Privacy Policy

The Hikary application (hereinafter referred to as the "Application") is a mobile platform that allows users to register their cars, manage associated documents and expenses, provide ratings, and use various features related to personal car management. The website hikary.ro currently serves as an informational landing page for the Application.

This Privacy Policy describes how users' personal data is collected, stored, processed, and protected by the Application Administrator as a natural person. The purpose of this document is to inform users transparently and comprehensively about their rights and how their data is managed.

The policy applies to all users of the Application and the website, regardless of the access method: mobile devices, tablets, or desktop. Any use of the services provided by Hikary implies unconditional acceptance of this document.

The Administrator undertakes to comply with Romanian and European data protection legislation, including the General Data Protection Regulation (GDPR), ensuring that all collected data is processed legally, fairly, and transparently.

The Privacy Policy may be updated periodically to reflect legislative, functional, or technical changes to the Application. Users will be informed of any changes via notifications in the Application or on the official website, and continued use of the Application after the publication of changes constitutes tacit acceptance of the new rules.

The Administrator recommends carefully reading the policy before entering personal data into the Application, to understand how it is used and to know the user's rights and responsibilities.

Within the Hikary application, the Administrator may collect different types of data to ensure proper functioning of the Application, provide a personalized experience to the user, and comply with legal requirements.

2.1. Personal data provided directly by the user

These are data voluntarily entered by the user into the Application to benefit from the offered functionalities. They include, but are not limited to:

• User information: name, email address, phone number (if provided);
• Car information: make, model, year of manufacture, chassis number, license plate number;
• Documents and files: photos of car documents, receipts or invoices for expenses;
• User-generated content: notes, evaluations, ratings for cars or services, comments within the application.

The purpose of collecting this data is to allow the user to:

• manage car information;
• store and organize documents and expenses;
• interact with application functionalities (ratings, statistics, notifications);
• receive personalized technical support in case of issues or requests.

2.2. Automatically collected data

The Application may automatically collect certain technical and statistical data to improve the user experience and Application performance. These data include:

• type and model of the device used;
• operating system version;
• IP address and approximate location (strictly for location-based features, if enabled by the user);
• session and behavior data within the application (e.g., session duration, accessed features, encountered errors);
• anonymous identifiers for statistical and application performance analysis purposes.

2.3. Data collected via third-party services

If the application uses external services such as cloud storage, analytics services, or push notifications, additional data may be collected in accordance with the policies of those services. The Administrator guarantees that the data is used exclusively for the functioning of the Application and complies with privacy legislation.

2.4. Purpose of data collection

All collected data has specific and legitimate purposes, including:

• providing and improving the Application services;
• managing accounts and user authentication;
• generating reports, statistics, and alerts for the user;
• protecting security and preventing abuse or unauthorized access;
• complying with legal and tax obligations;
• analyzing usage to optimize functionalities and develop the Application.

All collected data is processed transparently and responsibly, and the user has the right to request access, modification, or deletion of such data in accordance with applicable legislation (GDPR and Romanian law).

2.6. Account deletion and associated data

The user can delete their account directly from the Hikary application, under Settings → Delete Account. When the deletion process is initiated, all data associated with the account, including car information, documents, and expenses, is permanently removed from the database. After the process is completed, the data cannot be recovered.

The Administrator uses the data collected from users to ensure proper and optimal functioning of the Hikary application and to enhance each user's experience. Personal data is used solely for legitimate purposes and only as necessary to provide the application's services.

Data directly entered by the user, such as car information, documents, and expenses, is used to allow:

• creating and managing a complete vehicle profile;
• storing and organizing important documents (insurance, maintenance, invoices);
• generating reports, statistics, and personalized notifications regarding vehicle maintenance and expenses;
• assigning ratings and evaluations for internal application features.

Automatically collected data, such as device type, operating system version, or in-app behavior, is used for:

• improving application performance and optimizing user experience;
• identifying and resolving errors or technical issues;
• adapting features based on the type and configuration of the device used;
• analyzing application usage for statistical and internal research purposes without directly identifying individuals.

Data may also be used for:

• administrative and support communications, such as account notifications, application updates, or legal messages;
• security measures and abuse prevention, including detecting suspicious activities, protecting accounts, and preventing unauthorized access;
• complying with legal obligations, such as legal or tax requests.

