In short: VIRA keeps your vehicle records on your own device. The developer runs no server, has no user accounts and receives none of your vehicle data. VIRA contains no advertising and no analytics or tracking. Information leaves your device only when you choose to switch on cloud sync (to your own OneDrive or Google Drive), switch on vehicle lookup (to the UK government's DVLA and DVSA services), buy VIRA Pro (through Google Play), or send an email to the developer (a feedback message or a licence request). The only personal information the developer ever holds is what you send in such an email.
1. Who we are
VIRA is published by BlackStar Devs (Anthony Black), United Kingdom. In this policy, "we" and "the developer" mean BlackStar Devs. For any question about this policy, or to ask about information we hold about you, email work@tonyblack.co.uk.
2. What VIRA stores, and where
Everything you enter is stored on your device, in the app's private storage:
- Vehicle details: type, make, model, registration, VIN, colour, tyre details, MOT, tax, insurance and service dates, sold and SORN dates.
- Service, fuel and charging records, including garage names, costs and mileage.
- Garages and workshops you record, including any contact details you type in (phone, email, address, website, notes).
- Breakdown cover and insurance details you record, including membership and policy numbers.
- Photos and documents you attach to a vehicle.
- Your settings (for example notification preferences and custom vehicle types).
- If you use VIRA Pro: your licence key, and on Android the Google Play purchase status and order number (see section 6).
This information stays on your device unless you use the optional features described in sections 4, 5, 6 and 7. We do not receive a copy of it.
3. App password, recovery code and fingerprint unlock
VIRA asks you to create a password to open the app. Only a salted, one-way hash of the password is kept, in your device's secure storage (Android Keystore, or the Windows credential store). The same applies to the optional recovery code. Neither is sent anywhere.
- Fingerprint, face or Windows Hello unlock (optional): your device, not VIRA, checks your fingerprint, face or PIN. VIRA never sees or stores any biometric data. If you switch this on, VIRA keeps a copy of your password in your device's secure storage so it can open the app once your device confirms it is you. It is never sent anywhere.
- Remember password (optional): if you tick this on the login screen, VIRA keeps your password in secure storage to fill in the login box. This makes the lock weaker, because anyone using your device's VIRA can then log in. Unticking the box forgets it.
Please note: the password locks the app. VIRA does not add its own encryption to the stored records, photos or documents. They are protected by your device's own security, such as the screen lock and device encryption. If you forget your password and have neither a recovery code nor a cloud copy, your data on that device cannot be recovered.
4. Optional cloud sync (OneDrive and Google Drive)
If you choose to sync, VIRA signs in to your own Microsoft or Google account and copies your VIRA records, photos and documents to it, so that your devices can stay in step. You can switch on automatic sync, which does the same each time VIRA is unlocked; it is off by default, and it can be limited to Wi-Fi. To do that VIRA asks your device whether it is on Wi-Fi, wired or mobile data; it does not read network names.
| Provider | What VIRA can access | Where the files go |
|---|---|---|
| Microsoft OneDrive (personal Microsoft accounts) | Only VIRA's own app folder in your OneDrive | Apps/VIRA |
| Google Drive | Only files VIRA itself creates (the drive.file permission). VIRA also reads your Google account email address so it can show which account is signed in. | A visible folder called VIRA Sync in My Drive |
- The data travels directly between your device and the provider over an encrypted (HTTPS) connection. It does not pass through any server of ours.
- Stored in the provider's cloud, the files are covered by that provider's own privacy policy and security, and they count towards your storage allowance. VIRA does not add its own encryption to them.
- Sign-in tokens are kept in your device's secure storage and are not themselves synced.
- VIRA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. It is used only to provide the sync feature you asked for, and is not transferred to others, used for advertising or read by people.
You can stop at any time by not syncing, or by revoking VIRA's access in your Microsoft or Google account settings. Deleting the Apps/VIRA or VIRA Sync folder removes the cloud copy.
You can also export a sync file (.vira) by hand and move it yourself. Where it goes is then up to you.
5. Optional vehicle lookup (DVLA and DVSA)
Vehicle lookup is off by default. If you switch it on and press Look up on the Add vehicle screen, the registration you typed is sent from your device, over HTTPS, to the UK government service or services you have enabled:
- DVLA Vehicle Enquiry Service (Driver and Vehicle Licensing Agency)
- DVSA MOT history (Driver and Vehicle Standards Agency)
Those services return vehicle details such as make, model, colour, fuel type, engine size, MOT and tax status. VIRA shows them for you to check and copies in only the values you tick. Your API keys for these services are stored in your device's secure storage and are not synced.
