Privacy Policy — ColliDoc
Last updated:
This translation is provided for convenience; the Hebrew text is the binding version.
ColliDoc is an app for documenting a car accident at the moment it happens: photos, automatic location and one-tap calls. This page states exactly what the app keeps, what leaves your phone and when, and where it goes. It describes the app as it is today; when something changes, this page and the date above change with it.
What stays on your phone
Everything the app collects is stored first on your phone, in the app's private storage. There is no account and no sign-up.
- The photos you take at the accident, and the category of each (plate, damage, scene, document).
- The location, measured while the app is open, and the capture times. Opening the app starts a new report (or continues the one from the last 12 hours) and saves the location in it, even before any photo is taken.
- Notes on a report, if you add any (this version has no way to add notes yet).
- The details you type for a report (under 'Report details' in 'My reports'): where the accident happened; the other driver's details — licence plate, name, phone, insurer and policy number; your answers — what happened, the damage, whether anyone was hurt, and any witnesses; and the description for the insurer.
- The details you enter under 'My details': name, licence plate, insurer, policy number, insurer phone, tow phone, and the name and phone of an emergency contact.
It stays on the phone until you delete the report in the app or uninstall the app (see 'How long data is kept' below).
What leaves your phone — only while 'Backup to server' is on
By default nothing leaves your phone. 'My details' has a switch, 'Backup to server' (גיבוי לשרת). While it is on, each report — including one with no photos yet — is sent to this app's own server and nowhere else: the photos (with their category), the location, the capture times and the notes; the details, the answers and the description for the insurer that you typed in the report; plus the report's creation time and its status (open or complete). The first time the app connects, the server assigns this installation a random identifier; it is not tied to a name, a phone number or any account, and only tells the server which reports belong to this installation. The server keeps the identifier and the time it was assigned even after every report is deleted.
The details under 'My details' — name, plate, insurance details, phone numbers and the emergency contact — stay on the phone and are never sent.
You can turn the backup off at any time: uploads stop, and what was already uploaded stays on the server until you delete the report.
While connected, the server sees the phone's IP address, as any server does. It is used only to protect against automated mass registrations (a limit on registrations per hour from one address). For that purpose alone it is held in the server's memory — never in the database or the server's logs — and is discarded when the server restarts, if not sooner.
Where the data goes and who can see it
The server is run by the app's operator; it is not a third-party service. It runs at DigitalOcean in the Frankfurt, Germany data centre (fra1). Data travels over an encrypted connection (TLS) and is kept in private storage. The server copy can be accessed only with the identifier of the installation that uploaded it; the app itself never downloads reports from the server — it only uploads and deletes. Once a day an encrypted backup of the server is stored in DigitalOcean Spaces in the same data centre (Frankfurt); the encryption key is held only by the app's operator, who accesses the server only to run it and does not look at reports.
There are no user accounts, no analytics and no advertising. Apart from DigitalOcean, which hosts the server and the backups, no third party receives the data; it is never sold or passed on. Server logs contain technical identifiers and status codes only — no location, no notes, no report details, no photos, no IP addresses.
How long data is kept, and how to delete it
The server copy exists only as a backup of the report; the phone is the primary copy.
- Deleting a report in the app (under 'My reports') removes it from the phone at once and, while 'Backup to server' is on, from the server as soon as the phone is online and delivers the deletion.
- The daily backups keep a copy of what was on the server for up to about three months; a deleted report disappears from them with the last backup that held it.
- Turning 'Backup to server' off stops uploads but does not delete what was already uploaded. To delete from the server, delete the report while the backup is on. A deletion made while the backup is off is sent once you turn it back on.
- Uninstalling the app removes its data from the phone. Your phone's own backup (iCloud or Google) may keep a copy of the app's data, according to your phone's settings; that copy is in your account only and we cannot reach it. A copy already uploaded to the server stays there and is not deleted on its own; the app can no longer show or delete it, so to have it deleted write to us.
For any other request about your data — for example deleting a server copy from a phone you no longer have — write to privacy@collidoc.com.
Permissions
- Camera — to photograph the accident. The app does not record audio.
- Location — only while the app is open, to save where the accident happened. No background tracking.
- Contacts — read only, and only at the moment you pick an emergency contact from your contact list. Only the chosen name and number are kept, on the phone. The app never modifies your contacts and never reads the whole list.
The call buttons open the phone's dialler; the app itself neither places nor records calls.
Children
The app is meant for drivers and is not directed at children. We do not knowingly collect data from children.
Not in the app yet
A future version may offer automatic reading of photos (for example a licence plate or an insurance card) and drafting of an accident description for the insurer through an external AI provider. These features are not in the app today; before they are enabled, this policy will be updated and a separate, explicit consent will be asked.
This website
collidoc.com is hosted at Cloudflare. It has no forms, no accounts and no cookies. To know how many people visit and which pages they read, the site loads Cloudflare's Web Analytics script, which by Cloudflare's stated design counts page views in aggregate only: no cookies, no local storage in the browser and no fingerprinting of the device. Apart from Cloudflare, which hosts the site and runs that script, no one receives anything from your visit.
Contact and changes
Operated by: Ishay Cohen.
Questions and requests: privacy@collidoc.com. When what the app keeps or sends changes, this page is updated and the date at the top changes with it. The current version is always at https://collidoc.com/en/privacy.