Legal

Privacy Policy

Last updated: September 2026 · applies to the "Aiways Community" app and this website.

1. Controller

This instance is operated independently. Operator details have not been configured yet.

Full operator details in the legal notice.

2. Which data we process

• Account data: email address, display name and password (stored only as a cryptographic hash).
• Vehicle and telemetry data: vehicle identification number (VIN), state of charge (SoC), range, voltages/currents, cell and temperature values, tire pressure, charging and driving history as well as location data (GPS) of the vehicle.
• Device/connection data: the vehicle's Bluetooth identifiers, status of the LTE-Bridge (battery level, operating mode) as well as technical logs for troubleshooting.
• Profile picture (optional): a picture you take or choose yourself. It is downscaled on your device, stored with your account and shown only to you; you can replace or remove it at any time.
• Camera: for scanning the provisioning QR code and, only when you choose to, for a profile picture. No other images are stored or transmitted.

3. Purposes & legal bases

We process this data to provide you with the telematics functions (status display, history, remote commands to the vehicle), to manage your account and to enable sharing a vehicle with people you invite.

• Art. 6(1)(b) GDPR – performance of the user relationship (provision of the app functions),
• Art. 6(1)(f) GDPR – legitimate interest (operation, security, troubleshooting),
• Art. 6(1)(a) GDPR – consent (e.g. device permissions for location, Bluetooth, camera).

4. App permissions (Android)

• Location: for the vehicle position and because Android only permits a Bluetooth scan with the location permission.
• Bluetooth: to send commands directly to the vehicle.
• Camera: for scanning the QR code during setup and, only when you trigger it, for a profile picture.
• Internet/network: for communication with the self-hosted backend.

5. Storage & recipients

The data is stored on a self-hosted server (backend) of the controller. No advertising networks and no third-party tracking or analytics SDKs are used. Data is disclosed only to people you yourself invite as co-users of a vehicle. For the mobile data transmission of the LTE-Bridge, a mobile network operator is used as a technical carrier.

6. Retention period

We store your data for as long as your account or the associated vehicle exists. On request, we delete your account and the data associated with it.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object, as well as the right to lodge a complaint with a data protection supervisory authority. To exercise these rights, please contact us using the contact details above.

8. Children

The app is not directed at children and is not intended for use by children.

9. Account and data deletion

You can delete your account and the associated data yourself at any time — online at /konto-loeschen (sign in with your app credentials) or by an informal email to the contact named above.

10. Changes

We may amend this privacy policy if functions or legal requirements change. The currently applicable version is available at this address.