Privacy Policy

This policy describes how the ChainLuber mobile application (the “App”) and the related ChainLuber devices (motorcycle chain oilers) handle data. Our goal: full transparency about what data we collect, why, and who we share it with.

1. Controller

Troják Dávid E.V. (sole proprietor, Hungary)
Address: 8417 Csetény, Rózsa út 20., Hungary
Tax ID: 91986704-1-39  ·  EU VAT: HU91986704
Email: info@chainluber.hu
Phone: +36 30 605 1630
Web: chainluber.hu

2. What data we process

The ChainLuber App runs locally on the user's phone. No account is required — no username/password is stored on our servers.

2.1 Stored in the app (on phone only)

• Paired devices list — device serial number (MAC suffix), name, type
• Device-specific passwords — the PIN required to connect (in iOS Keychain / Android Keystore)
• Settings cache — the last configuration read from the device (for faster UI)
• Language preference

2.2 Stored on the device (ESP32 chip)

• User-set parameters (lubrication interval, thresholds, etc.)
• Lubrication event history (timestamped, ring buffer ~1000 events)
• Voltage and motion telemetry samples (local only)
• Custom auth password (if user set one)

2.3 Communication with our server (fixmotor.hu / chainluber.hu)

The App contacts our server for one purpose only: downloading firmware updates. This is a simple HTTP GET to the public firmware URL. No user data is uploaded, no individual identification. The IP address appears in the standard web server log (as on any website), but is never linked to a user profile.

3. Bluetooth and location (Android)

The App requests Bluetooth Low Energy (BLE) permission, required to communicate with the ChainLuber device. On iOS 13+ no separate location permission is required. On older Android (11 and below), BLE scanning technically requires the location permission — we use it ONLY to find our device, and we never store or transmit location data.

4. What we DO NOT collect

• ❌ User accounts (none)
• ❌ Location data (even when permission is granted, we don't store it)
• ❌ Contacts, photos, calendar
• ❌ Advertising identifiers
• ❌ Cookies (in the mobile app)
• ❌ Third-party trackers (Google Analytics, Facebook SDK, etc.) — none present
• ❌ Push notifications (chip events do not reach our server)

5. Data sharing

None. No data leaves the user's phone (except the anonymous firmware-download HTTP request). We do not share anything with third parties.

6. Retention

Data stored in the app remains on the user's phone until the app is uninstalled. Upon uninstall, all local data is removed.

Data stored on the device (chip) remains there until the user resets it (admin command or physical erase-flash).

7. User rights (GDPR)

Since we do not collect personal data, the standard GDPR rights apply automatically:

• Access: all stored data is viewable in the App's Settings / Devices screens.
• Rectification / erasure: editable or deletable in the App (device removal, app uninstall).
• Portability: we maintain no central database, so there is nothing to export from our side.
• Objection / complaint: contact us via the channel below.

8. Security

Connecting to a ChainLuber device requires an auth password (PIN). The firmware on production devices is protected with Flash Encryption, so the binary cannot be read out from the chip. Passwords stored on the phone use the device's secure storage (iOS Keychain / Android Keystore).

9. Changes

If this policy changes, the updated version will be published at this URL. Material changes will be notified within the App.

10. Contact