Privacy policy
Last updated 15 September 2026
What Carivo stores, who can see it, where it lives, and how to get rid of it. Short, because Carivo collects little.
Who is responsible
Carivo is run by Claudiu Florin Olaru, Calle Cristal de Riviera 3, Riviera Village, Mijas, Málaga, Spain. Questions about anything on this page, or about your data, go to carivo.cc.app@gmail.com.
Carivo is in development and is not a company. If that changes, this page changes with it.
What Carivo stores about you
If you never sign in
Nothing. Browsing cars, reading tax notes and looking at the directory need no account, and nothing about you is recorded for it. There is no analytics, no advertising, no tracking and no third-party SDK doing any of those things — not disabled, not present.
If you create an account
Your email address and a password. The password is handled by Firebase Authentication and stored hashed; Carivo never sees it and cannot recover it. Firebase also records the times you signed in and the IP address you signed in from, as part of running the sign-in service.
Carivo also records that you agreed to the terms of service when you created the account: which version of the terms and of this policy you were shown, and when. Only you can read that record, and nobody can change it afterwards — not even you, which is what makes it a record.
If you list a car
| What | Who can see it |
|---|---|
| The listing | Everyone, including people who are not signed in. Make and model, country, where you found it, year, mileage, price, fuel, CO₂, power, engine size, transport cost, comparable price and your description. |
| Photos | Everyone. They are served from a public URL with an unguessable token, and that URL is inside the listing anybody can read. |
| Contact details | Anyone with an account. Stored apart from the listing so that a signed-out visitor cannot read them, but any signed-in person can. That is the classified-ad bargain, and it is not a small one — do not put anything there you would mind a stranger having. |
| Your account id | Attached to each listing so that only you can edit or delete it. |
If you submit a business to the directory
Whatever you type into that form — the business name, address, contact and description — plus your account id, so a submission can be traced and taken down. Entries are checked by a person before they appear. Once approved, the entry is public, and it goes when your account does.
If you report a listing or block a seller
- A report records which listing, the reason, anything you typed, and your account id. Nobody using the app can read reports — not the seller you reported, and not you afterwards.
- A block is a list of account ids kept against your own account and readable only by you. The person you blocked is not told and cannot see it.
What stays on your phone
A listing you have started but not published is saved on the device so an interruption does not cost you the typing — including any contact details you have entered. It never leaves the phone, is not backed up to Carivo, and is deleted when you publish or discard it. Your language choice is stored the same way.
Pasting a link from another site
Worth stating plainly because it is not obvious from the outside. When you paste an advert link and press Prefill, Carivo fetches only the preview tags that page publishes for messaging apps — never the page itself.
- On Android, that request is made by your phone, so the car site sees your IP address exactly as if you had opened the link yourself.
- On the web version, a browser is not allowed to make that request, so Carivo's server makes it instead. The car site sees Carivo's address, not yours. The link you pasted is written to a server log and is not stored anywhere else.
The "Search another site" feature sends nothing anywhere. It builds a search address and hands it to your own browser, which is the same thing as typing the search in yourself.
Who else is involved
- Google (Firebase) — sign-in, database, photo storage, server functions and website hosting. Everything above is stored on Google's infrastructure under Carivo's account. Google acts on Carivo's instructions as a processor.
- Anthropic — writes the drafts on the Carivo blog. No user data is sent there. It is given a topic and returns prose; nothing about you, your account or your listings reaches it.
Nothing is sold, rented, or shared for advertising. There is nobody else.
Where it is kept
In the European Union. The database is in Google's eur3 European multi-region, the server functions run in Belgium, and photos are in an EU multi-region bucket. Google may process some account and log data outside the EU as part of running those services, under its own transfer safeguards.
How long it is kept
- Listings and photos — until you delete them, or until you delete your account.
- Your account — until you delete it.
- The record of what you agreed to — for as long as the account exists, and deleted with it.
- Directory entries — until you delete them or delete your account. Deleting your account removes any business you submitted, along with everything else.
- Blocks — the sellers you have blocked stay hidden until you unblock them, and the list goes when your account does.
- Reports — kept after the listing they concern is gone, so that a pattern of reports about the same seller is still visible.
Deleting everything
In the app: Settings → Account → Delete my account. That removes your account, every car you have listed, the contact details on them and their photos, immediately and permanently. There is no undo and no grace period.
Without the app, or for anything else: carivo.cc/delete-account.
Your rights
Under the GDPR you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, ask for it in a portable form, or object to it being processed. Email carivo.cc.app@gmail.com from the address your account uses — that is the only thing that shows the request is yours — and we reply within 30 days.
If you are not satisfied with the answer, you can complain to the data protection authority in the EU country you live in.
The legal basis is a contract with you for anything needed to run the account and show your listings, and legitimate interest for keeping the listings honest — rate limits, reports and blocks.
Children
Carivo is not intended for anyone under 16 and is not directed at children. If you believe a child has created an account, email us and it will be deleted.
Changes
If this page changes, the date at the top changes with it. Anything that materially changes what happens to data already collected will be said in the app, not only here.