Privacy policy

Last updated: 8 October 2026

1. Data controller

The controller of the personal data collected through PienoGo is AK-DEV, Italy.

For any privacy question or request, write to privacy@pienogo.it.

2. What data we process

Using the app without an account

You can use PienoGo without signing up. To show stations near you or along a route, the app sends our servers your device location (only if you allow it) or the places you search for, together with your fuel type and search filters. We use this to answer the request. Nothing from guest use is stored in an account or profile. Server logs record your IP address, the time and the requested page, without coordinates or search parameters. Technical statistics about route calculations contain no personal identifiers.

Preferences, language and vehicles you save without an account stay on your device. When you create an account or sign in, the vehicle and favourite stations saved on the device are copied to your account (a vehicle saved while registering is held with the pending registration until you verify your email).

Account

If you create an account we process: your email address, your password (stored only as a hash) or your Google account identifier if you sign in with Google, your preferred language, your price-email preference, verification and password-reset codes, and sign-in sessions, which may include a device label.

Data you save to your account

• Vehicles: name, average consumption, tank capacity, fuel type.
• Favourite stations.
• Saved trips: name, fuel type, start, destination and stops (coordinates and labels), distance and duration.

Opening a station in a map app

If you choose “open in” a map app (Google Maps, Apple Maps or Waze), the station’s coordinates are passed to that app, and its own privacy policy applies.

Smart Trip

To apply the monthly Smart Trip allowance we record, for each use, a route identifier and the date.

Price emails

If you turn them on, we email you when prices change at your favourite stations. We keep a record of each price email sent (delivery status, time and any error) for as long as the account exists. You can turn the emails off at any time in your profile.

Technical data

Our servers log technical request data (IP address, date and time, requested address without search parameters, so no coordinates) for security, abuse prevention and troubleshooting.

3. Purposes and legal bases

• Providing the service you ask for (station search, routes, account and saved data): performance of a contract (Art. 6(1)(b) GDPR).
• Device location: we use it to provide the service you request (Art. 6(1)(b) GDPR); the operating system permission, which you can withdraw at any time, is your control over whether location is sent.
• Price emails: consent (Art. 6(1)(a) GDPR), which you can withdraw in your profile.
• Security and abuse prevention (technical logs, rate limits): legitimate interest (Art. 6(1)(f) GDPR).

4. Who we share data with

We do not sell your data. Only these providers process it on our behalf:

• Google: Google sign-in, if you choose it.
• Resend: sending email (verification codes, password resets, price emails).
• Mapbox: maps, address search, routes and traffic. Our servers send Mapbox the search text, coordinates (for reverse geocoding) and trip waypoints needed to answer requests; and the map on your device loads map data directly from Mapbox, which may receive technical device information and usage statistics from the map component.
• Hosting: IONOS SE (Germany), which hosts our servers.
• Neon: Neon, Inc. (United States), which hosts the database where account data is stored.

5. Transfers outside the European Union

Google, Resend, Mapbox and Neon may process data in the United States. In those cases the transfer relies on the EU–US adequacy decision (Data Privacy Framework) or the European Commission’s standard contractual clauses.

6. How long we keep data

• Account data and saved data: until you delete your account.
• Sign-in sessions: valid for 30 days from last use (each renewal issues a new session). Expired sessions and codes may remain stored until the account is deleted.
• Verification and reset codes: valid for 10 minutes.
• Registrations never verified: deleted automatically after 7 days.
• Server technical logs: kept for up to 14 days.

7. Cookies and local storage

On the web we use only two strictly necessary technical cookies (one for the session, one to renew it) to keep you signed in. On your device the app stores your preferences and any data saved without an account. We use no profiling cookies or advertising trackers.

8. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. To exercise them, write to the address in section 1.

You can delete your account directly in the app (Profile → Delete account) or by asking by email: deletion also removes your vehicles, favourites, saved trips and Smart Trip usage.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

9. Children and changes

PienoGo is not intended for children under 14. If we change this policy we will update the date at the top of the page; for significant changes we will let you know in the app or by email.