Privacy policy.

Data controller

Controller: Nicolas Alexandru Curt, a private individual, residing at Oituz 5A, 915400 Oltenița, Călărași, România. Privacy contact: nnikicurt2033@gmail.com.

What data we process

Account data: if you sign up, your email address and your password, which our authentication provider stores encrypted.

Cars and diagnoses: the cars you save (make, model, year, engine, fuel, mileage and the label you choose) and, when you choose to save them, the symptoms you describe and the generated report.

Data for each analysis: the car details and the symptoms you write. Before sending them we automatically remove any email addresses, phone numbers and VINs we detect. Please do not include other personal data. If you use “Scan the dashboard” or upload a photo, also a single image of the dashboard, without its location or other hidden data and never as video; we do not store it.

If you use voice dictation, your browser sends the audio to its own speech recognition service (for example, Google in Chrome or Apple in Safari) to turn it into text. Testigo does not receive or keep the audio, only the text left in the symptoms box.

Browsing data: when you visit the site, our hosting provider processes your IP address and technical data about the request (browser, page requested and date) to serve the site and protect it against attacks.

Feedback on reports: if you rate a report, we store your rating, the optional comment (without emails or phone numbers), the language, the make and model of the car and an encrypted fingerprint of your IP address to prevent abuse.

Answers to “Has this happened to you?”: if you confirm that a fault happened to you, we store the fault sheet, the date and, if you had chosen a car of that brand, its make, model and year. So that each person counts only once, your browser keeps a cookie with a random number and we keep only an encrypted fingerprint of that number; for at most 2 days we also use an encrypted fingerprint of your IP address to prevent abuse. You can withdraw your answer by pressing the button again.

If you answer “What was it in the end?” on a saved report, your answer is kept in your browser and Testigo receives an anonymous case: the car’s make, model, year, engine, fuel and gearbox as written in the report, the symptoms (with emails, phone numbers, number plates and VINs removed first), the report’s first cause and its urgency, the position of the real cause or what you type under “Something else” (cleaned the same way), the language and the day. We do not keep your account, your IP or the report, and we delete these cases after 24 months. To prevent abuse we use an encrypted fingerprint of your IP for one day at most. We use them to improve the fault sheets.

Repair prices (optional): if you press “Share the price” or “Send the price” in “How much did it cost you?” or in the logbook in “My car”, we anonymously store the job (chosen from a list), the make, model and engine of the car, the mileage rounded to the nearest ten thousand, the country and province or region, the month, the amount and its currency and, if you give them, the labour hours, the hourly rate and the type of garage. We do not store your account, your name, the number plate, the garage or what you wrote in the logbook. To prevent abuse we count submissions with an encrypted fingerprint of your IP address, which is deleted within about two days. We only show summaries, such as what half of people paid, when there are at least 5 similar prices.

Recall notifications (optional): if you turn on notifications in “My car”, we store the notification address your browser creates (a link to Google's, Apple's, Mozilla's or Microsoft's notification service and two encryption keys), linked to your account, with the language and the date of the last notification, and the recalls each saved car had at the last check, so that we only tell you about new ones. With those same notifications, if you choose it for each car, we also remind you before the dates you entered in “My car” (the vehicle inspection (ITV, ITP or MOT), the insurance, the rovinietă or the road tax, and the next service), as many days in advance as you choose.

Car details (optional): if you note them in “My car”, we keep your car's registration plate and VIN (chassis number), linked to your account, only so you have them at hand. We do not use them for the analysis or share them, and they are deleted if you remove them, delete the car or delete your account.

Repair photos and invoices (optional): if you add them to a repair in your logbook in “My car”, we keep those photos and PDF files in a private Supabase storage area (Frankfurt, Germany), linked to your account. Only you can see them; someone else only sees them if you show them or send them the report or the files. Invoices may contain personal data of yours or of the garage (name, address, registration number): cover it if you do not want to share it. We do not use them for anything else.

Car insurance (optional): if you keep it in “Check the insurance”, we store the PDF or the scanned photo of each car's insurance policy or certificate in the same private Supabase storage area (Frankfurt, Germany), linked to your account, so that you can show it from your phone. It usually includes your name, your ID number, your address, the registration number and the policy number. Only you can see it. The photo is straightened and scanned in your browser; we do not send it to any artificial intelligence service or use it for anything else. If you tap “Save on this phone”, a copy is also kept in your browser’s storage so you can open it without internet. That copy never leaves your phone and is deleted when you remove it, delete or replace the insurance, or sign out.

Interested garages: if you sign up your garage on “For garages”, we keep the garage name, the town or county, the contact person, the email or phone number you give us, the specialities you tick and the language of the page. If you email us instead, we keep your message with the same details.

