Privacy Policy
Pultika is an app for electric vehicle owners. To show you the state of your car and carry out your commands, we need some data. This page explains what we collect, why we need it and what happens to it.
Who is responsible for your data
The data controller is Tabix LLC (OGRN 1187746090740, registered on January 29, 2018; INN 9705114726; KPP 771901001).
For anything related to your data, write to support@lisik.tech. The service website is pultika.autos.
About the app
Pultika (tech.pultika.autos) is available for iPhone and Android. It shows the state of your electric vehicle, controls climate and locks, and displays your trips.
You sign in with your phone number: you verify it with a code from a messenger or SMS, or you call from that number to the number shown in the app yourself (usually free — the call is dropped as soon as it connects). An account is created the first time you verify your number — the app calls this registration; there are no forms to fill in.
What we collect
| Data | Details |
|---|---|
| Phone number | Used to sign you in and to send notifications. |
| Account and sessions | Your account ID, sign-in tokens, sign-in dates and times, and your device and app version as a single string such as "model · Pultika version". |
| Vehicle | The VIN and the data the vehicle itself reports through its onboard module: charge, range, the state of doors, windows and locks, climate, tyres, the vehicle's location and its trips. |
| Command log | Commands sent from the app and the vehicle's replies to them. |
| Connectivity log | Records of when the vehicle connected to the server. |
What we do not collect
- No analytics and no advertising identifiers.
- No cookies or trackers, on the website or in the app.
- The app does not read your contacts, photos or microphone. To verify your number by call it only opens the standard phone app with the number pre-filled; it does not read your call log and asks for no permissions.
- The current version does not request your phone's location. We know where the car is, not where you are.
A future version may ask for permission to use your phone's approximate location. That will only happen with your explicit consent in the system permission dialog, and this policy will be updated beforehand.
Why we need the data
- To show you the state of your vehicle.
- To carry out the commands you send from the app.
- To build your trips.
- To send notifications, for example when the vehicle has not connected for a long time.
- To keep sign-in secure.
There are no other purposes. We do not build profiles, analyse behaviour or show ads.
Who we share data with
Nobody, for advertising or sale.
Vehicle data is visible to the vehicle's owner and to the people the owner has granted access to by means of the service or by contacting support. The owner can revoke that access at any time the same way.
Technical providers — server hosting, the channels that deliver verification codes (messenger, SMS) and the Russian telephony provider that receives your call — get only what they need to do their job. A code delivery service receives your phone number and the code itself; the telephony provider sees the number you called from, the number dialled and the time of the call, and reports them to us. Neither receives any vehicle data. In Russia you verify your number by call, by a code in the MAX messenger or by SMS; outside Russia by call, by a code in Telegram or by SMS, and if you choose Telegram your phone number is passed to that messenger's operator abroad solely to deliver the code.
The map in the app is loaded from the server of a third-party Russian map provider. When you open the map, that provider receives your phone's IP address and the coordinates of the map tiles around the car — and nothing else: no phone number and no account data.
How long we keep data
| Data | Retention |
|---|---|
| Account data | For as long as the account exists. |
| Vehicle data | For as long as the vehicle is connected to the service. |
| Command and connectivity logs | Up to 12 months. |
| Support correspondence | 3 years after the correspondence ends. |
| Record of the agreement being concluded and terminated (phone number, dates of first sign-in and account deletion) | 3 years after account deletion. |
Within 30 days after you delete your account:
- your account ID, sessions and tokens are deleted, and your phone number is unlinked from the account;
- your access to vehicles is revoked;
- log entries are anonymised so that nothing in them points to a person.
For another 3 years we keep your phone number with the dates of your first sign-in and account deletion — solely to prove, in case of a dispute, that the agreement was concluded and terminated — and your support correspondence. This information is not used for anything else.
Vehicle telemetry belongs to the vehicle, not to a person. It stays with the service for as long as the vehicle is connected, whether or not your account exists.
Your rights
We process personal data in accordance with applicable data protection law. You can:
- find out what data we hold about you;
- ask us to correct inaccurate data;
- delete your account — here is how;
- withdraw your consent to data processing where processing is based on consent (for example, if you wrote to support without having an account);
- ask us anything at support@lisik.tech.
We process account data to perform the agreement, not on the basis of consent, so the only way to stop that processing is to delete your account: the app cannot work without a phone number and an account ID.
Security
- Traffic between the app and the server is encrypted (TLS).
- Sign-in relies on session tokens that are rotated regularly.
- Access to a vehicle is only possible with its owner's permission.
- Lock commands are confirmed with a PIN or biometrics on your phone.
Children
The service is not intended for anyone under 18. We do not knowingly collect data from children.
Changes to this policy
If this policy changes, the new version will be published on this page with a new effective date. The date is always shown under the heading.
This is a summary. The full text is the Policy on Personal Data Processing and Confidentiality; the terms of use are in the User Agreement and the Public Offer.