Privacy policy

The controller of your personal data is Valery Mihaylov, Sofia, Bulgaria. Contact: support@plugnest.app.

• You can browse the map and plan routes without an account.
• What you contribute — check-ins, reviews, photos — is public, under the name you signed in with.
• Your favorites and saved routes are private to you.
• Your location is used on your phone. It reaches our servers only when you report on a station, and only to check you are there; your exact position is then discarded.
• No advertising, no tracking, no analytics, and we do not sell data.
• You can delete your account in the app at any time.

When you first open the app it creates a guest identity: a random identifier with no name or email attached. It lets the app read station data from our servers. Favorites you save as a guest stay on your phone.

You can sign in with Apple, with Google, or with a one-time code sent to your email. We receive and keep your email address (with Sign in with Apple this may be a private relay address Apple creates for you), your name if the provider shares it (with Google, also a link to your profile picture, which PlugNest does not display), and an identifier from the provider that links your account to it.

Your name is used as your public display name on what you contribute. If your provider shares no name, your contributions are shown as from a PlugNest driver.

These are visible to everyone who uses PlugNest, together with your display name and the time you posted them:

• Check-ins and reports — that a station worked or was broken, and what was wrong with it.
• Reviews — your star rating and any text you write.
• Photos of stations. Please avoid people's faces and number plates.
• Which amenities a station has, such as toilets or a café.
• Stations you add and corrections you suggest become public once a moderator approves them. Until then only you and the moderator see them, including any note you wrote.

• Your favorite stations.
• Your saved routes, including their start and end points. If you share a route, anyone with the link can see it — the route, not who you are.
• The car you chose and your route settings.
• People you block, and the reports you send about reviews or photos. Moderators see a report, not who you blocked.

With your permission, PlugNest uses your phone's location to show nearby stations and to plan routes. That happens on your phone.

When you check in or report on a station, your position is sent with the report so our server can confirm you are within 100 metres of it. Once confirmed, the report is stored with the station's position, not yours.

Map search, directions and the weather used to estimate range are provided by Apple, which receives the places involved to answer those requests.

You can turn location access off in your phone's settings. Browsing still works; reporting on stations does not.

To keep reports genuine, the app uses Apple's App Attest to confirm it is running on a real device. We store an identifier for the key Apple creates for this, not your device's hardware identifiers.

If you allow notifications — for example, to hear when a station you added is approved — we store your device's push token and app language, and the notifications we send you.

If you sign in by email, we send you a one-time code. Those emails are delivered by our email provider.

If you join the launch list on plugnest.app, we keep your email address, the language you used and when you signed up, and send you one email when the app is released. We do not send other marketing email. To be removed from the list, email support@plugnest.app.

• To provide PlugNest to you — your account, syncing your favorites and routes, showing your contributions — because it is necessary for the service you asked for (GDPR Article 6(1)(b)).
• To keep station information accurate and protect it from abuse — the 100-metre check, device checks, moderation, and keeping contributions after an account is deleted — because we have a legitimate interest in a reliable map (Article 6(1)(f)).
• Location and notifications, because you allowed them (Article 6(1)(a)). You can withdraw that in your phone's settings at any time.
• The launch list, because you asked to join it (Article 6(1)(a)). You can withdraw by asking us to remove you.

We use these providers to run PlugNest. They process data on our behalf and only for that:

• Supabase — database, sign-in, file storage and server functions, hosted in Frankfurt, Germany.
• Apple — Sign in with Apple, push notifications, device checks, maps, directions and weather, and the support@plugnest.app mailbox (iCloud Mail).
• Google — sign-in, if you choose it.
• Resend — delivery of sign-in emails and the launch email.
• Vercel — hosting for plugnest.app.

Our database is in the EU. Some providers above are based in the United States or may process data there. Where they do, the transfer relies on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

• Account data, favorites and saved routes: until you delete your account.
• Contributions: kept after your account is deleted, without your name — see below.
• Guest identities: these hold nothing about you; we may remove inactive ones.
• The launch list: until you ask to be removed, and no longer than 12 months after the app is released.
• Technical logs our providers keep, which can include IP addresses: a short period, for security and troubleshooting.
• Emails you send to support@plugnest.app: while we help you, and no longer than two years after. Ask us and we delete them sooner.
• Backups: deleted data can remain in encrypted backups until they expire, up to 30 days.

In the app, open Profile and choose Delete account. This deletes your account, your email and name, your favorites, saved routes, notification settings and device records straight away. If you used Sign in with Apple, we also ask Apple to remove PlugNest's access to your Apple ID.

Check-ins, reviews, photos and station reports you made stay on the map without your name, because other drivers rely on them to know whether a charger works. Once your account is deleted they are not linked to you. If you want something specific removed, email us.

Under the GDPR you can ask to access your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Write to support@plugnest.app; we answer within one month.

You can also complain to the Bulgarian data-protection authority, the Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, cpdp.bg — or to the authority where you live.

PlugNest is meant for drivers and is not directed at children under 14. We do not knowingly collect their data.

Data is encrypted in transit. Access to it on our servers is restricted row by row, so each account can reach only its own private data.

If this policy changes, we update the date below. If a change materially affects how your data is used, we will tell you in the app first.