The registration is sent straight to those services, not through us. Like any internet request, it also reveals your device's IP address to them. They handle it under their own privacy notices. Because a registration number can be linked to a vehicle's keeper, please use lookup only for vehicles you are entitled to look up.
6. VIRA Pro: purchase and licence keys
VIRA is free to use. VIRA Pro is a one-off purchase that removes the limit on the number of vehicles.
- Android: the purchase is made through Google Play and is handled by Google under Google's privacy policy. We do not receive your payment details. VIRA asks Google Play whether you own VIRA Pro, and keeps the result and the Google Play order number on your device, so Pro keeps working offline.
- Windows: a Windows licence key is requested from the developer by email (see below). VIRA does not take payment itself.
- Licence keys: a key is a short signed text that VIRA checks on your device, with no internet connection. It contains the email address it was issued to, the date it was issued and the platform it is for. Anyone who holds the key can read those details, so treat it like a receipt. Keys are not sent anywhere by VIRA.
If you request a licence key. VIRA opens a pre-filled email in your own email app. You choose whether to send it. It contains your Google Play order number, the VIRA version and platform, and your email address is visible to us as the sender. We use this only to check the purchase and send you the key (and, for an Android phone user, the Windows installer). We keep a record of each key issued, with the email address, date, platform and order number, in a private file held in the developer's own Google Drive account and on the developer's own devices. This lets us re-send a lost key or help with a problem, and is kept for as long as your licence is in use. If you ask us to delete it we will; because keys are checked on your device, deleting the record does not stop a key you already hold from working.
7. Feedback and other emails to the developer
The Feedback screen does not send anything itself. It opens a pre-filled email in your own email app (or lets you copy the text), and nothing is sent until you press Send. The email contains a reference number, the VIRA version, your platform (Android or Windows), the type of message (feature request or issue report) and whatever details you type. Your email address is visible to us as the sender. We use it only to read and answer your message. We keep these emails for as long as needed to deal with your request, and delete them on request.
8. Notifications, camera, files and exports
- Notifications: due-date reminders are created and shown by your device. They are not sent from any server.
- Camera and photo access: used only when you choose to take or add a photo to a vehicle. The picture is stored in VIRA's private storage on your device.
- Files: VIRA reads a document or sync file only when you pick it, and writes a file only when you export one.
- Reports, sale packs and calendar files: PDFs (including the sale pack) and calendar (
.ics) files are produced on your device, from your records, only when you ask. They are saved or shared where you choose. If you give one to someone else, that is your decision, so check what it contains first.
9. What we do not do
- We do not collect, receive, sell or share your vehicle records, photos or documents.
- VIRA has no advertising, no analytics, no crash reporting and no tracking, and does not use advertising identifiers.
- VIRA has no user accounts with us.
- We do not sell or share the email addresses and order numbers you send us, and use them only for the purposes above.
10. Keeping and deleting your information
- Delete any record, photo or document inside VIRA at any time.
- Settings, Forgot password, Erase this device removes all VIRA data, settings, sign-ins, keys and Pro licence from the device. Uninstalling the app also removes its local data.
- Copies in OneDrive or Google Drive are not removed by this. Delete them in your own cloud account.
- Information you have emailed to us (section 6 and 7) is held by us until you ask us to delete it or, for feedback, until it is no longer needed.
11. Children
VIRA is a general-purpose vehicle record keeper and is not directed at children. We do not knowingly collect information from anyone, children included.
12. Your rights
Under UK data protection law you can ask what personal information we hold about you, ask us to correct or delete it, and object to how we use it. In practice this means the email details in sections 6 and 7; for everything else in VIRA, we hold nothing, and you control it directly in the app and in your own cloud and government accounts. Write to work@tonyblack.co.uk. We use the email details to perform the licence we have supplied to you, and to respond to your messages, which is in our legitimate interest. You can also complain to the Information Commissioner's Office (ico.org.uk).
13. Changes to this policy
If VIRA's handling of information changes (for example, if a feature is added that sends data anywhere new), this page will be updated and the date at the top changed before the new version is released.