The Administrator does not use users' personal data for external commercial purposes and does not sell, rent, or distribute this data to third parties for advertising purposes. Any sharing of data with third parties is only done to ensure the functioning of the Application or to comply with legal obligations.

User-generated content, such as photos, notes, comments, and evaluations, is used for:

• display within the application and for service functionalities;
• generating anonymized internal statistics that help improve services;
• developing and testing new application features.

The Administrator ensures that all data is processed confidentially and responsibly, adhering to principles of legality, transparency, and personal data protection under GDPR.

The user has the right to request at any time:

• access to personal data;
• correction or updating of data;
• complete deletion of data from the application;
• restriction of processing under certain conditions;
• portability of data to another service, if technically feasible.

Any user request related to personal data will be treated seriously and resolved within a reasonable time frame according to applicable law.

The Administrator recommends that users periodically check the information entered and use application features to manage their data responsibly, ensuring it is accurate and up to date, thus guaranteeing an optimal experience in the Hikary application.

The Hikary application administrator is committed to protecting users' personal data and sharing or disclosing it only under legal, strictly necessary, and transparent conditions. The purpose of this chapter is to clarify to whom and under what conditions data may be transmitted, so that the user fully understands how their information is managed.

4.2. Data Sharing for Service Provision

Data collected from users may be shared with authorized third parties solely to ensure the functioning of the Application and its services. These third parties include, but are not limited to:

• cloud service providers or storage servers, which keep the data secure and ensure its availability;
• providers of push notifications, email, or other forms of communication;
• performance analytics platforms and anonymous statistics to improve functionalities.

In all these cases, the Administrator guarantees that:

• data is used exclusively for the stated purpose;
• third parties comply with strict security and privacy standards;
• there is no transfer of data to third parties for external commercial or advertising purposes without the user's explicit consent.

Sharing data under these conditions is necessary to:

• synchronize information across devices;
• ensure correct functioning of notifications and alerts;
• monitor Application performance and quickly identify errors;

4.3. Data Sharing for Legal or Security Reasons

The Administrator may disclose users' personal data when required by law or competent authorities, including:

• judicial or administrative requests issued by public authorities;
• prevention or investigation of fraud, abuse, or illegal activities;
• compliance with tax, accounting, or data protection legislation.

In such cases, the Administrator will share only the necessary data, respecting the principle of minimal necessity, and will log any official request received.

4.4. Sharing Anonymized Data

The Administrator may use collected data for statistical analysis or research, but only in anonymized form, ensuring that the user cannot be directly identified.

Anonymized data may be used to:

• assess general user behavior in the application;
• develop new features and optimize existing ones;
• internal or external reports without compromising privacy.

4.5. User-Generated Data and Public Content

Content created by users – photos, notes, reviews, ratings, or comments – may be visible to other users within the application.

The Administrator cannot fully control how other users use this information but will remove content that violates the law or the application's terms and conditions.

The user is responsible for the content they post and acknowledges that any public information can be viewed by other community members.

4.6. Sharing Data with Third Parties for Partnerships or Additional Services

If, in the future, the Administrator introduces features involving collaborations with partners or external services, user data may only be shared with their explicit consent.

In such cases, the user will be clearly informed about:

• the type of data shared;
• the purpose of the partnership;
• how the partner uses and protects the data.

4.7. User Rights Regarding Data Sharing

The user has the right to request:

• restriction or limitation of data sharing;
• revocation of consent for sharing, where permitted by law;
• complete deletion of personal data in accordance with applicable law and the Application policy.

The Administrator will respond to requests within a reasonable timeframe and provide necessary clarifications on how data is shared.

The Administrator recommends users to be careful with the information they share in the application, especially content visible to the public, to maintain the confidentiality and security of their data.

The Administrator of the Hikary application treats the confidentiality and security of users' personal data with the utmost seriousness. This section explains how data is stored, protected, and maintained securely throughout the use of the application.

5.2. Data Storage Location and Environment

Data collected through the Application, including user information, documents, photos, and vehicle-related expenses, is stored on secure servers provided by authorized cloud services that are technically and legally verified.

