Privacy Policy
1. Introduction
Welcome to Rangea. We are committed to protecting your privacy and handling your personal data with transparency. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Rangea mobile application and related services.
Rangea is an EV driving companion for Tesla owners, helping you track trips, analyse efficiency, and connect with a community of EV enthusiasts.
2. Data Controller
Rangea is the data controller responsible for your personal data.
Contact: hello@rangea.info
Website: www.rangea.app
Jurisdiction: Denmark, European Union
3. Data We Collect
3.1 Account Data
- Full name, email address, password (hashed), profile photo, location, vehicle make and model
3.2 Vehicle Data
- VIN, vehicle model, display name, colour, trim, odometer
3.3 Location & Driving Data
When trip recording or Fleet Telemetry is active:
- GPS coordinates (latitude, longitude, heading) at regular intervals
- Vehicle speed, battery level, energy consumption and regeneration
- Charging state, charger voltage and current, interior and exterior temperature
- Gear position (Park, Drive, Reverse, Neutral)
Location data is classified as personal data under GDPR and is treated with the highest level of protection.
3.4 Social Data
- Follow relationships, trip comments and likes, badges earned, visibility preferences
3.5 Tesla OAuth Tokens
OAuth tokens are used exclusively for Tesla Fleet API communication and are deleted immediately when you disconnect.
4. Legal Basis for Processing
Under GDPR Article 6:
- Consent (Art. 6(1)(a)): Tesla connection, location tracking, analytics
- Contract (Art. 6(1)(b)): Providing the service you signed up for
- Legitimate interest (Art. 6(1)(f)): Service improvement, security monitoring
5. Data Sharing
We do not sell, rent, or trade your personal data.
We share data with the following subprocessors:
- Supabase (AWS, Ireland) — database and authentication
- Tesla, Inc. — vehicle data via Fleet API
- Mapbox — map rendering
- PostHog (EU, Frankfurt) — privacy-friendly usage analytics (opt-out available)
- Vercel — website hosting
- Railway — telemetry server (data transit only)
6. Data Security
- Encryption in transit (TLS 1.2+) and at rest
- Mutual TLS for vehicle communication
- Row Level Security on all database tables
- Regular security audits
7. Data Retention
- Account data: retained while active, deleted within 30 days of account deletion
- Trip data: retained while active
- Raw telemetry: 90 days, then aggregated
- Tesla tokens: deleted immediately on disconnect
8. Your Rights Under GDPR
- Right to access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (Art. 17)
- Right to restrict processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time
Contact: hello@rangea.info. We will respond within 30 days.
Complaints: Danish Data Protection Agency (Datatilsynet) — www.datatilsynet.dk
9. Children's Privacy
Rangea is not intended for users under 16.
10. Changes to This Policy
Material changes will be notified via in-app notification or email.
11. Contact Us
Email: hello@rangea.info
Website: www.rangea.app