Privacy Policy

What the app stores, and where

Vehicles, odometer readings, fuel fills, services, expenses, reminders, documents and the photos or PDFs you attach are saved in the app’s private storage on your device. They are not sent to us or to anyone else, unless you share that car (see Sharing a car with family).

The app also keeps, on your device only, a copy of its database taken before an update changes its format (the three newest), so an update can never cost you your records, and a short log of recent errors, used only for the diagnostics report described below.

What we collect

Unless you share a car, send us a diagnostics report or feedback, or buy Kratos XT Pro, nothing. We receive no usage data, location, motion data or advertising identifiers, and the app contains no analytics or advertising code. Questions you ask the AI mechanic go to Google, not to us (see The AI mechanic). The only things that leave your phone without you asking are receipt photos you chose to have read in the cloud and, on Android, the technical information ML Kit sends Google, both described under Reading receipts, the start and end of a trip you track, sent to your phone’s own address lookup to name them, and the area around you when the app looks up nearby fuel stations (see Trips and location).

Feedback

Now and then, and from Settings → About → Send feedback, the app asks how likely you are to recommend Kratos XT, from 0 to 10, with room for a comment. Nothing is sent unless you tap Send: then your score, your comment and the app version, system version and language go to our service (Amazon Web Services, United States). It holds no records, account or identifier, so we cannot tell who sent it. We use feedback only to improve Kratos XT and delete it within a year.

Updates

To tell you when a newer version is out, the app asks the App Store (Apple’s public lookup service) or Google Play for Kratos XT’s latest version. The request names the app, not you.

Diagnostics reports

Settings → About → Send diagnostics writes a plain-text report and shows it to you first: the app, system and database versions, your phone’s language and recent error messages. It holds no records, photos, documents, account or identifier. It reaches us only if you tap Send to Kratos XT, which stores it with our service (Amazon Web Services, United States) and gives you a reference to quote when you write to us; or you can share it yourself another way, for example by email. We use reports only to fix problems, and delete them once dealt with, within a year at the latest.

Sharing a car with family

From version 1.3 you can share a car so family members see it and log to it on their own phones. This is the only part of Kratos XT that uses an account, and only if you use it.

• Your account. You sign in with Apple or Google through Google Firebase Authentication. We receive your name and email address (with Apple you can hide your email), and use them only to sign you in and to show the people on a car who is on it and who logged each record.
• A shared car’s records (its details, fills and charges, services, costs, reminders, documents, odometer readings, measurements, trips without their routes, income and inspections) are kept in Google Cloud Firestore, in Johannesburg, South Africa, so every phone on the car stays in step. Each record notes whose account logged it. Only the car’s members can read them; the owner decides who is on it and whether they can log or only view.
• Photos and PDFs attached to a shared car’s records are kept in Amazon S3 (United States), encrypted, and reached only through short-lived links our service gives the car’s members.
• Invitations are an eight-character code valid for a week, sent however you choose.
• Cars you don’t share never leave your phone. We don’t sell, rent or use any of this for advertising.

When the owner stops sharing a car, its records and files are deleted from the cloud; members keep the copy on their own phones. When a member leaves, or is removed, their phone keeps its copy and stops receiving updates.

Your cars on your other devices and the web

From version 1.7, with Kratos XT Pro, you can turn on Settings → My devices. Each of your cars is then kept in your account exactly as a shared car is (above): in Google Cloud Firestore, readable only by you and anyone you share that car with, so your other phones and tablets, and Kratos XT on the web, show the same records. Signing in to the web page uses your Google account through Firebase Authentication. Turn it off, or delete your account, and nothing new goes up; deleting the account removes your cars from the cloud as described below.

Trips and location

If you start a trip, Kratos XT follows your phone’s location until you end it, to measure the distance and draw the route. The route is kept only on your phone, beside the trip; it is never sent to us or to anyone else, and it is not included when a car is shared or synced (the trip’s date, distance, purpose and the places you typed are). Location is used only while a trip is running: Android shows a notification and iPhone the location indicator the whole time. Trips logged by hand use no location at all.

Automatic trips (off unless you turn them on) start and end a trip by themselves when you drive. To tell driving from walking or standing still, the app reads your phone’s motion activity (Motion & Fitness on iPhone, Physical activity on Android): only the kind of movement and how sure the phone is, as the phone’s own motion coprocessor or Google Play services work it out, never step counts, health data or anything about you. It is read on your phone, used at once and not stored, and never sent to us or anyone else. On iPhone, if you allow location Always, the app also asks iOS to wake it when the phone moves a significant distance or leaves a place, and, while a drive is suspected, reads its speed from your location for a minute or two; nothing of this is kept unless a trip starts. On Android, a drive noticed while the app is closed is offered as a notification and only recorded if you tap it. Detected trips are kept like any other tracked trip, and you can turn automatic trips off at any time in Settings → Automatic trips.

