RYDGER
Download
EspañolDeutschFrançais

Legal

Privacy Policy

Effective date: 26 October 2026 · Data controller: Óscar Gallego Ruiz (individual developer), Spain — support@rydger.com

Rydger works offline and does not require an account. Your ledger lives on your phone. This policy says what the app and the website send, to whom, and why.

What data Rydger stores, and where

Everything you enter into Rydger (vehicles, maintenance records, rides, costs, receipts) is stored on your device. On iPhone and iPad, if iCloud is on, it is mirrored to your own private iCloud database (Apple's CloudKit, container iCloud.com.rydger.Rydger). Rydger's developer has no access to it: it is encrypted and stored under your Apple ID, the same way Photos or Notes data is. On Android, the app's database is part of Android's backup to your Google account when backup is on. Rydger keeps no copy of your ledger on its own servers. The one exception is a service history you choose to send to a buyer, described below.

No account needed

The app has no sign-up and no user accounts. Nothing you enter in it is tied to an email address or identity we control. The only sign-in is optional: the subscription page on rydger.com lets you sign in with Apple to see your Rydger Pro status. We ask Apple for no name or email and keep only Apple's identifier for you, linked to the purchase identifier of your subscription.

Optional cloud photo processing (Rydger Pro)

Rydger can read an odometer, a receipt, or a service-schedule table from a photo. This happens on-device first (Apple's Vision framework). If Rydger Pro is active and the on-device read is inconclusive, the photo may be sent — once, for that single read — to Rydger's server-side proxy, which forwards it to a vision-capable AI model via the Vercel AI Gateway.

  • The photo is used only to extract the requested value (a number, a date, a few fields) and is not stored or logged after the response is returned.
  • The request is authenticated by a signed purchase receipt from Apple (proving you hold an active Rydger Pro entitlement), not by any personal identifier.
  • A usage counter (calls per month, to prevent abuse) is keyed to an opaque purchase identifier from Apple — not your name, email, or Apple ID.
  • On the free plan only your first 3 AI reads reach this cloud step (see “Free AI reads” below); after that, on-device processing is unlimited and never leaves your phone.

AI text entry (Rydger Pro)

With Rydger Pro you can type one sentence, such as “oil change at 24,300, 85 €”, and have the service or expense form filled in for you. The text you type, with today’s date, your language and currency, the vehicle’s odometer and the titles of its maintenance tasks, is sent to Rydger’s server-side proxy, which passes it through the Vercel AI Gateway to Anthropic’s Claude model only to fill in the form. Neither the text nor the answer is stored or logged by Rydger; the proxy keeps one line per request with the model, token counts and cost, never the text. The request is authenticated and counted against a monthly AI quota in the same way as cloud photo reads. Nothing is saved to your vehicle until you check the form and tap Save.

AI workshop invoice reading (Rydger Pro)

With Rydger Pro you can photograph a workshop invoice and have the service record filled in: date, odometer, total, workshop, the work lines and the maintenance task it covers. The invoice photo, with today’s date, your language and currency and the titles of the vehicle’s maintenance tasks, is sent to Rydger’s server-side proxy, which passes it through the Vercel AI Gateway to Anthropic’s Claude model only to read it. Neither the photo nor the answer is stored or logged by Rydger; the proxy keeps one line per request with the model, token counts and cost, never the image. The request is authenticated and counted against the same monthly AI quota as AI text entry. Nothing is saved to your vehicle until you check the form and tap Save; the photo is then kept with the service record on your device and, on iPhone, in your private iCloud.

AI document reading (Rydger Pro)

With Rydger Pro you can photograph a vehicle document, such as an insurance policy or an inspection certificate, and have its type, a short title and its expiry date filled in, so you are reminded before it expires. Documents are personal: the photo, with today’s date and your language, is sent to Rydger’s server-side proxy, which passes it through the Vercel AI Gateway to Anthropic’s Claude model only to fill in the form. The model is asked only for the type, a title and the expiry date, never policy numbers, plates or names. Neither the photo nor the answer is stored or logged by Rydger; the proxy keeps one line per request with the model, token counts and cost, never the image. The request is authenticated and counted against the same monthly AI quota as the other AI features. Nothing is saved until you check the form and tap Save; the photo is then kept with the document on your device and in your private iCloud.

