`public/privacy.html`

113 lines
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Privacy Policy — Charge &amp; Explore</title>
<style>
  body{font:16px/1.6 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,sans-serif;color:#1a1a1a;max-width:760px;margin:0 auto;padding:40px 24px}
  h1{font-size:1.9rem;margin-bottom:.25rem}
  h2{font-size:1.2rem;margin-top:2rem}
  .meta{color:#666;font-size:.9rem}
  ul{padding-left:1.2rem}
  a{color:#0b57d0}
</style>
</head>
<body>
<h1>Privacy Policy</h1>
<p class="meta">Charge &amp; Explore — last updated August 19, 2026</p>

<p>Charge &amp; Explore ("we", "us") helps Tesla vehicle owners plan charging
stops and discover things to do while charging. This policy explains what data
we collect, why, and the choices you have. Charge &amp; Explore is an
independent product and is <strong>not affiliated with, endorsed by, or
sponsored by Tesla, Inc.</strong></p>

<h2>Data we collect</h2>
<ul>
  <li><strong>Tesla account connection (optional).</strong> If you connect your
  Tesla account, authorization happens on Tesla's own sign-in service (OAuth).
  We never see or store your Tesla username or password.</li>
  <li><strong>Vehicle data (with your consent).</strong> Battery state of
  charge, charging status, charge limit, and basic vehicle configuration —
  used solely to estimate charging windows and recommend stops.</li>
  <li><strong>Vehicle location (separate, explicit consent).</strong> Precise
  location is sensitive data. We request it only if you enable
  location-based features, under its own toggle, and Tesla additionally
  surfaces an in-vehicle sharing indicator.</li>
  <li><strong>Live charging telemetry (opt-in, field-level).</strong> If you
  enable live charging updates, we receive a minimum set of signals (state of
  charge, charge state, time to full charge). Never enabled silently.</li>
</ul>

<h2>What we do NOT do</h2>
<ul>
  <li>We do not sell your <strong>Tesla or vehicle data</strong>, and we never
  use your vehicle data, location, or charging telemetry for advertising.</li>
  <li>We do not store your Tesla credentials — ever.</li>
  <li>We do not redistribute Tesla data beyond what the Tesla Fleet API
  Agreement permits.</li>
  <li>Tesla refresh tokens live only on our servers as rotating secrets; your
  device receives only a short-lived session token.</li>
</ul>

<h2>Advertising, analytics &amp; cookies</h2>
<p>The Service is supported by advertising. We use <strong>Google AdSense</strong>
(and its ad partners) to display ads. Google and its partners may use cookies,
device identifiers, and an advertising identifier to serve and measure ads,
including personalized ads. On our website, ad and analytics providers may set
cookies. In our iOS app, we ask for your permission through Apple's
<strong>App Tracking Transparency</strong> prompt before any tracking that uses
your device's advertising identifier — if you decline, we do not track you across
apps and websites for advertising.</p>
<p>This advertising activity may be considered a "sale" or "share" of personal
information under the CCPA/CPRA. You can control it: decline the App Tracking
Transparency prompt (or turn off "Allow Apps to Request to Track" in iOS
Settings), use a Global Privacy Control signal on the website, adjust Google's
ad settings at <a href="https://adssettings.google.com">adssettings.google.com</a>,
or email us to opt out. We do <strong>not</strong> use your connected-vehicle
data, precise location, or charging telemetry for advertising or share it with
ad networks.</p>

<h2>Children</h2>
<p>The Service is not directed to children under 13, and we do not knowingly
collect personal information from them. If you believe a child under 13 has
provided us data, contact us and we will delete it.</p>

<h2>How we use data</h2>
<p>Only to provide the service: estimating charge windows, recommending
charging stops and nearby activities, and (if opted in) sending charging
alerts. Aggregated, de-identified usage statistics may be used to improve
recommendations.</p>

<h2>Retention and deletion</h2>
<p>You can disconnect your Tesla account at any time from within the app or by
contacting us; disconnecting revokes our access and deletes stored vehicle
data and tokens. Trip history, if you enable it, can be deleted independently
at any time.</p>

<h2>Your rights</h2>
<p>Depending on where you live (including under the CCPA/CPRA and GDPR), you
may have rights to access, correct, delete, or port your data, and to limit
the use of sensitive data such as precise location. To exercise any right,
email us — we honor requests regardless of jurisdiction.</p>

<h2>Security</h2>
<p>All traffic is encrypted in transit (TLS). Tokens are stored server-side,
rotated, and scoped to the minimum Tesla permissions the feature you enabled
requires. Vehicle command capabilities are not requested.</p>

<h2>Changes to this policy</h2>
<p>We may update this policy; material changes will be posted here with a new
"last updated" date. Your continued use after changes means you accept the
updated policy. This policy supplements our <a href="/terms.html">Terms of Use</a>.</p>

<h2>Contact</h2>
<p>Questions or privacy requests (access, deletion, opt-out):
<a href="mailto:chargeandexplore@agentabrams.com">chargeandexplore@agentabrams.com</a></p>

<p class="meta">Tesla is a trademark of Tesla, Inc. Charge &amp; Explore is an
independent application with no affiliation to Tesla, Inc.</p>
</body>
</html>