Privacy Policy
1. Who we are
SixLine is developed and operated by Angheluță Mihai-Cristian PFA, a sole proprietorship (persoană fizică autorizată) registered in Romania, CUI 44655193, registered office at Aleea Compozitorilor nr. 14, bl. Z28, et. 2, ap. 18, București. For the purposes of GDPR, this entity is the data controller for the personal data described below. Contact: support@sixline.app.
2. What data we collect
Account data: your name (if provided by Apple on first sign-in) and email address (which may be an Apple private relay address), via Sign in with Apple.
Vehicle data you enter: VIN, nickname, mileage, model, generation, year, engine, transmission, drivetrain, fuel type, and factory specifications (when you use VIN decode).
Maintenance data you enter: maintenance item names, service intervals, service history (mileage, date, cost, currency).
Documents you upload: document type, name, expiry date, and the file itself (e.g. insurance documents, invoices) if you choose to attach one.
Usage data: how many VIN decodes and invoice scans your account has used, to enforce the allowance included with SixLine PRO.
Purchase data: confirmation that you purchased SixLine PRO, provided to us by Apple/RevenueCat — Apple is the merchant of record for this purchase and we do not receive or store your payment card details.
3. How we use your data
To provide the core functionality of the app (storing and syncing your vehicles, maintenance records, and documents across your devices); to decode VINs and scan invoices when you use those features; to enforce the usage allowance included with SixLine PRO; to keep your account secure; to meet our own legal and fiscal record-keeping obligations as a registered business in Romania (e.g. retaining purchase confirmations for accounting purposes).
4. Third-party services we use
Apple — Sign in with Apple (authentication) and In-App Purchase (payment processing, as merchant of record). Apple's own privacy policy governs how they handle this.
Supabase — hosts our database, file storage, and authentication infrastructure. Your account and vehicle data is stored on Supabase's servers in the EU (Ireland).
Vincario — when you decode a VIN, the VIN itself is sent to Vincario, a third-party vehicle-data provider, to retrieve factory specifications. Vincario does not receive your name or any other personal data — only the VIN.
Anthropic (Claude) — when you scan an invoice, the image or PDF you provide is sent to Anthropic's API for analysis, to extract maintenance-relevant information. Depending on what your invoice shows, this could include your name or address if visible on the document.
RevenueCat — manages and verifies your SixLine PRO purchase status, receiving purchase confirmation from Apple.
5. International data transfers
Some of the services above (Anthropic, Apple, RevenueCat) may process data outside the EU, including in the United States. Where this happens, we rely on the safeguards those providers offer for international transfers (such as Standard Contractual Clauses). Supabase, which stores your core account and vehicle data, hosts that data within the EU.
6. Data retention
We keep your data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we are required to retain certain records by law — for example, purchase and invoicing records, which Romanian fiscal law requires us to retain for a statutory period regardless of account deletion.
7. Your rights
Under GDPR, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; request a portable copy of your data; object to or restrict certain processing; withdraw consent where processing is based on consent; lodge a complaint with your national data protection authority (in Romania, ANSPDCP). To exercise any of these rights, contact us at the email above.
8. Data on your device
Before signing in, and as a local cache afterward, some of your vehicle and maintenance data is stored directly on your device, outside of our servers. This local data is under your own device's security (passcode/biometrics) and is not something we can remotely access or delete on your behalf — deleting the app removes it.
9. Children's privacy
SixLine is not directed at children and we do not knowingly collect data from anyone under the age required to hold an Apple ID in their region.
10. Changes to this policy
We may update this Privacy Policy from time to time. If changes are significant, we'll make a reasonable effort to notify you in the app.
11. Contact
Angheluță Mihai-Cristian PFA, CUI 44655193 Registered office: Aleea Compozitorilor nr. 14, bl. Z28, et. 2, ap. 18, București Questions about this Privacy Policy, or to exercise your GDPR rights: support@sixline.app