AI wording of the pre-sale review (Rydger Pro)

Before you share the resale report, Rydger checks your history for readings that go down, unusual jumps, long stretches without a reading and overdue maintenance. That check runs on your phone. With Rydger Pro, the findings are also worded in plain language: for each one, only its kind, the readings and dates involved and, for overdue maintenance, the task’s title are sent, with your language and distance unit, to Rydger’s server-side proxy, which passes them through the Vercel AI Gateway to Anthropic’s Claude model only to write the warnings. No plate, VIN, seller note, contact, photo or other free text is sent. Neither the request nor the answer is stored or logged by Rydger; the proxy keeps one line per request with the model, token counts and cost. The request is authenticated and counts once per review against the same monthly AI quota as AI text entry. If it fails, the review shows its fixed texts.

AI buyer summary on the resale report (Rydger Pro)

When the resale report is in Spanish, German or French, you can add a short summary for the buyer. Rydger builds it from facts in your history: the odometer today and the most recent services (reading, date and the maintenance task’s title). With Rydger Pro, those facts, numbered, with the report’s language and distance unit, are sent to Rydger’s server-side proxy, which passes them through the Vercel AI Gateway to Anthropic’s Claude model only to write the sentences. Where each fact comes from (GPS, receipt photo, logged by hand) is not sent: the app adds those labels itself. No plate, VIN, seller note, contact, photo or other free text is sent. Neither the request nor the answer is stored or logged by Rydger; the proxy keeps one line per request with the model, token counts and cost. The request is authenticated and counts once per summary against the same monthly AI quota as AI text entry. Without Pro, or if it fails, the summary is written on your phone from a fixed template. Nothing goes into the PDF until you check the text and tap “Use this summary”.

Free AI reads (free plan)

Without Rydger Pro, your first 3 AI reads are free: an inconclusive odometer or receipt photo, a workshop invoice, or one sentence typed into “Log in One Line”. Each is sent and handled exactly as described above for Rydger Pro, and nothing is stored or logged. As there is no purchase to authenticate the request, it carries a signed proof that it comes from the app instead: on iPhone, Apple’s app transaction, whose identifier is tied to your Apple Account and this app, not to your name, email or Apple ID; on Android, a Google Play Integrity check with a random identifier the app created when it was installed. Rydger keeps only a count of the free reads used against that identifier, for up to 400 days, so the 3 free reads cannot be used again.

Missing vehicle models

If the model you type isn't in Rydger's vehicle list, you can choose to send it to us so we can add it. Only the vehicle type, make, model and model year are sent, together with the list version, the app version and your device's region code. It isn't linked to you: we keep no IP address or device identifier with it, only a count of how many riders asked for the same model. To prevent abuse, a daily counter keyed to an anonymous per-install identifier from Apple limits how many requests one install can send; it expires after about a day. Rydger also downloads updates to the vehicle list, and the on/off state of some features, from rydger.com; those downloads send nothing about you or your vehicles.

Sending a service history to a buyer

When you send a vehicle's records by QR code or link, the app encrypts them on your phone and uploads only the encrypted file to rydger.com. It is kept in our database at Upstash for 7 days and then deleted. The key that opens it is inside the QR code or link you share and never reaches our server, so we cannot read the file. If the person you share it with doesn’t have Rydger, rydger.com shows them a summary that their own browser decrypts on their device; the key still never reaches our server. The upload is checked with an anonymous per-install identifier from Apple, used only for a daily limit.

Purchases

Subscriptions and the lifetime purchase are handled entirely by Apple through StoreKit. Rydger never sees your payment details — Apple processes billing and shares only the entitlement status (active / expired) needed to unlock features.

