Privacy Policy
Fillo is a paid, offline car expense tracker for iPhone and iPad. This policy describes what the app stores and what it does not collect.
Effective date: September 1, 2026
What Fillo lets you enter
Fillo is a tool for recording your own car ownership information. You may choose to enter:
- Vehicle details, such as make, model, year, plate number, and VIN
- Fuel-ups and EV charging sessions, with odometer readings, quantities, prices, and notes
- Maintenance, repairs, and ownership expenses such as insurance, registration, parking, tolls, and financing
- Reminders by date, odometer, or both
- Documents in Glovebox — photos, scans, or PDFs such as registration papers, insurance policies, and receipts
- Optional settings such as Privacy Lock and Privacy Mode preferences
All of this is data you enter for your own records. None of it carries an identity: there is no name, email address, phone number, or payment method collected by the app.
Where your information is stored
Fillo keeps the live Garage — your records, attachments, and automatic backups — in the app’s own local storage on your device (the app container, including its Application Support directory). Fillo runs no servers and hosts no database.
What the developer receives
From the app itself, nothing. Fillo does not transmit your records, attachments, usage data, or crash reports to the developer or to any third party. The app contains no analytics SDK, no advertising SDK, no crash-reporting service, no authentication provider, and no cloud storage integration.
Accounts
There are no Fillo accounts. The app works fully after installation without any sign-in. No accounts means no account data to protect, sell, or lose.
App Store purchase
Fillo is sold as a paid App Store download. Apple processes the purchase before installation under Apple’s terms. Fillo has no in-app purchase, subscription, receipt check, or purchase-entitlement service, and the developer does not receive your payment card number or purchase history from the app.
Questions about App Store billing, refunds, purchase history, or the Apple Account used to acquire Fillo are handled by Apple. Re-downloading the app does not restore Garage records from a Fillo server; create a Fillo Backup before deleting the app or changing devices.
Data sales and sharing
Fillo does not sell, rent, share, or transfer your data. There is no party to sell it to and no mechanism to send it anywhere.
Network access
Fillo’s core features — reading, creating, editing, deleting, calculating, reminders, backups, exports, and the Vehicle Passport — work without a network connection. The app makes no network connections on its own and fetches no content, exchange rates, or service schedules.
Network activity can only occur through iOS system services that you initiate, such as opening Fillo’s Support or Privacy pages, visiting the App Store, sharing an export through Mail, AirDrop, or Messages, or saving a Fillo Backup to iCloud Drive or another Files provider. What happens in those services is governed by the service you choose, not by Fillo.
Device permissions
Fillo requests only these permissions, each optional:
- Camera — to capture receipts, vehicle cover photos, and glovebox documents you choose to save on this device.
- Face ID / biometrics — only when you enable Privacy Lock or confirm a protected deletion.
- Notifications — for local reminders. If you decline, Fillo keeps all reminder data and shows due states inside the app.
- File access — through the iOS document picker, only when you choose to save or restore a Fillo Backup.
Fillo remains fully usable if you deny any or all of these permissions.
Photos, files, and document attachments
Attachments you add — photos, scans, PDFs — are compressed where appropriate and stored as files inside the app container on your device. They are included in Fillo Backups and in Recently Deleted handling. Fillo never uploads attachments anywhere.
Backups
- Automatic backups: Fillo keeps up to seven automatic daily backups inside the app container. These exist only on your device.
- Fillo Backups: complete, restorable archives — optionally password-protected — saved wherever you choose: On My iPhone, iCloud Drive, or another Files provider. Where you store them determines who can access them; that choice and its consequences are yours and Apple’s, not Fillo’s.
- iCloud Device Backup: if you enable iCloud Device Backup in iOS settings, Apple may include Fillo’s app data in your device backup. Fillo does not control or promise Apple’s backup behavior.
Data retention
Fillo keeps your records until you delete them or remove the app. Items you delete — records, Glovebox entries, or entire cars — stay in Recently Deleted for 30 days and are then permanently purged from the device.
Deleting your data
- Delete individual records or Glovebox entries from inside the app.
- Delete an entire car to move it and its dependent records to Recently Deleted.
- Delete the Fillo app to remove its entire local storage, including attachments and automatic backups. Because Fillo runs no servers, no copy remains with Fillo.
- Fillo Backups you saved to iCloud Drive, On My iPhone, or another Files provider are not removed by uninstalling the app — delete those files yourself where you stored them.
Support communications
If you email Fillo support, the developer receives the email address, message, and attachments you choose to send. This information is used to answer your request and is retained in the support mailbox as needed for follow-up and recordkeeping. Do not send vehicle records, receipts, registration documents, backup files, payment details, or other sensitive information unless it is necessary for your request.
Children’s privacy
Fillo is a general-audience personal tool and is not directed at children. The app itself collects no data from children or adults and has no accounts.
Changes to this policy
If Fillo’s behavior changes in a way that affects this policy, the policy and its effective date will be updated on this page before the corresponding app version ships.
Contact
Questions about this policy: email fillo@dexterbrylle.com.
Related: the support page answers practical questions about backups, exports, and deletion, or return to the Fillo landing page.