Privacy Policy

1. Who we are

EVDash is a personal, non-commercial project of Berkant Yanbul, a private individual in the Netherlands. He is the controller for the personal data described here. EVDash is not a registered company.

Contact: [email protected].

EVDash is independent and is not affiliated with, endorsed by or sponsored by Tesla, Inc.

2. In short

• EVDash is a dashboard. It reads data from your own car directly over Bluetooth, using a phone key that can only read data.
• No Tesla account login, no EVDash account, no telemetry to our server.
• No ads, no trackers, no analytics, no payments or subscriptions.
• The only things the app downloads from our server are a public speed-camera file and a country map. Your location is not sent to us for this.

3. What stays on your iPhone

The following is stored and processed only on your iPhone. We cannot see it.

• Phone key: a key pair created in your iPhone's Secure Enclave (on devices without one, in the Keychain). The private key never leaves your iPhone. The key has Tesla's read-only role (“vehicle monitor”) and you confirm it yourself in the car with your key card.
• Your car's chassis number (VIN): entered once so the app can find your car over Bluetooth. It is stored only on your iPhone, and the app only shows the last four characters.
• Live car data read over Bluetooth, such as speed, power, battery and other values the car reports. It is shown on your iPhone and not sent to us.
• Your phone's location, only while the dashboard is open (“While Using”): to show your speed when the car does not send it, and to compare your position with the speed-camera list. It is not sent to us.
• Trips (optional, off by default): if you turn them on, your drives are kept on this iPhone only (at most the 500 most recent), excluded from iCloud backup, and you can delete them in the app. If you export or share a trip, that file can show where you started and ended.
• Field scan (optional diagnostic, off by default): a CSV file of vehicle values on your iPhone. It contains no location or route and stays on your iPhone unless you choose to share it yourself.
• Settings, such as layout, units and the optional Face ID or passcode lock.

To remove everything: remove the car in the app, or delete the app. Remove the phone key from the car itself under Controls › Locks.

4. What leaves your iPhone

• Speed cameras and country map (our server, api.evdash.nl): the app downloads one public, Europe-wide speed-camera file (at most about once every 20 hours) and a country-border map (about once every 30 days). The comparison with your position happens on your iPhone. The requests contain no location, no VIN and no car data.
• Maps (Apple): the map and the route line are drawn by Apple Maps (MapKit). Apple receives the map area and your IP address and, for the route line, your car's position and its navigation destination. Apple processes this under its own privacy policy; we do not receive it.
• Cloudflare: our domain is served through Cloudflare, which protects and delivers our server and processes your IP address for that purpose.

5. Server logs

When the app or your browser contacts evdash.nl, our web server records a standard log line: the time, the requested file, the response status and size, the referring page (if any), the app or browser version (user agent) and the IP address the request comes from. Because requests pass through Cloudflare, that IP address is currently a Cloudflare address; Cloudflare itself sees your IP address.

We use these logs only to run the service, prevent abuse and fix errors. They are deleted automatically after 14 days. We do not combine them with other data and do not use them to identify you.

6. The website

evdash.nl is informational. It has no accounts, no forms, no cookies of its own, no trackers and no analytics, and it loads no code or fonts from other websites. Cloudflare may set a strictly necessary security cookie to detect bots. The same server logs apply (section 5).

7. Legal bases

• Speed-camera and map downloads, and showing the dashboard: necessary to provide the app you chose to use (contract).
• Server logs and security: our legitimate interest in a safe and working service.

8. Processors and transfers

Our server is located in the EU (Germany). Cloudflare and Apple may process data outside the EU; they use the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

9. How long we keep data

• Data on your iPhone: until you delete it or the app.
• Server logs: 14 days.
• Emails you send us: as long as needed to answer you, then deleted.

10. Your rights

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to processing, and to data portability. Because EVDash keeps your car data and location on your iPhone, we usually hold no personal data about you beyond short-lived server logs. To use your rights, email [email protected]; we reply within one month.

You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the authority in your own EU country.

11. Children

EVDash is not meant for children under 16.

12. Security

Connections to our server are encrypted (HTTPS). The phone key never leaves your iPhone. Access to our server is restricted. No system is perfectly secure; if a data breach affects you, we will inform you as the law requires.

13. Changes

We update this page when the app or the website changes, and announce important changes on the website or in the app before they take effect.