Garages near you: if you tap “Use my location”, your browser rounds your position to an area about a kilometre across and only that area reaches Testigo, which uses it to ask OpenStreetMap's Overpass service (overpass-api.de, Germany) for nearby garages. If you type a town or a postcode, that text is sent to Nominatim, the OpenStreetMap Foundation's search service (United Kingdom), to find the place. Distances are worked out on your phone with your exact position, which never leaves it. We do not keep the area or what you type: only a temporary copy of OpenStreetMap's answer (up to a week), not linked to you, so the same search is not repeated. To prevent abuse we count searches with an encrypted fingerprint of your IP, which is deleted after about two days. The “Directions” and “See garages on the map” links open Google Maps, which handles your data under its own policy.

Technical errors: if a page fails, we keep an anonymous record of the failure (the technical message without personal data, the page and the type of browser, without your IP address or your account) so we can fix it. It is deleted after 90 days.

Providing this data is voluntary. Without the car details and symptoms we cannot generate the analysis, and without an email address you cannot create an account.

Technical data: to prevent abuse we limit the number of analyses. For this we store a code derived from your IP address (an irreversible encrypted digest, never the IP itself) and a counter.

What we use the data for and on what legal basis

To provide the service you request (analysing symptoms and saving your cars and history). Legal basis: performance of the service you request, Article 6(1)(b) GDPR.

To protect the service against abuse and control its cost through the analysis limit. Legal basis: our legitimate interest, Article 6(1)(f) GDPR.

To serve the site securely (browsing data). Legal basis: our legitimate interest in keeping the site working and protected, Article 6(1)(f) GDPR.

To improve the analyses with your ratings and measure use of the site through anonymous daily totals (visits, also by country, pages viewed, text searched in the fault, code and car lists — never e-mails, phone numbers, number plates or VINs —, analyses, translations and downloads) that cannot identify anyone. Legal basis: our legitimate interest in improving the service, Article 6(1)(f) GDPR.

To learn which known faults really happen most often, using the answers to “Has this happened to you?”. Legal basis: our legitimate interest in improving the information in the service, Article 6(1)(f) GDPR.

To notify you of new recall campaigns for your saved cars, if you turn on notifications. Legal basis: your consent, Article 6(1)(a) GDPR, which you can withdraw at any time by turning notifications off or blocking them in your browser.

To tell you how the service for garages is coming along and, once it exists, to offer it to you, if you sign up your garage. Legal basis: your consent, Article 6(1)(a) GDPR; you can withdraw it at any time by writing to nnikicurt2033@gmail.com.

We do not use your data for advertising, we do not build commercial profiles and we do not sell data.

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR): the AI report is only guidance, and you decide how to use it.

Who the data is shared with

Hosting, database and authentication providers: Netlify, which hosts the website and runs the server in the United States, and Supabase, which stores the database and the accounts in Frankfurt (Germany). Both process the data on our behalf.

Artificial intelligence provider: the data for each analysis, and the text of any report you ask us to translate, is sent to Groq, Inc. (United States), which processes it with open models (gpt-oss-120b and, if it is unavailable, Qwen 3.8 or gpt-oss-20b) to generate or translate the report. If Groq does not respond at that moment, the same data, and any questions you ask about a report, are sent instead to OpenRouter, Inc. (United States), which has it processed with the same gpt-oss-120b model by one of the compute providers it works with. Also, when a report says you can keep driving but the symptoms could point to a danger, the car and the symptoms are also sent to the other of these two services (Groq or OpenRouter) for a second safety check. If you use “Scan the dashboard” or upload a photo, a single image of the dashboard is also sent to Groq, which processes it with Qwen 3.8 to identify the lit warning lights and where they are in the image. The camera image is first checked only on your device to decide when to take the photo, and video is never sent. Before sending it, your browser shrinks it and removes its location and other hidden data, and Testigo does not store it. If you take a photo of a garage quote or invoice for Testigo to read (“Is this quote fair?” or the logbook in “My car”), that image is also sent to Groq, which processes it with Qwen 3.8 only to copy the work, the figures and, for a logbook invoice, the date and the mileage. Before sending it, your browser shrinks it and removes its location and other hidden data, and Testigo stores neither the photo nor the answer. According to its documentation, Groq does not keep requests or responses by default, except for up to 30 days when investigating failures or abuse, and the transfer is covered by the European Commission's standard contractual clauses.

AI assistants you authorize: if you connect an AI assistant to your account, it will be able to read your saved cars and your history until you withdraw the authorization. It will not be able to change anything.

