Privacy Policy

Who is responsible

Mark Linetskiy operates Marque as an individual and is the data controller for Marque's processing of personal data. For privacy questions, contact enquiries@marqueapp.co.uk.

Records stored on your device

Marque stores vehicle profiles, registration numbers, vehicle details, dates, reminder settings, your optional profile name and vehicle photos on your device. Log records can include expenses, servicing, notes and receipt images. These records are used to organise your vehicles and provide the features you choose, and remain locally until you remove them. Device backups and exported copies are separate.

A Marque account is not required. A local profile is not an online account, and Marque does not automatically upload your vehicle photos, Log receipts or Vault files to a Marque document-storage service.

Private Vault

Vault is a Plus feature. Imported Vault files are encrypted locally. Vault security uses a PIN and device-protected key storage; supported biometric authentication can be enabled through iOS. Marque does not receive your Face ID or Touch ID templates. File previews are hidden while Vault is locked.

Exporting a file gives the app or destination you select a copy outside Vault. That copy is no longer controlled by Marque. Encryption is not a substitute for keeping your device secure or keeping your own copies of important documents.

Vehicle lookup

When you request a vehicle lookup or refresh, the app sends the registration number and the requested information type to the configured Marque backend. The backend obtains available information from vehicle-data services and returns it to the app. Your network connection also exposes technical information, including your IP address, to the services handling the request.

The backend runs on Cloudflare. For requests not served from cache, it obtains MOT information from the Driver and Vehicle Standards Agency (DVSA). General tax lookup is not currently available. An unavailable tax status is not confirmation that a vehicle is taxed; check the official service when needed.

Lookup caching and abuse prevention use keyed hashes of registration numbers and IP addresses. The cached vehicle-data payload excludes the registration field. These safeguards do not make all related data anonymous.

Cached lookup responses have a configured lifetime of 24 hours, or five minutes for degraded results. Cache expiry does not establish the retention period of separate infrastructure or vehicle-provider records.

Optional recovery email

If you choose email recovery, your email address and verification purpose are sent to the Marque backend so it can send a one-time code. Verifying a code sends the email address, challenge identifier, purpose and code back to the backend. The service needs to process your address to deliver the message.

The verification service stores keyed hashes of the email address, IP address and code, together with the verification purpose, timestamps and attempt information. Your readable email address is passed to the email-delivery service to send the code. Security records are used to verify codes, enforce attempt limits and prevent misuse. Expiry of a code is separate from deletion of the associated security records.

A code is valid for 10 minutes. Its challenge record becomes eligible for deletion once more than 24 hours have passed since the code expired or was used. Cleanup is scheduled daily at 03:17 UTC and removes eligible challenge records and expired rate-limit records on the next successful run. A failed or delayed run can postpone deletion; code expiry is not a promise of immediate erasure.

The recovery address is also stored in protected storage on your device. Recovery does not create an online Marque account or upload your documents. It depends on the existing device security and locally retained Vault keys; an email code alone cannot restore deleted files or recover a Vault on a different device.

Recovery email is not a marketing subscription.

Apple purchases

Apple handles payment for Plus subscriptions and one-time background purchases. Marque uses StoreKit purchase and entitlement information to unlock or restore access. Payment-card details are not entered into Marque. Apple processes purchases under its own privacy policy.

Permissions and device services

Marque asks for camera or photo access when you add an image, notification access when you enable reminders, and calendar access when you enable calendar export. Optional biometric authentication is handled by iOS. You can manage these permissions in iOS Settings; refusing a permission can prevent the related feature from working.

Calendar export writes vehicle dates to a calendar on your device. The calendar provider and any sync you enable for that calendar can process those events under their own terms. This is separate from Marque storing your vehicle records locally.

Product news and launch updates

If you join the Marque updates list, we collect your email address, chosen phone operating system, vehicle-count range, the source of the sign-up and a record of when you gave consent. We use this information to send requested product news and launch availability updates, and to understand the broad mix of people interested in Marque.

The website stores these details in Cloudflare D1. A notification containing the sign-up details is also sent through the website's Cloudflare email service to the Marque enquiries inbox; the database records notification status and a message identifier when available. This is separate from the app's recovery-email service.

Joining the list is optional. You can withdraw your consent or request removal by emailing enquiries@marqueapp.co.uk.

Support messages and service providers

If you contact support, the email service and Marque process your address, message and any information you choose to include to respond to your request. Do not send passwords, Vault PINs, one-time codes or unredacted private documents.

The enquiries mailbox uses Microsoft 365 through GoDaddy, with Proofpoint email security. These providers process support correspondence and website sign-up notifications delivered to that mailbox. This mailbox service is separate from the Cloudflare service used to send the app's recovery codes.