The Administrator ensures that the servers used comply with internationally recognized security standards, including protection against unauthorized access, data loss, and cyberattacks.

Data may be stored in encrypted form, so that it is accessible only to authorized personnel and automated systems necessary for the functioning of the Application.

5.3. Technical Security Measures

To protect data, the Administrator applies advanced technical measures, including:

• encryption of personal data and uploaded documents;
• secure protocols for data transmission between the user's device and the server;
• secure user authentication for account access;
• continuous system monitoring to detect suspicious activity or cyberattacks;
• regular data backups to prevent accidental loss or corruption of information.

5.4. Organizational Security Measures

In addition to technical protection, the Administrator applies strict organizational measures, such as:

• access control to user data only for authorized personnel;
• periodic training of personnel involved in data processing;
• internal privacy policies and procedures for managing security incidents;
• periodic review and update of security measures to align with current standards and emerging technological risks.

5.5. Data Retention

Personal data is retained for as long as necessary to fulfill the purposes for which it was collected, including:

• for providing the Application's services;
• for complying with legal or fiscal obligations;
• for resolving potential disputes or user requests.

Once data is no longer needed, it will be permanently deleted or anonymized so that it can no longer be associated with a user.

5.6. Protection Against Loss or Unauthorized Access

The Administrator applies procedures to prevent:

• accidental loss or destruction of data;
• unauthorized access to stored data;
• improper modification or disclosure of information.

In the event of a security breach or incident that could affect user data, the Administrator commits to:

• quickly identifying the cause and limiting its effects;
• informing affected users within a reasonable time frame;
• taking preventive measures to avoid similar incidents in the future.

5.7. Recommendations for Users

To maintain the security of their own data, users are encouraged to:

• use strong passwords and not disclose them to others;
• avoid accessing their account from insecure or public devices;
• periodically update personal data and contact information;
• immediately report any suspicious activity or unauthorized access observed in their account.

In accordance with data protection legislation, including the General Data Protection Regulation (GDPR) and Romanian law, users of the Hikary application have a set of rights regarding their personal data.

6.2. Right of Access

The user has the right to request from the Administrator access to all personal data collected and stored within the Application or on the website hikary.ro.

The access request may include:

• information about the type of data collected;
• the purpose and manner of data processing;
• the period for which the data is stored;
• third parties with whom the data has been shared, if applicable.

6.3. Right to Rectification

The user may request the correction or updating of personal data if it is inaccurate or incomplete.

Correction may include, for example: changing the name, email address, vehicle information, or other data stored in the application.

6.4. Right to Erasure ('Right to be Forgotten')

The user may request the complete deletion of their personal data from the Administrator's systems.

Data deletion will be performed as soon as possible, except in cases where the law requires its retention (e.g., legal or fiscal obligations).

Deleted data will no longer be accessible and will not be used for any purpose within the Application.

6.5. Right to Restrict Processing

The user may request limitation of how their data is processed in certain situations, such as:

• challenging the accuracy of the data;
• objecting to data processing;
• when the data is no longer needed for the original purpose, but the user requests its retention for clarification or disputes.

6.6. Right to Data Portability

The user has the right to request transfer of their personal data to another service, where technically feasible.

The transfer will be performed in a structured, standard, and easily readable format so that the user can efficiently use the information in other applications or similar services.

6.7. Right to Object

The user may request that their data not be processed for certain purposes, including marketing or statistical analysis.

The Administrator will respect this request, except where the law allows or requires data processing.

6.8. Right to Withdraw Consent

If the user has given consent for processing certain data, they may withdraw it at any time.

Withdrawal of consent does not affect the legality of processing carried out prior and does not prevent the user from continuing to use essential features of the application.

6.9. Right to Lodge a Complaint

The user has the right to lodge a complaint with the competent data protection authority if they believe their data has been processed illegally or in violation of the policy presented in this section.

The Administrator will provide support and necessary information to exercise this right, in accordance with applicable law.

6.10. How to Exercise Rights

To exercise their rights, the user may contact the Administrator via email or through the contact form available on the official website hikary.ro.

The Administrator undertakes to respond to requests within a reasonable time, providing all necessary information and confirming implementation of the requests.

The user must provide sufficient information to allow identification of the account and relevant data, without disclosing unnecessary additional information.

