1. Who we are
EquityGo ("we", "us", "our") is a mobile app that helps users track their Personal Contract Purchase (PCP) finance agreements. Account creation, contract tracking, and mileage logging happen in the app; equitygo.co.uk provides free calculators, informational content, an email sign-up to be told when the iPhone app launches, and an optional email reminder for when you reach the 50% point on your PCP. We are the data controller for personal data collected through either.
For data protection enquiries, contact us at: privacy@equitygo.co.uk
Postal address: EquityGo, 5 Brayford Square, London, E1 0SG, United Kingdom.
EquityGo is a trading name of Sebastian Abbruzzese, registered with the UK Information Commissioner's Office (ICO) under registration number ZC272890.
2. What data we collect
On this website (equitygo.co.uk):we don't store anything you type into the calculators unless you ask for a reminder. Your figures are kept in the page address so you can bookmark or share your results, so they appear in our hosting provider's standard request logs (see usage data below). Beyond that, we collect only:
- iPhone waitlist: the email address you submit to be told when the iPhone app launches
- 50% reminder:if you ask us to email you when you reach the 50% point, your email address and the calculator figures you entered (contract start date, term, monthly payment, deposit, balloon payment, price, and your car's value and mileage figures if you entered them). We use the figures only to work out when to send the reminder and to link you back to your results
The website does not create an account and does not ask for a password.
In the EquityGo app, once you create an account there, we collect:
- Account data: email address and password (stored as a secure hash). If you sign in with Google or Apple instead, we receive the email address they share with us (with Apple, this can be a private relay address) and no password
- Finance contract data: car details, finance company name, contract start date, term, monthly payment, deposit, balloon/GMFV payment, and mileage allowance, entered by you
- Mileage log data: odometer readings and the dates you record them
- Market value entries: car market values and dates you log them, used to calculate your equity position
- Subscription data:if you buy EquityGo Pro, your subscription status and purchase history (which plan, when it started and renews, and the store's transaction reference). Payment itself is handled by Google Play or the App Store; we never see your card details
- Notification data: if you turn on push notifications, a push token that lets us send reminders to your device, linked to your account
Using the app without an account: you can use the EquityGo app without signing up. In that case, the contract, mileage and market value details you enter are stored only on your device. They are not sent to us and we cannot see or access them. If you later create an account or sign in, those details are uploaded to your account and handled as described above.
Usage data: standard server logs including IP address, browser type, and pages visited, retained for up to 30 days.
We do not collect payment card details, government ID, or sensitive personal data as defined by UK GDPR.
You don't have to give us any personal data. The website and the app both work without an account. An account (and so an email address) is only needed to back up and sync your data, or to buy EquityGo Pro.
3. Legal basis for processing
- Contract performance (Article 6(1)(b)): processing your account and contract data, managing an EquityGo Pro subscription you have bought, and sending notifications you have turned on are necessary to provide the service you signed up for
- Legitimate interests (Article 6(1)(f)): server logs for security monitoring and abuse prevention
- Consent (Article 6(1)(a)): holding your email address on the iPhone launch waitlist, so we can notify you when the iPhone app launches, and holding your email address and calculator figures for a 50% reminder you asked for and confirmed
4. How we use your data
We use your data solely to:
- Provide and maintain your EquityGo app account
- Calculate and display your contract metrics, mileage status, and equity estimates
- Unlock and manage EquityGo Pro if you subscribe
- Send push notifications and reminders you have turned on
- Email you once when the iPhone app launches, if you asked us to
- Email you once when you reach your 50% point, if you asked for and confirmed a reminder. That email also mentions the free EquityGo app
- Monitor for security incidents
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in section 5.
5. Third parties and sub-processors
Your account, contract and mileage data is stored in the EU, on servers in Frankfurt, Germany. The UK recognises the EU as providing an equivalent level of data protection.
We use the following providers to operate the service. Each processes data on our behalf under its data processing terms:
- Supabase Inc. (USA): database and authentication provider. Your waitlist email, 50% reminder details, and (once you have an app account) your account and contract data, is stored on Supabase-managed servers in Frankfurt, Germany (EU). Data is encrypted at rest and in transit. Account confirmation and password-reset emails are sent by Supabase's authentication system through Resend (below). Privacy policy at supabase.com/privacy.
