Privacy Policy
Last updated: June 2026
Overview
Unbroken Car ("Unbroken Car", "we", "us", or "our") helps drivers and families track and plan vehicle maintenance. This Privacy Policy explains what personal data we collect, why we collect it, the legal bases we rely on, how we share it with our service providers, how long we keep it, where it is stored, and the rights you have over it. We follow data-protection best practice under the EU General Data Protection Regulation (GDPR) for users in the European Economic Area, and we are mindful of the Israeli Protection of Privacy Law, 5741-1981 and its regulations, as our service is primarily aimed at the Israeli market. We aim to collect only the data we genuinely need to run the service, and this policy applies to our website at unbrokencar.com and the Unbroken Car application. Please read it together with our Terms of Service and our Cookie Policy.
Who we are (data controller)
The service is operated under the name Unbroken Car. The data controller responsible for your personal data is EZ Dev, whose registered address is Israel. For any privacy matter, including requests to exercise your rights, you can reach us at privacy@unbrokencar.com. Our Data Protection Officer or privacy contact, where one has been appointed, can be reached at the same address: privacy@unbrokencar.com or via our contact form at unbrokencar.com/contact. If you contact us about a privacy matter, we may need to verify your identity before responding in order to protect your data.
Data we collect
We collect the following categories of personal data. Account and sign-in data: your phone number (used for one-time-password sign-in), and, where you choose to use Google or Apple sign-in, the identifiers provided through that sign-in provider; an email address (collected for our newsletter, access approval, and operational messages). Profile and account data: your display name, language preference, subscription plan or tier, and notification settings. Car and maintenance data that you enter: vehicle license plate, make, model, year and fuel type, mileage readings, service and maintenance logs, uploaded receipt images and the data we extract from them, and your car-group memberships and invitations (including the phone numbers or email addresses of people you invite). Vehicle reference data: details such as plate-lookup results and recall information that we obtain from the Israeli public vehicle registry. Technical data: device, usage, and log data needed to operate, troubleshoot, and secure the service. We do not intentionally collect special categories of data, and we ask that you do not submit them.
How we use your data
We use your data to create and manage your account and sign you in; to provide the core service, including recording your vehicles, mileage and service logs, generating maintenance schedules, reminders and AI-assisted recommendations, and extracting data from the receipts you upload; to enable car groups so you can share vehicles with members you invite and to send and manage invitations; to look up vehicle reference data and recall information from the public registry; to send the operational and administrative messages required to run the service (sign-in links, access approvals, security and account notices) and, where you have opted in, our newsletter and the notifications you enabled; to keep the service secure, prevent fraud and abuse, and enforce our terms; to understand and improve how the service is used; and to comply with our legal obligations. We do not sell your personal data, and we do not use your data for solely-automated decisions that produce legal or similarly significant effects.
Legal bases for processing (GDPR)
Where the GDPR applies, we process your personal data on the following legal bases under Article 6. Performance of a contract: we process your account, profile, vehicle and maintenance data to provide the service you have signed up for, including reminders, schedules, car groups and subscription management. Consent: we rely on your consent for optional activities such as sending you our marketing newsletter, enabling optional push or other notifications, and non-essential analytics cookies; you can withdraw consent at any time without affecting processing already carried out. Legitimate interests: we rely on our legitimate interests to keep the service secure, prevent abuse and fraud, debug and maintain the service, and improve it, balanced against your rights and freedoms. Legal obligation: we process certain data to comply with applicable law, including tax, accounting, and record-keeping requirements and responses to lawful requests. Where we rely on legitimate interests, you may object as described in the rights section below.
