Privacy Policy for "Hash Control"

Last Updated: June 29, 2026

This Privacy Policy explains how "Hash Control" (hereinafter referred to as the "App") collects, processes, and stores user information.

1. General & Controller Information

The publisher and controller of this App is:

• Publisher/Developer: Otternase

• Contact/Email: otternase.apps@gmx.de

2. Third-Party Independence

This App is an independent third-party companion tool and is not affiliated with, endorsed by, or in any contract with smart Europe GmbH, Geely Holding Group, or their subsidiaries. All communications occur directly between the user's device and the official Smart API endpoints on behalf of the user.

3. Data Processing & Categories

a) Login Credentials & Authentication

• Processing: When you log into your Smart account via the App, your email and password are transmitted directly to the official Smart OIDC (OpenID Connect) authentication servers.

• Storage: Your password is never sent to any developer-owned servers and is not stored by us. The resulting OAuth access/refresh tokens and encrypted session keys are stored locally on your device in secure storage (iOS Keychain / Android Keystore via expo-secure-store).

b) Vehicle Telemetry & Telematics

• Processing: To display vehicle status and run commands, the App queries Smart's official API endpoints. This retrieves data such as Battery State of Charge (SOC), range, odometer, lock status of doors/windows/trunk/sunroof, climate control settings, and seat/steering wheel heating levels.

• Storage: This telemetry is saved locally on your device in a temporary cache (AsyncStorage) to support offline viewing and improve performance.

c) Charging Diary & Trip Logbook

• Processing: The App allows you to maintain a local record of your charging sessions, cost presets, location-based energy pricing, and trip logs.

• Storage: All logbook entries, locations, and statistics are stored exclusively on your local device (AsyncStorage). They are never uploaded to any backend database owned by the developer or any third party.

d) Share-to-Car (Destination Sharing)

• Processing: If you use the destination sharing feature, target addresses or coordinates are sent directly to the Smart API to forward them to your vehicle's built-in navigation system.

e) Local Notifications & Alarms

• Processing: The App uses device-native local alarms and notification systems for low battery alerts or charging completion notifications. No external push services or servers are utilized for this purpose.

f) Background Sync & Auto-Refresh

• Bluetooth Auto-Refresh: If enabled, the App queries your device's Bluetooth connection status to detect when you connect or disconnect from the vehicle, initiating a status refresh. All processing occurs locally.

• Notification Listener (Android Option B): If explicitly enabled, the App reads system notifications generated by the official Smart app on your device to update charge states in real time. This notification monitoring is performed purely locally on your device. No notification text is stored or sent to any server.

4. Third-Party Integrations & Map Services

The App embeds a map view (Leaflet & OpenStreetMap tiles) within a local WebView to display vehicle location and route history.

• When loading map tiles, your device communicates directly with OpenStreetMap Foundation servers.

• This transmission inevitably includes your IP address and request metadata, which are handled according to OpenStreetMap's privacy policies.

5. Third-Party Analytics & Crash Reporting

This App contains no third-party analytics trackers (such as Google Analytics, Firebase Analytics) or automated crash reporters (such as Sentry, Crashlytics). Your app usage behavior remains entirely private on your device.

6. Data Storage & Deletion

All user data, settings, and cache reside locally on your mobile device.

• Losing/Deleting Data: Logging out of the App or uninstalling the App will immediately and permanently erase all locally stored tokens, vehicle caches, settings, charging history, and logs from your device.

7. Your Rights (GDPR / DSGVO)

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, restrict, or delete your personal data.
Since all data is stored locally on your device and not on developer servers, you can easily exercise these rights by:

1. Clearing the cache/logbook in the App settings.

2. Logging out of the App.

3. Uninstalling the App.

8. Contact

For questions regarding this privacy policy or data protection, please contact the email address provided in Section 1.