Who we are
RegDex is operated by Zyfy, based in the United Kingdom. For the purposes of
UK GDPR, we are the data controller for personal data collected through the app.
What data we collect
- Account data: when you sign in with Apple or Google, we store your email
address and an identifier from that provider. We do not set or store a password — sign-in
is handled entirely by Apple or Google. If Apple shares your name with us at sign-up, we
use it once, to send ourselves an internal notification that a new account was created —
we do not store your name.
- Vehicle lookups: the registration numbers you search are linked to your
account, so your Garage can show your search history and so free/paid lookups are tracked
correctly against your balance.
- Purchase history: if you buy credits or an MOT report, or claim a free
credit by watching an ad, we record the transaction (amount, type, and the store's
transaction ID) against your account to maintain your balance. Purchases themselves are
handled entirely by Apple or Google — we never see or store your card details.
- Camera: the number-plate scanner processes the photo on your device only,
to read the plate text. The photo itself is never uploaded or stored — only the registration
text you confirm is used for a lookup.
- Advertising: RegDex shows ads via Google's Mobile Ads SDK (AdMob),
configured to request non-personalised ads only — we do not use App Tracking Transparency
and do not track you across other apps or websites. Google's SDK may still collect some
technical data directly (such as an IP-based approximate location, device identifiers used
for fraud prevention and frequency-capping, and ad performance data) under its own standard
behaviour — see Google's disclosure for details. This is Google's own collection, not something RegDex requests or has access to.
- Request logs: your IP address and the endpoint called are logged with each
request for security monitoring and abuse prevention, retained for up to 90 days.
What we don't collect
RegDex does not use location services, does not use any analytics or crash-reporting SDK
(Firebase, Sentry, or similar), and does not read your contacts, photos, or any other app's
data.
How we use it
- To provide the lookup service and maintain your credit/MOT report balance.
- To show you your own search history in the Garage.
- To serve non-personalised ads, through Google's Mobile Ads SDK.
- To monitor service health and detect abuse.
Legal basis (UK GDPR)
- Contract: processing necessary to provide the lookups and purchases you request.
- Legitimate interests: security monitoring, fraud prevention, and service reliability.
Data retention
Account data and purchase history are retained while your account is active. You can delete
your account at any time from Settings in the app — this removes your account data promptly,
subject to any legal retention requirements (for example, transaction records Apple or Google
require us to keep).
Third parties
- Apple / Google: sign-in and in-app purchases. Subject to their own privacy policies.
- Google Mobile Ads SDK (AdMob): ad serving, non-personalised. Subject to Google's own privacy policy and data disclosure linked above.
- Hosting provider: infrastructure hosted in the UK/EU.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data — you can do this yourself from Settings in the app, or contact us.
- Object to processing based on legitimate interests.
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, contact us.
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the
most recent revision.