Crash reports, maps and web analytics

Rydger shows no ads, contains no advertising SDKs, and never sells or hands over personal data. On Android, crash reports are off until you turn on “Send crash reports” in Settings. When it is on, a crash sends a technical report (the error, the device model, the Android and app versions, and an installation identifier created by Crashlytics) to Firebase Crashlytics, a Google service. It holds no account, vehicle or ledger data. The iPhone app sends crash reports only if you agree, as described below; Apple also shares crash data with developers if you allow it in iOS Settings. On Android, the map of a ride is drawn by Google Maps, which receives the map area being shown. The website and the app's services on rydger.com are hosted by Vercel. The website uses Vercel Web Analytics to count page views and button taps in aggregate, without cookies or personal identifiers. It also uses Vercel Speed Insights to measure how fast pages load (Core Web Vitals), in aggregate and without cookies or personal identifiers.

Affiliate links on the website

Some Spanish-language pages on rydger.com link to shops such as Motocard with an affiliate link: if you buy, Rydger earns a commission at no cost to you. The click is recorded by Tradedoubler, the affiliate network, on its own website when you open the link. Rydger sends it no data about you; on rydger.com we only count the click, without identifying you, with the web analytics described above.

Usage analytics and iPhone crash reports, only if you agree

When the iPhone app first opens, or once after you update it, it asks whether to share usage analytics and crash reports. Only if you tap “Accept”, or later turn on “Usage stats and crash reports” in Settings › Privacy, does it start Google Firebase and send two things. Firebase Analytics receives usage events from a fixed list, such as adding a vehicle (whether it is a motorcycle or a car, and whether it is your first), with the app version, device model, iOS version and a random app-instance identifier created by Firebase. Firebase Crashlytics receives the technical details of a crash. Firebase works out an approximate region from the IP address. No vehicle details, plates, costs, odometer readings or locations are sent, the app never reads the advertising identifier, and nothing is used for ads or to track you across apps. The same switch turns both off at any time. On the website, Google Analytics loads only after you tap “Accept” in the cookie banner; it then sets cookies to count visits, with every advertising consent denied. “Cookie settings” at the bottom of each page changes that choice, which is remembered for 12 months. The legal basis for all of this is your consent. Google processes the data on our behalf and keeps analytics data for up to 14 months and crash reports for 90 days.

Anonymous usage counts

To learn which upgrade screens are useful, the Rydger app sends anonymous counts to rydger.com: when the Rydger Pro screen is shown, when an upgrade card is shown or tapped, and when a purchase or free trial is completed. Each count carries only the name of the screen, the kind of purchase where it applies (trial, subscription or lifetime) and the app version. One more count is sent when someone declines usage stats on the first-launch question; it carries only the app version. None of these counts carries any account, device, install or advertising identifier, and no vehicle or location data. We keep no IP address with it, only daily totals, which are deleted after about 13 months. You can turn this off at any time in the app's Settings › Privacy with “Share anonymous usage counts”.

Android waitlist (rydger.com)

If you ask on rydger.com to be told when Rydger reaches Android, we store your email address, the language of the page, the country reported by our hosting provider, the page you signed up on, any campaign tag in its link, and when you gave consent and to which wording. We store no IP address or browser details with it. It is used only to send one email announcing Rydger on Android, and to count interest per country. It is kept in our database at Upstash and deleted after that email, or after 24 months, whichever comes first. To be removed sooner, email support@rydger.com from that address.

Children's privacy

Rydger is not directed at children and does not knowingly collect data from children under 13 (or the applicable age in your country).

Your data, your control

Your ledger is not on our servers, so removing it is in your hands:

  • Delete the Rydger app from your device to remove the local copy.
  • Turn off iCloud for Rydger (Settings → [your name] → iCloud → Rydger) and/or delete the app's iCloud data via Settings → [your name] → iCloud → Manage Account Storage, to remove the private-database copy.
  • Export your full history at any time as CSV from within the app (Free tier includes this) before deleting anything.

Delete all your data from the app

In the iPhone app, open Settings → Privacy → Delete all my data and confirm twice. Rydger deletes your vehicles, services, expenses, rides, photos and documents from the device and from your private iCloud, so your other devices empty too. It does not cancel a subscription, which Apple manages.

Changes to this policy

If this policy changes, the updated version will be published at this same URL with a new effective date.

Contact

Questions about this policy: support@rydger.com. See also the support page. The terms of service cover purchases, acceptable use and liability.