The Hikary application and the website hikary.ro may use cookies and similar technologies to improve user experience, analyze usage, and ensure optimal operation of the services.

7.2. What are cookies

Cookies are small files stored on the user's device (computer, tablet, smartphone) when accessing the website or application.

These files allow the application to recognize the user's device and remember certain information, such as preferences, settings, or previous activity.

7.3. Types of cookies used

• Strictly necessary cookies: essential for the functioning of the application and access to core services (e.g., maintaining user sessions).
• Performance and analytics cookies: collect anonymous information about how users use the application to identify issues and improve functionality.
• Preference cookies: remember user settings and preferences, such as language or visual options.
• Functional cookies: allow the application to provide additional functions, such as notifications or content personalization.

7.4. Purpose of using cookies

Cookies and similar technologies are used to ensure the proper functioning of the app and website, store user preferences, analyze traffic and usage patterns, detect and prevent technical errors, and improve the overall experience by providing personalized recommendations.

• to ensure proper functioning of the application and website;
• to retain user preferences and settings;
• to analyze traffic and usage for service optimization;
• to identify and prevent errors or technical issues;
• to improve overall user experience and provide personalized recommendations.

7.5. Managing cookies

The user can accept or reject cookies through the browser or mobile device settings.

Retaining or disabling certain cookies may affect the functionality of the application or website and may limit access to some features.

7.6. Technologies similar to cookies

The application may also use other storage and tracking technologies, such as local storage or session storage on mobile devices; anonymous identifiers for performance analysis and optimization of user experience.

These technologies function similarly to cookies and are used strictly for purposes related to the operation of the Application and usage analysis.

7.7. Transparency and consent

Upon first accessing the website or application, the user will be informed about the use of cookies and will be able to provide consent for them.

The Administrator recommends reading this section carefully to understand what data is collected and how it is used.

The administrator of the Hikary application reserves the right to modify, update, or supplement this Privacy Policy at any time to reflect legislative, technical, or operational changes.

8.2. Purpose of changes

The Privacy Policy may be updated to:

• comply with new legal regulations or compliance requirements;
• introduce new features or services in the application;
• improve data protection and security measures;
• clarify procedures regarding the collection, storage, and sharing of data.

8.3. How users are informed

Any changes to the Privacy Policy will be communicated to users through one or more of the following methods:

• direct notification within the application or on the website hikary.ro;
• email sent to the user if the email address was provided and used for communications;
• displaying the updated version on the official website and in the application, with the date of the latest update.

Continued use of the Application after notification of changes constitutes implicit acceptance of the new rules and updated procedures.

8.4. Recommendation for users

The administrator recommends that users periodically review the Privacy Policy to stay informed about any updates and changes to data handling procedures.

If the user does not agree with the new changes, they have the right to delete their account and personal data in accordance with the procedures described in Section 6.

8.5. Date of last update

The current version of the Privacy Policy is dated [insert exact publication date].

Any previous version is no longer considered applicable, and all rights and responsibilities relate to the latest published version available to users.

For any questions, requests, or concerns regarding the Privacy Policy, as well as for exercising your rights regarding personal data (access, rectification, deletion, restriction of processing, portability, or objection), you can contact the Hikary application administrator through the following channels:

9.2. Contact Form

Users can use the contact form available on the official website hikary.ro or in the Hikary mobile application to submit requests or questions regarding privacy and data protection.

The form allows sending the message directly to the Administrator without the need for an additional email.

9.3. Email

You can also send your requests directly to the dedicated email address: contact@hikary.ro

Please include sufficient information to identify the account and the relevant data without disclosing unnecessary or sensitive information.

9.4. Response Time

The Administrator commits to respond to all requests and questions within a reasonable timeframe, no later than 30 days from receipt of the request.

In complex cases requiring additional checks, the timeframe may be extended, but the user will be informed of the reason and the new estimated date.

9.5. Support and Clarifications

The Administrator's team is available to provide clarifications regarding:

• how personal data is collected and processed;
• users' rights according to applicable law;
• the procedure for deleting, rectifying, or transferring data.

The Administrator encourages users to use these channels for any privacy-related concerns to ensure a safe and transparent environment within the Hikary application.