The data controller is Hooldustööd (registry code —, VAT number —), —, Estonia. Questions about privacy: Heimar422@gmail.com.

• Order data: the name and e-mail address you write to us, the order date, the amount, the payment method and the payment reference or transaction number.
• Correspondence: the e-mails you send us and our replies, so that we can help you later.
• Server logs: the IP address, date and time of a request, the browser identification, and which file was requested. When you download the app, the download event and your download code are logged.
• Diagnostic logs from the app: the app sends us its session log automatically, so that a fault can be found without you hunting for files on your phone (see section 8). Such a log contains the phone model, the Android and app version, the edition (demo or full), the connection type, and the technical protocol log: ECU identification and workshop code, fault codes, measured values and communication errors. It does not contain your name, e-mail, contacts, photos, location, or anything you have typed. Our server also records the IP address that sent the log.
• Language choice: if you have not chosen a language yourself yet, we offer the page language based on your country. We work the country out approximately from your IP address — country only, not a city or an exact location — and it is not stored anywhere. Your own language choice is stored only in your own browser (localStorage) and is never sent to us.

We do not see your card number or bank credentials — those go directly to the payment service provider. We do not use advertising trackers or analytics, and we do not profile you.

• To fulfil the order — sending the download link, keeping the licence record, answering your support questions. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• To keep accounting records — issuing and retaining the invoice. Legal basis: legal obligation (GDPR Art. 6(1)(c), Estonian Accounting Act).
• To keep the site and the download gate working — recognising abuse, such as someone guessing download codes, and keeping logs for that. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)).
• To find and fix faults in the app — reading the diagnostic logs the app sends us, so that a problem can be solved without a long back-and-forth. The app tells you in its own log that it sends the log. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)); if you object, tell us and we delete what has arrived (section 7). You can also switch sending off in the app itself (Terminal tab → Send logs to developer): from then on nothing further is sent, and anything still queued on the phone is deleted.
• To send you news — only if you explicitly asked for it, and you can opt out with one word at any time. Legal basis: consent (GDPR Art. 6(1)(a)).

Only those who must, and only as much as they need:

• the payment service provider, so that your payment can be made and confirmed;
• the hosting provider of this website and the e-mail provider we use to send your download link;
• the accountant, for the invoice and bookkeeping.

We do not sell, rent or trade your data, and we do not pass it to advertisers.

Invoices and the data behind them are kept for 7 years, as the Accounting Act requires. Support e-mails are kept while the matter is open and for a reasonable time after, so that an old issue can be picked up again. Server and download logs are kept for up to 12 months. Diagnostic logs sent by the app are kept for up to 12 months as well, and are deleted once the fault they describe has been dealt with. Your language choice lives in your own browser until you clear it.

There are no tracking or advertising cookies on this site, and no analytics. Two things are stored on your device:

• language choice — in your browser's local storage, so the page opens in the language you picked;
• a technical session cookie on the download page, which only remembers that you entered a valid download code. It disappears when you close the browser.

Both can be deleted at any time by clearing your browser data.

You have the right to know what we hold about you, to have it corrected, to have it deleted, to have processing restricted, to receive it in a portable form, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw that consent at any time.

Send a request to Heimar422@gmail.com and we answer within one month.

If we keep only the minimum and the law obliges us to keep it (for example an invoice for accounting), we cannot delete it early — but we will tell you exactly what we hold and why.

The site runs over HTTPS. The paid application file is not publicly available: it sits outside the public web folder and is served only to a valid download code through a server-side gate. Download data and codes are kept on the same hosting, protected by a password and not published anywhere.

Diagnostic logs sent by the app land in a folder that is not part of the public website (or is blocked from the web by a server rule), and only the developer can open them, behind a password. The same file also stays on your own phone, in Downloads/Pin7Diagnostics, until you delete it. The check that runs through a log is the same one you would get by e-mailing us the file — the app just saves you the step.

The app and this website are meant for car owners doing their own repairs; they are not directed at children and we do not knowingly collect data about children.

If you believe we handle your data badly, write to us first — it is usually solved in one e-mail. You always have the right to complain to the Estonian Data Protection Inspectorate (aki.ee).

If this policy changes, the new version appears on this page with a new date; the change is never retroactive for data already deleted or for a purchase already completed.