Privacy Policy

FuelSmart is operated by Tony McCarthy, based in Liverpool, United Kingdom.

If you have any questions about this privacy policy or how we handle your data, you can contact us at hello@fuelsmart.uk.

ICO registration: pending.

We collect the following types of data depending on how you use FuelSmart:

Account data

• Name and email address from Google OAuth or email signup

Location data

• GPS coordinates or postcode, only with your permission
• Places, postcodes and stops you enter in the route planner

Usage data

• Favourites, saved routes, price targets, and fuel preferences

Fill-up data

• Station, fuel type, litres, price, date, and odometer reading

Vehicle data

• Make, model, registration, fuel type, tank size, and MPG

Fleet and organisation data

• Company name, billing email, VAT number, address, driver information, and spending data

Payment data

• Billing address and VAT number only — Stripe handles all card details directly

AI chat data

• Messages you send and the context used to generate responses

Technical data

• Browser type, device information, IP address, and pages visited

Cookies and local storage

• Theme preference, location settings, vehicle defaults, and your recent route planner places

We use your data to:

• Provide the core FuelSmart service — finding fuel prices, planning routes, and tracking fill-ups
• Personalise your experience based on your preferences and location
• Calculate your savings and provide spending insights
• Manage fleet accounts and driver data for organisations
• Generate reports and analytics for fleet administrators
• Send account emails (sign-up, password and invite emails) and, to fleet admins, billing notices
• Process payments via Stripe for premium subscriptions
• Improve the service based on usage patterns
• Comply with legal obligations

We process your data under the following legal bases:

Consent

• Location data access
• AI chat features
• Marketing communications

Contract

• Account management and authentication
• Subscription and payment processing
• Fleet management services

Legitimate interest

• Service improvement and feature development
• Fraud prevention and security monitoring
• Usage analytics

Legal obligation

• Tax records and billing data retention

We share data with the following third parties, and only what is necessary:

• Stripe — processes payments securely. We never see or store your card details.
• Supabase — our database provider, hosted in the EU.
• Anthropic — powers the AI chat feature. Your messages are not stored or used for model training.
• Google — if you sign in with Google, we receive your name and email address only.
• OpenRouteService (HeiGIT, Germany) — suggests places as you type in the route planner, finds the places you search for, and calculates routes. It receives what you type there, your route's start, end and any stop you add, and — so nearby places come first — your approximate area, rounded to about 10 km. It does not receive your name, email or account details.
• Postcodes.io — looks up the UK postcodes you enter and, when you choose “Use my location”, finds your nearest postcode from your location rounded to about 100 metres. Your browser contacts it directly, so it also sees your IP address.
• Resend (US) — delivers our emails: sign-up and password emails, fleet invites, billing notices to fleet admins, and fleet enquiries to our own inbox. It receives the recipient's email address and what the email says.
• GOV.UK Fuel Finder — we receive fuel price data from this service. We do not send your data to them.
• Fleet administrators — can see driver fill-ups, spending, and performance data within their organisation.

We do not sell your data to anyone.

We do not share your data with advertisers. If we introduce advertising in the future, it will be contextual (based on page content, not your personal data) and we will update this policy accordingly.

We may disclose data to law enforcement, but only if legally required to do so.

• Account data — retained while your account is active. Deleted 30 days after you ask (you can cancel by signing in before then). Fill-ups you logged as a fleet member stay with that organisation without your name (section 8).
• Fill-up data — retained while your account is active. You can export your data as CSV at any time.
• Fleet data — retained for 12 months after an organisation cancels its account.
• Payment records — retained for 6 years as required by HMRC.
• Price history — anonymised and retained indefinitely for trend analysis.
• AI chat data — not retained after your session ends.
• Server logs — retained for 30 days.

Under UK data protection law, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Portability — receive your data in a machine-readable format
• Restrict processing — limit how we use your data
• Object — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email us at hello@fuelsmart.uk. We will respond within 30 days.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

If you use FuelSmart as part of a fleet or organisation, the organisation administrator acts as a joint controller of your data alongside FuelSmart.

What your admin can see

• Fill-ups you log while you're a member (station, fuel type, litres, price, date)
• Spending summaries and trends
• Performance data such as fuel efficiency

What your admin cannot see

• Fill-ups you logged before joining
• Your personal favourites or saved routes outside the organisation
• Your AI chat conversations
• Your personal account settings

If you leave an organisation, your personal FuelSmart account and data are unaffected. Organisation-specific data (fill-ups logged under the org) remains with the organisation. If you delete your account, those fill-ups stay with the organisation without your name, and its record of who did what keeps an internal identifier that no longer links to you.

FuelSmart uses browser local storage (not traditional cookies) to save your preferences, including theme, location settings, vehicle defaults, and the last five places you used in the route planner (you can clear these from the route planner). This data stays on your device and is not sent to our servers.

We use session cookies for authentication only. These are strictly necessary for the service to function and do not track you.

We do not use any tracking cookies.

If we introduce advertising in the future, we will implement a cookie consent mechanism before setting any advertising cookies.

FuelSmart is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at hello@fuelsmart.uk.

Your data is primarily stored in the EU via Supabase.

AI chat queries may be processed in the United States by Anthropic. This transfer is covered by Standard Contractual Clauses (SCCs) to ensure your data is protected to UK/EU standards.

Payment processing through Stripe may involve UK-US data transfers, covered by Stripe's data processing agreements and compliance frameworks.

Route planner searches and routes are processed in Germany by OpenRouteService.

We take the security of your data seriously. Our measures include:

• All connections are encrypted with HTTPS/TLS
• Row Level Security (RLS) in our database ensures you can only access your own data
• Payment processing is handled by PCI-compliant Stripe
• API keys and secrets are stored in secure environment variables, never in client-side code
• We conduct regular security reviews of our infrastructure and codebase

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

For material changes that significantly affect how we handle your data, we will notify you via email or an in-app notification.

Continued use of FuelSmart after changes are posted constitutes acceptance of the updated policy.