostics report and is not used for any other purpose.
You may share a diagnostics report with a third party (such as a mechanic) by entering their email address or phone number within the Application. That contact information is used solely to deliver the report and is not retained or used for any other purpose.
When you use the vehicle check, the Application reads from the car's control units the vehicle identification number (VIN), the odometer readings they store, and their part and serial numbers, and compares them to find signs that the odometer reading or the VIN has been altered. You may also enter the reading shown on the dashboard odometer. Entering it is optional; the report states whether you entered it, skipped it, or did not enter it, and always shows the values read from the vehicle separately from the value you entered. The report also shows the car's brand, model and year, and the registration number if you identified the car by it.
The readings and the result of the comparison are stored as a vehicle check report linked to your session and, if you are signed in, to your account. They are handled like diagnostics reports: you can open and share the report, and it is removed from the Application when you delete your account. They are used only to produce and deliver the report.
When you use the battery test, the Application reads from the car's control units the state of health of its high-voltage battery — how much of its original capacity the battery still holds — together with the VIN, if the car reports it. The report also shows the car's brand, model and year as you selected them, and the registration number if you identified the car by it (see Vehicle Registration Lookup).
The result is stored as a battery test report linked to your session and, if you are signed in, to your account. It is handled like diagnostics reports: you can open and share the report, and it is removed from the Application when you delete your account. It is used only to produce and deliver the report.
For car diagnostics, you can enter your vehicle's registration number so that the Application can identify the car for you. Our server sends the registration number to our vehicle data provider, Biluppgifter Sverige AB (Sweden), which returns the vehicle's technical details from the official vehicle register (such as make, model, model year, engine and VIN). Only the registration number is sent — nothing about you, your account or your device — and no owner information is requested or received.
If you confirm the vehicle that was found, the registration number is shown on that service's report — the diagnostics report, the vehicle check report or the battery test report — so that the car can be identified from the report, for example when you pass it on to a workshop or a buyer. It is kept only with that report: it is shown on it, stored with it in our systems, and erased with it within 30 days after you delete the report or your account (see Retention of Your Personal Data). It is not used for anything else, and if you choose the vehicle manually, no registration number is recorded. Keep in mind that a report you share carries the registration number and the VIN to whoever you share it with.
Otherwise we do not store the registration number. The vehicle details are kept with your diagnostics session, and for up to 7 days a copy is kept for your own repeat lookups of the same car — never shown to anyone else — under a cryptographic key derived from your account and the registration number, so that looking the car up again needs no new request; the VIN in that copy is encrypted and can only be read with the registration number. Entering the registration number is optional: you can always choose your vehicle manually instead.
After completing a service, you may be presented with a voluntary satisfaction survey consisting of a star rating and an optional comment. Responses are stored in association with your anonymous device identifier and the relevant service. This data is used to evaluate and improve service quality. You can disable this feature in the Application's Settings.
When you send a support message from the Application, the message content and any reply email address you provide are stored in our support system, together with technical context (such as app version, platform, and the screen you were on) to help us resolve your request. Support requests are retained for up to 12 months and then automatically deleted. Our support inbox receives only a non-identifying notification that a request has arrived; the message content and your contact details remain within our controlled system.
The Company uses personal data for the following purposes:
We may share your personal data in the following situations:
If you have provided your email address or phone number and do not wish to receive marketing communications, you may opt out at any time by contacting us at info@ticatoo.com or by following the unsubscribe link included in any marketing email. We will process your opt-out request promptly.
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. The following retention periods apply:
We may retain certain data beyond these periods where required by law or to resolve disputes and enforce agreements.
The Service uses Firebase, a platform provided by Google LLC, which processes data on servers located in the United States and other countries outside the European Economic Area (EEA). These transfers are protected by the EU Standard Contractual Clauses (SCCs) adopted by the European Commission, which provide an adequate level of data protection for transfers to third countries. For more information, see firebase.google.com/support/privacy.
Payment data processed by Adyen N.V. may also be transferred outside the EEA. Adyen is certified under applicable data protection standards and protects such transfers with appropriate safeguards. See adyen.com/policies-and-disclaimer/privacy-policy.
We take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy.
If you have signed in, you can delete your account in the Application: open your profile, and under Account choose "Delete account". You can also request deletion without the Application at ticatoo.com/data. When your account is deleted:
An account cannot be deleted while one of its services is still running. You can delete it once the service has finished.
Profile details you entered in earlier versions (display name, email address, phone number) belong to the device on which you entered them, not to your account. You can request their deletion at ticatoo.com/data.
For any other deletion request, contact us at info@ticatoo.com. We will process your request within 30 days of receipt in accordance with the GDPR. Please note that we may retain certain data where required by law, such as financial records required under accounting legislation.
If the Company is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.
Under certain circumstances, the Company may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
The Company may disclose your personal data in good faith belief that such action is necessary to:
The security of your personal data is important to us. We strive to use commercially acceptable means to protect your personal data, including secure storage and encrypted communication. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
The Application does not use browser cookies, as it is a native mobile application. However, the Application uses Firebase services that collect certain usage and diagnostic data automatically. This data is used solely for crash reporting, service stability monitoring, and application configuration — not for behavioural advertising. No advertising identifiers are shared with third parties for marketing purposes.
For details on how Firebase processes this data, see the Firebase Privacy and Security information at firebase.google.com/support/privacy.
Payments in the Service are processed by Adyen N.V. We do not store or collect your full payment card details. Card data is transmitted directly to Adyen, which adheres to PCI-DSS standards. When a payment method is saved, only a payment token and basic card information (card type, last four digits, expiry date) are stored by the Application.
The Service supports Apple Pay and Google Pay. When these methods are used, payment credentials are handled entirely by Apple or Google respectively and are never shared with us or Adyen in unencrypted form. Only the resulting payment token is passed to Adyen for processing.
Adyen's Privacy Policy: adyen.com/policies-and-disclaimer/privacy-policy
The Application uses Firebase, provided by Google LLC. The following Firebase services are used:
Data processed by Firebase is subject to Google's Privacy Policy. For more information, visit firebase.google.com/support/privacy.
We process personal data under the following legal bases, tied to specific purposes:
If you are located in the European Economic Area, you have the following rights:
To exercise any of these rights, please contact us at info@ticatoo.com. We will respond within 30 days. We may ask you to verify your identity before responding.
You have the right to lodge a complaint with the Finnish data protection supervisory authority:
Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman)
tietosuoja.fi
EU residents may also contact their local data protection authority in their country of residence.
The Service is intended for adults. We do not knowingly collect personal data from children under the age required by applicable law (generally between 13 and 16 in the EEA). If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us at info@ticatoo.com and we will take steps to remove that information. Where the law requires parental consent for the processing of a child's data, we will require such consent before collecting or using that information.
The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content or privacy practices of any third-party sites. We strongly advise you to review the privacy policy of every site you visit.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy within the Application or through another prominent notice, and by updating the "Last updated" date at the top of this document. We will provide at least 30 days' notice before material changes take effect. Continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.
If you have any questions about this Privacy Policy, you can contact us: