Privacy notice
Last updated: 27 October 2026
Data controller
CarCard is operated by Roman Levin, a sole trader trading as CarCard, based in Manchester, United Kingdom. Company registration number: not applicable — sole trader.
Information CarCard processes
CarCard processes information you provide when joining an early-access list, creating an account, adding a vehicle, checking a location, recording a parking charge case or uploading a document or evidence. This may include contact details, vehicle information, parking details, service and repair invoices, insurance policy documents, recorded payments, documents and correspondence.
Vehicle access disputes
If you request access to a vehicle already registered in CarCard, we ask you to attach the V5C and a driving licence or identity document for manual review. These files are encrypted, accessible only to authorised administrators and are not sent to AI services or shared with the other account. They are removed from the active system when the case closes, or after 30 days, whichever comes first. Protected backup copies may remain until their backup retention cycle ends. Review establishes CarCard access, not legal ownership. Contact support@carcard.co.uk for privacy requests.
Referral points
The vehicle referral programme awards the amounts shown in the app when a new friend accepts within seven days of registration, before adding their first car, verifies their email and adds an eligible UK vehicle with confirmed details. Each friend and vehicle can qualify once. Disputed vehicles wait for manual review. Self-referrals and fraudulent claims are excluded; awards may be reversed. Amounts are fixed when accepted. Points are not pounds, have no cash value and cannot currently be redeemed. We retain an anti-replay record so deletion or re-adding does not create another reward.
Dara and OpenAI
CarCard uses OpenAI to provide requested AI answers, document and photo analysis, and draft assistance. Depending on the feature you choose, CarCard sends your question, relevant CarCard records, and selected documents, photos or extracted text to OpenAI. These may contain names, addresses, vehicle registrations and history, parking charge notice (PCN) references and details, locations, insurance or financial details, and other personal information you supply. Not every category is sent for every action: the information depends on the request and relevant context. Your Dara text conversation is saved to your account so you can continue it across sessions. It is deleted when your account is deleted. You can withdraw permission for future AI sharing from Dara privacy; this does not delete earlier messages. Support requests are sent to the CarCard team only after you review and submit them. AI output can be incomplete or wrong and is presented for your review rather than as a verified fact.
Voice and transcription
CarCard accesses the microphone only after you choose a voice feature and grant microphone permission. For transcription or a live Dara conversation, microphone audio is sent to OpenAI; a live conversation may also use the relevant CarCard context described above. Transcribed text is shown for review before it is used as your account of events. When you request read-aloud, the answer text is sent to OpenAI to generate speech.
Permission for mobile AI requests
The updated mobile app asks for permission for each AI action through a Share with OpenAI? notice. It identifies the recipient and the information relevant to that action, links to this Privacy notice, and lets you allow the request or cancel it. Cancelling stops that AI request; other CarCard features remain available. Opening this Privacy notice does not grant permission. Microphone permission is separate from permission to share information with OpenAI.
How information is used
Information is used to operate accounts, provide parking information, analyse uploaded documents, organise confirmed vehicle history and expenses, show document-based dates and actions, provide user-requested assistance, protect the service and moderate community contributions.
Location checks
When you choose Use my location, your device supplies coordinates for that nearby request. CarCard uses them to calculate available nearby parking and does not save them as part of the current location-check flow or send them to a separate postcode lookup service.
Product and reliability monitoring
CarCard records limited technical and product events such as feature names, success or failure, response duration, device platform and app version. This helps measure reliability and improve the product. Monitoring does not include document contents, policy numbers, private Dara conversations, voice transcripts, PCN evidence, payment information or precise location history.
Cookies
CarCard currently uses essential cookies to keep users signed in and to connect a securely uploaded notice with the account chosen by the user. No advertising or analytics cookies are described by the current application.
Private documents and public reports
Parking charge references, vehicle registrations, addresses and private uploaded documents are not published in community reports. Public reports may be moderated, redacted or removed.
Service providers
CarCard uses service providers to host and operate the platform and monitor product reliability. OpenAI provides the AI, document and photo analysis, transcription and speech processing described above. Information is shared where needed to provide and protect those functions or meet legal obligations. Avoid including personal information that is not needed for your request.
Your choices
You may ask for access to, correction of or deletion of personal information. Some information may need to be retained where required for security, legal obligations or the establishment, exercise or defence of legal claims.
Early access
If you join an early-access list, CarCard uses your email address to manage testing invitations and relevant release updates. Joining does not guarantee selection. You can ask to be removed at any time.