Apple, device-calendar providers and the services operating the website, backend, vehicle lookup and email delivery handle data for their respective functions.

Protection by third parties

We require third parties receiving personal information from Marque to protect it to a standard at least equivalent to this Privacy Policy and Apple's App Review Guidelines. This requirement covers registration numbers used for online MOT lookup, recovery-email data, and website and support information.

Providers processing information on our behalf are subject to applicable data-processing terms covering permitted purposes, confidentiality, appropriate security and safeguards for further processors. DVSA handles MOT lookup under its own statutory data-protection responsibilities.

These online services do not automatically receive your locally stored vehicle photos, receipt images or Vault documents. Copies you choose to export or send separately are handled as described above.

Why we use personal information

Providing the service you request. We rely on contractual necessity where processing your information is necessary to provide Marque under our agreement with you. This includes requested vehicle and MOT lookup, optional recovery-email verification, checking purchase access and support needed to deliver those services. We use only the information needed for that purpose. This basis does not cover information about other people.

Security, website operation and general enquiries. We rely on our legitimate interests in preventing misuse, keeping services available and answering enquiries that are not necessary to perform a contract. This covers proportionate technical connection data, verification-attempt and rate-limit records, and the contact details and message needed to respond. We balance those interests against your rights and limit the information used and how long it is kept. You can object by contacting us; we must consider your circumstances and stop unless we have a lawful reason to continue.

Product news and launch updates. We rely on your consent to use the details submitted through the updates form for the purposes described there. You can withdraw consent through the enquiries address. Withdrawal does not affect processing that was lawful before withdrawal. An iOS permission is a device-access control, not by itself consent to unrelated use of your personal information.

Privacy requests. Where UK GDPR applies, we process the information needed to verify and answer requests under Articles 12 to 22, including access, correction and eligible erasure. The basis is compliance with those legal obligations, not a general permission to retain unrelated information.

Retention and deletion

Mark Linetskiy is responsible for monthly manual reviews of support correspondence and the website updates list. Routine support emails and attachments will be deleted 90 days after the issue is closed, unless a documented legal obligation or dispute justifies keeping them longer.

The website updates list will be reviewed no later than six months after public launch to decide which records should be removed or require renewed consent. Withdrawing consent will stop further updates once the request is processed. Removal is handled manually, not through an automatic unsubscribe facility.

For eligible records controlled by Marque, valid deletion requests will be completed within 30 days, or sooner if applicable law requires it. We will explain any legal exception. We will respond to privacy requests without undue delay and within one calendar month, subject to any extension permitted by law.

These periods do not mean every backup, email-delivery log or provider record is erased immediately. Active records, recoverable mailbox copies, infrastructure backups and provider records are separate; requests must be handled with those copies in mind. The manual support-deletion policy does not set the providers' internal retention periods. Expiry of a cache entry or email code is not proof of backup erasure.

Exporting and deleting local data

Profile → Export local data creates a report of vehicle details, Log records and selected settings. It does not include vehicle photos, receipt images, Vault files, PINs or encryption keys and is not a complete backup. Individual file exports must be handled separately.

Profile → Delete all local data removes vehicle records and the app-managed vehicle photo and document files, cancels vehicle reminders and clears Marque calendar export. It does not cancel Apple subscriptions or delete purchases. It does not erase copies you have exported, messages in email services or server-side security records.

Removing the app is not a guarantee that iOS Keychain entries, device backups or copies held by other apps are erased. Manage external copies and backups through the relevant service. Marque support cannot restore local documents that no longer exist.

International processing

Our hosting and email providers operate internationally and may process information outside the UK, including in the United States. We do not promise UK-only storage. A restricted UK transfer requires an applicable adequacy decision or other lawful transfer mechanism, such as approved contractual safeguards.

For processing covered by its terms, Cloudflare's Data Processing Addendum provides standard contractual clauses with the UK Addendum for restricted UK transfers. GoDaddy's addendum also contains transfer provisions for processing within its scope. Microsoft 365 and Proofpoint services have separate applicable terms; the GoDaddy addendum is not a statement that it covers every provider's processing. Contact the enquiries address for information about the safeguards relevant to your information and how to obtain a copy, subject to necessary redactions.

Your privacy requests

Contact us to ask about access, correction or deletion of personal data processed through Marque's online services, or to withdraw consent for website updates. Depending on applicable law, you may also have rights to restriction, objection and data portability. These rights have legal limits; local app deletion is not a request to erase records held by a separate service.

You can raise a concern with the relevant data-protection authority. In the UK, this is the Information Commissioner's Office.

Contact

For privacy questions, contact enquiries@marqueapp.co.uk. For help using Marque, visit Support.