To name where a tracked trip started and ended, the app first checks the places you saved (home, work and your own); those stay on your phone and in your backups, and are not shared with a car. For an end that is not near a saved place, the app asks your phone’s own address lookup (Apple’s on iPhone, Google’s on Android) for the street at that one point, as the phone’s maps would. Only those two points are looked up, never the route, and not by us. The street names are kept with the trip like names you type.

Trips are shown on a map drawn from OpenStreetMap data by CARTO. To draw it, the app downloads map tiles for the area on screen from CARTO’s servers, which see the area requested and your IP address, as any website does; your route and records are never sent. Map data © OpenStreetMap contributors.

Fuel stations. To fill in the station when you log a fill, and to offer to log one when a tracked drive stops at a station, the app looks up the fuel stations around where the phone is in OpenStreetMap’s open data, through the public Overpass service (overpass-api.de and overpass.kumi.systems). It sends only a point at the centre of the surrounding square kilometre, never your route or records, and keeps the answer on your phone for a month so the same area is not asked again. The fill form only looks when location is already allowed; it never asks for it. The offer during a drive can be turned off in Settings → Automatic trips.

The drive screen. While a trip is recorded, the drive screen draws the streets and buildings around you in 3D, with the road’s name and speed limit. It gets them from OpenStreetMap’s open data through the same public Overpass service, asking for squares of the map about a kilometre across: only the corners of each square are sent, never your position, route or records. Each square is kept on your phone for a month, so roads you drive often are not asked for again. Its ground is the same CARTO street map as the trip maps, whose tiles are also kept on your phone for a month. Replaying a kept trip this way asks for the squares and tiles along its route in the same way.

Traffic fines. When you check a plate in Uganda, the app sends that plate, and nothing else, to the Uganda Police Force’s ticket service (gis.upf.go.ug), which answers with any unpaid tickets on it. That service only works over plain HTTP, so the plate travels unencrypted. The last answer for each plate is kept on your phone so the car’s page can show it. In other countries the app does not send your plate anywhere: it copies the plate for you and opens the official checker in your browser, where that site’s own privacy policy applies. Kratos XT is not affiliated with any police force or road authority.

Reading receipts

When you scan a fuel receipt, the app first asks how it should be read, and you can change your answer at any time in Settings → Privacy.

• In the cloud: the photo is sent over an encrypted connection to our receipt reading service, which passes it to Amazon Textract (Amazon Web Services, United States) and returns the text it finds. The photo is read in memory and is not stored or logged by us, and Amazon does not keep it or use it to improve its services. Nothing else is sent with it: no account, no identifier and none of your records. The only thing the service keeps is a count of how many receipts were read each day, which limits what it can cost.
• Only on this phone: the photo is read on the device and never leaves it: by Apple’s text recognition on iPhone, and by Google’s ML Kit on Android. On Android, ML Kit sends Google technical information about how it runs (the device and app versions, an identifier for the ML Kit installation, performance and error figures), never the photo or its text; see Google’s ML Kit data disclosure.

Either way, the photo is saved as the fill’s receipt on your device, and the figures fill in the form for you to check before saving.

The AI mechanic

From version 1.9 you can ask the mechanic in Kratos XT about a noise, a warning light, wear or a repair quote. It answers using Gemini, Google’s AI model, reached through Google Firebase AI Logic. Nothing is sent until you tap send, and the first time, the app shows you what will be sent before anything is.

• What is sent, when you ask: your question, a photo if you add one, the last few messages of that conversation, and a short summary of that car’s records: its make, model, year, engine and transmission, odometer and how far it is driven a month, its services (dates, distances, types, items and costs, and the notes you typed), latest measurements, open reminders, fuel economy, health score and predictions, and your units, currency and language. It goes over an encrypted connection to Google (Google LLC, United States).
• Never sent: the plate, chassis or engine number, garage names, your name, email or account, your location or trips, documents, or any other car.
• How Google handles it: Google processes the request to write the answer, under the Gemini API Additional Terms of Service. Kratos XT uses the Gemini Developer API; on its free tier, Google may use what is sent and the answer to improve its products, and people at Google may review them, so please don’t put personal details in a question or photo. On the paid tier, Google keeps them only for a limited time to detect abuse. We don’t receive or keep your questions, photos or answers, and nothing from the mechanic is used for advertising.
• Checking the app is genuine: so that only Kratos XT can use the mechanic, Firebase App Check asks your phone to vouch for the app (App Attest or DeviceCheck on iPhone, Play Integrity on Android). This sends Apple or Google information about the app and device, not your records.
• On your phone: conversations and their photos are kept only in the app’s private storage on this phone. They are not included in Kratos XT backups or Android’s cloud backup, are never shared with the people on a shared car, and are deleted with Clear conversation, when you delete the car, or with Erase all data. The number of questions asked this month is counted on your phone and not sent to us.