Notification services: if you turn on notifications, each one is delivered through your browser's notification service (Google, Apple, Mozilla or Microsoft). Its content is encrypted: that service delivers it but cannot read it.

Leaked password check: when you create your account or change your password, your browser asks Have I Been Pwned’s free Pwned Passwords service whether that password has appeared in data breaches on other websites. It sends only the first 5 characters of an encrypted fingerprint (SHA-1 hash) of the password, never the password or your email, and the comparison happens in your browser, so the service cannot tell which password it is.

Garage maps: if you use “Garages near you”, Testigo's server sends OpenStreetMap (the Overpass service, at overpass-api.de, Germany, and the OpenStreetMap Foundation's Nominatim search service, United Kingdom) only the rough area about a kilometre across, or the town or postcode you type, without your IP or any other data about you, to find nearby garages.

Netlify, Supabase, Groq and OpenRouter are United States companies, and Netlify, Groq and OpenRouter process data there. These transfers rely on the GDPR safeguards included in their data processing terms, such as the European Commission's standard contractual clauses. You can ask us for more information at the contact email.

Email: the emails you send us are received by our email provider (Google), also a United States company, with the same safeguards.

How long we keep the data

Account, cars and history: until you delete them or delete your account.

Analysis limit counters: deleted automatically, usually within about two days.

Browsing data: kept by our hosting provider for the limited period set in its terms, for security and troubleshooting.

Feedback on reports: up to 12 months, after which it is deleted automatically. The daily usage totals contain no personal data; those for pages viewed and searches are deleted after 13 months.

Answers to “Has this happened to you?”: kept for statistics; after 12 months the cookie fingerprint is deleted and the answer becomes fully anonymous.

Repair prices: 5 years from the month of the repair; then they are deleted.

Recall notifications: the notification address is deleted when you turn notifications off, when you delete your account or when the notification service tells us it is no longer valid; the recalls seen for each car, when you delete the car or the account.

Interested garages: until you ask us to delete them and, at most, 24 months after you last gave or updated the details.

Repair photos and invoices: until you delete them, remove the repair, delete the car or delete your account. They are not included in the weekly backup.

Car insurance: until you delete or replace it, delete the car or delete your account. It is not included in the weekly backup.

Analyses you do not save: they are not kept in our database. The draft only stays in your browser for the session.

Backups: every week we save a copy of the database in a private store of our hosting provider (Netlify), so it can be recovered after a failure. We keep the last 8 copies. If you delete your account, your data disappears from the website at once and from the backups within 8 weeks at most.

Storage in your browser

We use your browser storage only for necessary functions or ones you ask for: keeping you signed in, remembering the language, the light or dark theme, the last car viewed and, if you choose the realistic 3D model, that choice, and keeping the analysis draft during the session. We do not use advertising or analytics cookies, so we do not need to ask for your consent for them.

If you press “Yes, it happened to me” on a fault sheet, we store a technical cookie (testigo_voter, 12 months) to count your answer only once; it is not created unless you press the button.

If you share a price or press “Not now”, your browser remembers which report or logbook entry it was, and your country and province, so as not to ask you again.

Emergency mode: if you save your breakdown cover number, it stays only in your browser and never reaches Testigo. If you share your location, it goes straight from your phone to the person or app you choose; Testigo neither receives nor stores it. So that it works with no signal, your browser keeps a copy of that page and of the warning-light guide, with no personal data.

Offline reports: when you open “My cars and history” with your account, your browser keeps a copy of your saved reports (the car, the symptoms and the report) so you can open them without signal in “My reports”. That copy never leaves your phone, belongs only to your account and is deleted when you delete the report, sign out or delete the account.

Your browser also keeps the 3D models and fonts in its cache so it does not download them again; they contain no personal data.

Fonts are served from our own server, without connections to third-party services.

Your rights

You can access, rectify and erase your data, object to its processing and request its restriction or portability by writing to nnikicurt2033@gmail.com. You can also delete cars and diagnoses one by one, or delete your whole account, from “My cars and history”.

We will reply within one month of your request, extendable in the cases provided for by the GDPR. We may ask you to confirm your identity.

If you believe we have not handled your rights properly, you can complain to the supervisory authority: in Spain, the Spanish Data Protection Agency (aepd.es); in Romania, ANSPDCP (dataprotection.ro).

Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), passwords encrypted by the authentication provider, access to saved data restricted to each user, two-step verification on administration accounts and removal of contact details from symptoms before they are sent to the AI.

Minors

Testigo is designed for adults and is not aimed at people under 16.

Changes to this policy

If we change this policy, we will publish the new version on this page with its date.