- Vercel Inc. (USA): website hosting and content delivery. Pages are served to UK visitors from London; some background functions run in the USA. Processes request metadata including IP addresses and page paths. Privacy policy at vercel.com/legal/privacy-policy.
- Resend, Inc.(USA): sends our emails: app account confirmation and password-reset emails, and the website's 50% reminder emails. Emails are sent from its EU (Ireland) region. Processes your email address and the content of the email. Privacy policy at resend.com/legal/privacy-policy.
- RevenueCat Inc. (USA): manages EquityGo Pro subscriptions in the app. It receives a random account identifier (not your email or name) and the purchase details sent by Google Play or the App Store, so it can tell the app whether Pro is active. Privacy policy at revenuecat.com/privacy.
- Expo (650 Industries, Inc.) (USA): delivers app updates and routes push notifications to your device. Processes your device's push token and request metadata such as IP address. Privacy policy at expo.dev/privacy.
- Google Firebase Cloud Messaging (Google LLC) (USA) on Android, and Apple Push Notification service (Apple Inc.) on iPhone: deliver push notifications to your device using its push token. Google's privacy policy at policies.google.com/privacy.
If you sign in with Google or Apple, or buy EquityGo Pro through Google Play or the App Store, Google or Apple also process your data as independent controllers under their own privacy policies.
Where a provider based in the USA processes your data, the transfer is protected by the UK–US Data Bridge (for providers certified under it) or by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, as required by UK GDPR.
6. Data retention
If you signed up to be notified when the iPhone app launches, we keep your email only until we have sent that launch email, then delete it, or sooner if you ask us to remove it. We do not use it for anything else. If you ask for a 50% reminder, we keep your email address and figures until we send that one reminder, then delete them. If you unsubscribe, we delete them straight away, and if you don't confirm the reminder within 7 days, we delete them then. We retain app account and contract data for as long as your account is active. If you delete your account (from within the app), all associated data (contracts, mileage entries, and profile information, and push tokens) is permanently deleted immediately. Records of EquityGo Pro purchases held by RevenueCat, Google Play and the App Store are kept under their own retention policies and as required for tax and accounting. Data you enter while using the app without an account stays on your device until you delete it (Account tab, then Delete my data) or uninstall the app. Our own business and billing records are kept for as long as UK tax law requires (normally 6 years). Server logs are retained for up to 30 days.
7. Your rights under UK GDPR
You have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: correct inaccurate data
- Erasure: request deletion of your data: use the delete account option in the app, ask us to remove your email from the waitlist, or contact us. If you use the app without an account, we hold none of that data; use Delete my data in the app or uninstall it
- Portability: receive your data in a machine-readable format
- Restriction: ask us to stop processing your data in certain circumstances
- Object: object to processing based on legitimate interests
- Withdraw consent: if you joined the iPhone waitlist or asked for a 50% reminder, you can withdraw your consent at any time, using the unsubscribe link in our email or by asking us to remove your email. This does not affect anything we did before you withdrew it
We do not make decisions about you based solely on automated processing, and we do not profile you. The equity, mileage and settlement figures the app shows are estimates for your own information.
To exercise any of these rights, email privacy@equitygo.co.uk. We will respond within one month.
8. Cookies and performance monitoring
The website does not set cookies. There is no account login on the web; accounts and login exist only in the EquityGo app. We do not use advertising or tracking cookies.
The website stores three small items in your browser, none of which identify you:
- Theme: whether you chose light or dark mode, so the site remembers it
- App banner:on Android, the date you closed the "Get the app" banner, so it stays hidden for 14 days
- Visit source:the name of the site that sent you here (for example "google" or "facebook"), kept only until you close the tab. It is added to links to Google Play so we can see which channels lead to app installs. It is never sent to us with anything that identifies you
You can clear these at any time in your browser settings, or use a private window to stop them being stored.
We use Vercel Analytics and Vercel Speed Insights to collect anonymised traffic and performance metrics (page views, page load times, Core Web Vitals). Both services are cookieless and privacy-preserving: data is not linked to individual users and contains no personally identifiable information.
9. Security
App account passwords are stored as bcrypt hashes and never in plaintext. Data is encrypted at rest and in transit (TLS). We follow responsible disclosure practices for security vulnerabilities.
10. Complaints
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
11. Changes to this policy
We may update this policy from time to time and will change the date at the top when we do. If we make a significant change to how we use your data, we will tell app account holders by email before it takes effect.