How we share data
We do not sell your personal data. We share it only with service providers who help us run the service, under contracts that require them to protect it and use it only on our instructions, and with members of any car group you join (who can see the shared vehicle data) and people you invite. The categories of providers we rely on are: cloud hosting and storage providers; an authentication provider for sign-in; the mobile app stores and a payment provider for subscription billing (these providers process your payment data, and we do not store full payment-card details); an email delivery provider for transactional and newsletter email; an analytics provider, subject to your cookie choices; and an AI provider that powers maintenance recommendations and receipt-data extraction. We also obtain vehicle reference and recall data from the Israeli public vehicle registry. We can provide details of the specific providers we use on request. We may also disclose data where required by law, to protect our rights, users or the public, or in connection with a corporate transaction such as a merger or acquisition, in which case we will keep you informed as required.
International data transfers
Your personal data is primarily stored on servers located in the European Union. Some of our providers, such as those providing analytics, AI processing, billing, or email delivery, may process personal data outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, we rely on appropriate safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision, to ensure your data remains protected. You can contact us at privacy@unbrokencar.com for more information about the safeguards we use.
Data retention
We keep your account and personal data for as long as your account is active and as needed to provide the service. You can delete your account at any time from within the app; deletion is subject to a short grace or cancellation window during which you can change your mind, after which we remove your personal data. We may retain limited data for longer where we are required to do so to meet legal, tax, accounting, or regulatory obligations, to resolve disputes, or to enforce our agreements, and we retain it only for as long as necessary for those purposes. Backups containing your data are purged on a rolling schedule. Aggregated or de-identified data that can no longer be linked to you may be retained for analytics and service improvement.
Cookies and analytics
We use cookies and similar technologies to operate the website and to understand how it is used. Essential cookies are necessary for the site to function — for example, to keep you signed in and to remember your preferences — and do not require consent. Analytics cookies help us measure and improve the service and are used only where you have consented, where consent is required. You can manage your preferences and learn more on our Cookie Policy page at /cookies, and you can change or withdraw your cookie consent at any time. Your browser settings also let you block or delete cookies, though some features may not work properly without essential cookies.
Security
We take the security of your data seriously and apply technical and organisational measures designed to protect it, including encryption of data in transit and at rest, access controls that limit who can access personal data, and monitoring. No method of transmission or storage is completely secure, so while we work hard to protect your data we cannot guarantee absolute security; if we become aware of a personal data breach that is likely to affect you, we will notify you and the relevant authorities as required by law.
Your rights
Subject to applicable law, you have the right to access the personal data we hold about you, to rectify inaccurate data, to request erasure of your data, to restrict or object to certain processing, to data portability, and to withdraw any consent you have given (without affecting processing already carried out). You can exercise many of these rights directly in the app — for example, you can review and edit your profile and vehicle data and delete your account from your settings — or you can contact us at privacy@unbrokencar.com. We will respond within the timeframes required by law. If you are in the EEA, you have the right to lodge a complaint with your local data-protection supervisory authority; if you are in Israel, you may contact the Israeli Privacy Protection Authority (PPA). We would, however, appreciate the chance to address your concerns directly before you do so.
Automated processing
We use automated processing, including AI, to generate maintenance schedules, intervals, reminders, and recommendations and to extract data from the receipts you upload. These outputs are guidance only — they are intended to help you plan and are not decisions that produce legal effects or similarly significantly affect you. We do not make solely-automated decisions about you in that sense, and you should always follow your manufacturer's official guidance and consult a qualified professional. You can read more about the limits of this guidance in our Terms of Service.
Children
Unbroken Car is intended for adults and vehicle owners and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@unbrokencar.com and we will take steps to delete it.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our service, technology, or legal requirements. When we do, we will update the "last updated" date at the top of this page, and where the changes are material we will provide a more prominent notice, such as by email or in the app, where appropriate. We encourage you to review this policy periodically. Your continued use of the service after an update takes effect means you have read the updated policy.
Contact
If you have any questions, requests, or concerns about this policy or how we handle your data, please contact us at privacy@unbrokencar.com. The data controller is EZ Dev, at Israel. If you are not satisfied with our response, you have the right to contact your data-protection supervisory authority in the EEA, or the Israeli Privacy Protection Authority if you are in Israel.