FillPal Privacy Policy
Last updated: 5 August 2026 · עברית
This Privacy Policy explains how Yoav Hernes (“FillPal”, “we”, “us”) collects, uses, and shares personal data when you use the FillPal mobile and web applications, this website (fillpal.app), and related services (together, the “Service”). It should be read together with our Terms of Service. By using the Service you agree to this Policy. If you do not agree, do not use the Service.
1. Information we collect
Account information. When you register we collect your name, email address, and a password (which we store only in hashed form). If you sign in with Google, we receive your name, email address, and Google account identifier from Google. You may also choose an avatar.
Location and trip data. When you track a drive, we collect your device’s GPS location — including in the background while a drive is being recorded — and derive the route, distance, duration, timestamps, speed, a city/highway split, and related driving metrics used to estimate fuel use. Location is collected only while you are recording a drive and only if you grant the permission.
Vehicle, fuel, and group data. Cars and their fuel-economy details; fuel entries (litres, price, date); the groups and carpools you create or join, their members, invite codes, balances, and settlements.
Information you enter. Addresses and place searches you type for route planning, trip and ride titles, and dashboard readings.
Technical data. To operate and secure the Service we process your IP address, device and app information, authentication tokens or cookies, and basic logs.
Website visitors. On fillpal.app we use privacy-friendly analytics to count visits without building personal profiles. If advertising is enabled, third-party vendors (including Google) may use cookies to serve ads based on prior visits — see “Cookies” below. The on-site fuel calculator runs entirely in your browser; the values you type into it are not sent to us.
2. How we use your data
- to provide the Service — record trips, calculate fuel-use and cost estimates, and suggest cost splits;
- to create and secure your account and authenticate you;
- to improve the accuracy of our estimates and models (for example, self-calibration from your fuel entries);
- to communicate with you, such as sending account-verification emails;
- to maintain security, prevent abuse, and debug problems; and
- to comply with our legal obligations and enforce our Terms.
Where the law requires a legal basis (for example under the EU GDPR), we rely on: performance of our contract with you (providing the Service); your consent (for location tracking and, where applicable, advertising cookies), which you may withdraw at any time; our legitimate interests (securing and improving the Service); and compliance with legal obligations.
3. How we share your data
We do not sell your personal data. We share it only as described here:
- With other users you choose to share with. Members of a group or carpool you join can see your name, avatar, the trips, fuel entries, and balances relevant to that shared car, and the cost splits. Whether other members can view your trip routes on a map is controlled by your “share trips” setting, which is off by default and which you can change at any time in Settings.
- With service providers that process data on our behalf, under contract and only to run the Service — for example application hosting, database hosting, and email delivery.
- With third-party services you invoke through the app. To plan routes, look up addresses, draw maps, and enrich trips, the app sends location coordinates or search queries to third-party providers — including Google (sign-in), OpenStreetMap / Nominatim (geocoding) and OSRM (routing), map-tile providers, and Open-Meteo (weather and elevation). These providers handle that data under their own privacy policies. Our automated fuel-price lookup does not send any personal data.
- For legal and safety reasons, where we believe disclosure is reasonably necessary to comply with the law, enforce our Terms, or protect the rights, safety, or property of anyone; and in connection with a merger, acquisition, or sale of assets.
4. Location data — your control
Location tracking (including in the background) happens only while you are recording a drive and only after you grant permission. You can withdraw location or background-location permission at any time in your device settings; doing so will disable automatic trip tracking but you can still add trips manually. Location accuracy depends on your device and surroundings and may be imperfect.
5. Cookies and similar technologies
We use a small number of cookies and equivalent storage that are necessary to run the Service — chiefly to keep you signed in (an authentication cookie on the web app, or a secure token on mobile). On the fillpal.app website, analytics and — once enabled — advertising cookies may also be used; where required, we will ask for your consent through a cookie banner before setting non-essential cookies.
6. Data retention
We keep your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain some information to comply with legal obligations, resolve disputes, or enforce our agreements, and except for routine backups that expire on their own cycle.
7. Security
We take reasonable technical and organisational measures to protect your data, including encryption in transit and storing passwords only in hashed form. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Keep your login credentials confidential and tell us promptly of any suspected unauthorised access.
8. Your rights
Depending on where you live, you may have the right to access, correct, update, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent you have given. You can update much of your information, and change your privacy settings, inside the app; to make any other request, contact us at support@fillpal.app. Residents of Israel have rights under the Privacy Protection Law, 1981, and residents of the EU/EEA and UK have rights under the GDPR, including the right to lodge a complaint with a supervisory authority.
9. Children
The Service is not directed to children, and you must be at least 18 (or the age of majority where you live) to use it. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
10. International data transfers
We and our service providers may process and store your data on servers located outside your country, including in the European Union, the United States, or elsewhere. Where we transfer personal data across borders, we take steps to ensure it receives an adequate level of protection as required by applicable law.
11. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date above, and we will provide additional notice for material changes where required. Your continued use of the Service after the changes take effect means you accept the updated Policy.
12. Language
This Policy is provided in English and Hebrew. The Hebrew version is available at fillpal.app/he/privacy. In the event of any conflict between the two versions, the Hebrew version prevails.
13. Contact us
For any question about this Policy or your personal data, or to exercise your rights, contact Yoav Hernes at support@fillpal.app.