The mechanic’s answers are general guidance, not a professional inspection, and it can be wrong. If something seems unsafe, stop driving and see a mechanic.

Buying Kratos XT Pro

Kratos XT Pro is a one-time purchase made through the App Store or Google Play, which handle the payment under their own privacy policies; we never see your card or payment details. To know whether you own Pro, the app uses RevenueCat (RevenueCat, Inc., United States), which receives from the store a record of the purchase (the product, its price and currency, and when it was bought), together with a random identifier the app creates for this purpose and basic technical details (the app and system versions, your country and language). The identifier is not linked to your name, email, sharing account or records, and none of your records reach RevenueCat. We use this only to unlock Pro and to restore it on a new phone, not for advertising or tracking.

Without Pro, the number of receipts read in the cloud and questions asked of the mechanic this month are counted on your phone; they are not sent to us.

Permissions the app may ask for

• Camera and Photos, to attach receipts, invoices and documents you choose, or a photo for the AI mechanic. Images are stored on your device only; a receipt you scan is also read as described above, and a photo you send the mechanic is sent as described under The AI mechanic.
• Notifications, to remind you about services, renewals and expiring documents. Reminders are scheduled on your device.
• Location, while a trip is being measured, and, with automatic trips on and location allowed Always on iPhone, to wake the app when you start driving, as described under Trips and location.
• Motion & Fitness (iPhone) or Physical activity (Android), only if you turn on automatic trips, to tell when you are driving. Read on your phone and never stored or sent.
• Face ID, Touch ID or your fingerprint, only if you turn on App lock. Your biometric data never leaves your phone’s secure hardware and is never available to the app.

Backups and exports

You can create a backup file, export spreadsheets or a PDF report. These files go only where you send them, for example to Files, AirDrop or email, and are then governed by the service you choose.

With iCloud Drive on, the app also backs up automatically, about once a week when something changed, into its own folder in your iCloud Drive (shown in Files as iCloud Drive → Kratos XT), keeping the three newest. These backups are stored by Apple in your iCloud account under Apple’s privacy policy. We have no access to them. You can turn automatic backups off in Settings → Data and delete the files in the Files app.

On Android, you can turn on automatic backup to Google Drive in Settings → Data. The app then asks once for access to its own hidden app folder in your Google Drive; it cannot see or change any of your other files. It backs up about once a week when something changed, keeping the three newest, and on a new phone it can bring them back. These backups are stored by Google in your Google account under Google’s privacy policy. We have no access to them. You can turn automatic backups off in Settings → Data, and remove the app’s access and its hidden data in Google Drive under Settings → Manage apps.

On Android, if Android backup is on for your phone, the app’s database and settings are included in it and stored by Google in your Google account under Google’s privacy policy, encrypted with your screen lock. Attached photos and PDFs, exports and logs are left out. We have no access to these backups either; you manage them in your phone’s backup settings.

Deleting your data

Use Settings → Erase all data in the app, or delete the app, to remove everything it stored on your device, including the error log and the copies taken before updates. Backups you saved elsewhere, including those in iCloud Drive or your Google account, stay until you delete them there.

If you signed in to share a car, Settings → Account → Delete account deletes your account, deletes the cars you own from the cloud with their photos and files, and takes you off the cars shared with you (more on deleting your account). For a diagnostics report you sent, write to us with its reference and we will delete it.

Download links on this website

Links such as kratosxt.bond/get open the App Store on an iPhone, Google Play on Android and this website on a computer. Each tap adds one to a count for that link, that day and that kind of device. Nothing else is kept: no IP address, cookie or identifier, and the count cannot tell who tapped.

Children

Kratos XT is a general-audience utility and does not knowingly collect any data from anyone, including children.

Changes

If this policy changes, the new version will be published on this page with a new effective date.

Contact

Questions about privacy: support@kratosxt.bond

Effective 15 October 2026.