Privacy policy
wattata for iPhone and Android Automotive OS. Updated October 13, 2026.
wattata is two apps that work together: one on your car’s built-in screen, the companion app, which reads its battery and driving data, and one on your iPhone. There is no account and no sign-in, and we don’t know who you are. This page says exactly what each app reads, what travels between the car and your iPhone, what reaches our server, and how to delete it.
What the companion app reads
On the car’s screen, the companion app asks you to approve its permissions: battery, speed, location, Bluetooth and notifications, plus the odometer and tire pressure on cars running Android 16 or later. You can withdraw them at any time in the car’s settings.
With the permissions you grant, it reads from the vehicle’s systems:
- Battery level, capacity, estimated range and battery temperature
- Charging: plug status, charging power, charge state, time remaining and charge limit
- Ignition, gear, speed, odometer and distance travelled, to tell driving from charging and measure each trip
- Tire pressure, on cars running Android 16 or later
- Outside temperature
- Make, model, model year and the display units set on the car
The app cannot read the VIN (Android reserves it for the manufacturer). It has no access to your contacts, calendars, accounts or anything else stored in the infotainment system.
The car’s position
If you allow location on the car, the app reads the car’s position when a trip starts, when you park (shifting to P, switching off, plugging in) and, while driving, every 15 seconds for the altitude only. It never records a continuous route.
Positions put places on your trips, show where you left the car, and help find it if it is stolen. Refuse the permission and everything else keeps working: your trips simply have no places.
Between the car and your iPhone
The live status and your trips, with where they start and end, go from the car to your iPhone directly over Bluetooth. They don’t pass through any server.
This link is encrypted end to end. When you pair, the car and the iPhone agree on a key without ever sending it, and the code shown on the car’s screen confirms that no one stepped in between. Each connection then gets its own key, and the car’s data travels encrypted with AES‑GCM.
To pair, you scan the code shown on the car’s screen. Only a paired iPhone can read the car’s data. Unpairing from the iPhone cuts that link, and a later owner has to pair their own phone.
What reaches our server
Our server is run by 9h41, in Canada. It receives:
- The pairing. When you pair, the iPhone registers the link between the car and this iPhone. Unpairing removes it.
- The car’s last position, if you turn on “Locate vehicle” in the iPhone app (it is off by default). The car sends it itself when the ignition is turned off and every 15 minutes while driving, never while your paired iPhone is connected, so you can find the car when your iPhone can’t see it, after a theft for example. The server keeps only the latest one, with no history, and erases it when you turn the option off.
- Fleet comparison, if you turn it on in the iPhone app (it is off by default). About once a day, a summary of your car’s efficiency and battery health: trip counts, distances, energy, temperature, battery health, and the odometer rounded to 5,000 km. Others only ever see it inside an average of at least 10 cars of the same model.
- Diagnostic logs, only when you tap “Send logs” on the iPhone or “Send car journal” in the car, with the email you enter to get a reply: technical events, the list of values the car exposes, and technical device identifiers. Our team receives them in its internal messaging to investigate, and our server deletes them after 7 days.
- Feature requests you submit, with your email only if you choose to give it.
Nothing is sold, shared for advertising, or used to profile you.
Identifiers
wattata has no account. It only uses technical identifiers:
- A key pair created by the companion app, whose public half identifies the car to our server
- A pseudonymous car identifier derived from the one Android assigns to the app, so the car stays the same car after a reinstall
- An identifier for the app’s installation on your iPhone, checked with Apple’s App Attest to make sure requests come from the genuine app
The companion app sends the first two to our server only along with a position or a journal. When you pair, the iPhone sends the car’s public key to register the link.
None of them contains your name, your email or the VIN.
Other services
Only the iPhone app uses them. The companion app shares nothing with any third party.
- Apple WeatherKit receives the car’s position to show the local weather
- Apple Maps turns trip positions into place names
- Google Maps or Waze open only if you choose to navigate to the car
No analytics, no ads, no tracking
Neither app contains an analytics, advertising, tracking or crash reporting kit: no Firebase, no Mixpanel, no Sentry. We don’t know how often you open the apps or what you tap.
This website
wattata.app sets no cookie and counts no visit. The contact form sends your message and your email to our team so we can reply; our server doesn’t keep them.
For now, the pages load their font from Google Fonts and their icons from unpkg. Like any server, those two see your IP address when they send them.
Retention and deletion
Each position replaces the previous one. Each fleet summary replaces the previous one and leaves the averages after 45 days. Logs are deleted after 7 days.
You stay in control:
- Refuse or withdraw the location permission on the car at any time
- Unpair the car from the iPhone app
- Use “Erase everything” in the companion app, or uninstall it, to delete everything it holds on the car
- Use “Erase everything” in the iPhone app: it erases everything the app holds on your iPhone and asks our server to delete everything it holds about your car