Privacy Policy — ColliDoc
Last updated:
This translation is provided for convenience; the Hebrew text is the binding version.
ColliDoc is an app for documenting a car accident at the moment it happens: photos, automatic location and one-tap calls. This page states exactly what the app keeps, what leaves your phone and when, and where it goes. It describes the app as it is today; when something changes, this page and the date above change with it.
What stays on your phone
Everything the app collects is stored first on your phone, in the app's private storage. There is no account and no sign-up.
- The photos you take at the accident, and the category of each (plate, damage, scene, document).
- The location, measured while the app is open, and the capture times. Opening the app starts a new report (or continues the one from the last 12 hours) and saves the location in it, even before any photo is taken.
- Notes on a report, if you add any (this version has no way to add notes yet).
- The details you type for a report (under 'Report details' in 'My reports'): where the accident happened; the other driver's details — licence plate, name, phone, insurer and policy number; your answers — what happened, the damage, whether anyone was hurt, and any witnesses; and the description for the insurer.
- The details you enter under 'My details': name, licence plate, insurer, policy number, insurer phone, tow phone, and the name and phone of an emergency contact.
It stays on the phone until you delete the report in the app or uninstall the app (see 'How long data is kept' below).
What leaves your phone — only while 'Backup to server' is on
By default nothing leaves your phone. 'My details' has a switch, 'Backup to server' (גיבוי לשרת). While it is on, each report — including one with no photos yet — is sent to this app's own server and nowhere else: the photos (with their category), the location, the capture times and the notes; the details, the answers and the description for the insurer that you typed in the report; plus the report's creation time and its status (open or complete). The first time the app connects, the server assigns this installation a random identifier; it is not tied to a name, a phone number or any account, and only tells the server which reports belong to this installation. The server keeps the identifier and the time it was assigned even after every report is deleted.
From the server, data goes further in two cases only, each under its own switch: your answers to the report's questions, if you also turn on 'AI drafting' and ask for a draft; and the report's most recent photos, if you also turn on 'AI photo guidance' (see both sections below).
The details under 'My details' — name, plate, insurance details, phone numbers and the emergency contact — stay on the phone and are never sent.
You can turn the backup off at any time: uploads stop, and what was already uploaded stays on the server until you delete the report.
While connected, the server sees the phone's IP address, as any server does. It is used only to protect against automated mass registrations (a limit on registrations per hour from one address). For that purpose alone it is held in the server's memory — never in the database or the server's logs — and is discarded when the server restarts, if not sooner.
Where the data goes and who can see it
The server is run by the app's operator; it is not a third-party service. It runs at DigitalOcean in the Frankfurt, Germany data centre (fra1). Data travels over an encrypted connection (TLS) and is kept in private storage. The server copy can be accessed only with the identifier of the installation that uploaded it; the app itself never downloads reports from the server — it only uploads and deletes. Once a day an encrypted backup of the server is stored in DigitalOcean Spaces in the same data centre (Frankfurt); the encryption key is held only by the app's operator, who accesses the server only to run it and does not look at reports.
There are no user accounts, no analytics and no advertising. Apart from DigitalOcean, which hosts the server and the backups, and Anthropic, which receives your answers to the report's questions only when you have turned on 'AI drafting' and ask for a draft, and the report's most recent photos only when you have turned on 'AI photo guidance' (see below), no third party receives the data; it is never sold or passed on to anyone else. Server logs contain technical identifiers and status codes only — no location, no notes, no report details, no drafts, no photo guidance, no photos, no IP addresses.
How long data is kept, and how to delete it
The server copy exists only as a backup of the report; the phone is the primary copy.
- Deleting a report in the app (under 'My reports') removes it from the phone at once and, while 'Backup to server' is on, from the server as soon as the phone is online and delivers the deletion.
- The daily backups keep a copy of what was on the server for up to about three months; a deleted report disappears from them with the last backup that held it.
- Turning 'Backup to server' off stops uploads but does not delete what was already uploaded. To delete from the server, delete the report while the backup is on. A deletion made while the backup is off is sent once you turn it back on.
- Uninstalling the app removes its data from the phone. Your phone's own backup (iCloud or Google) may keep a copy of the app's data, according to your phone's settings; that copy is in your account only and we cannot reach it. A copy already uploaded to the server stays there and is not deleted on its own; the app can no longer show or delete it, so to have it deleted write to us.
For any other request about your data — for example deleting a server copy from a phone you no longer have — write to privacy@collidoc.com.
Permissions
- Camera — to photograph the accident. The app does not record audio.
- Location — only while the app is open, to save where the accident happened. No background tracking.
- Contacts — read only, and only at the moment you pick an emergency contact from your contact list. Only the chosen name and number are kept, on the phone. The app never modifies your contacts and never reads the whole list.
The call buttons open the phone's dialler; the app itself neither places nor records calls.
Children
The app is meant for drivers and is not directed at children. We do not knowingly collect data from children.
AI drafting
'My details' has a separate switch, 'AI drafting' (ניסוח בעזרת AI). It is off by default and can be turned on only while 'Backup to server' is on. The app tells the server whether the switch is on, and the server records when it was turned on.
While it is on and you ask for a draft on a report's 'Report details' screen (the 'Draft a description for the insurer' button), this app's server sends Anthropic, an external AI provider, the answers you typed in the report to the four questions — what happened, the damage, whether anyone was hurt, and any witnesses — to write a description for the insurer from them. Nothing else is sent to Anthropic for a draft: no photos, no location, not where the accident happened, no details of the other driver and nothing from 'My details'. Under this switch nothing is sent unless you ask for a draft.
Under Anthropic's terms for API customers, what it receives and writes is not used to train its models, and it keeps them only for a limited time (by default up to 30 days). The description that comes back is copied into the report's 'description for the insurer' field, where you can edit it; what the report keeps and uploads is your version. The server also keeps the draft it received, with the report, until the report is deleted.
You can turn the switch off at any time: draft requests still waiting in line are cancelled, and a draft already being written is finished.
AI photo guidance
'My details' has another separate switch, 'AI photo guidance' (הנחיית צילום בעזרת AI). It is off by default and can be turned on only while 'Backup to server' is on. It does not depend on 'AI drafting': either can be on without the other. The app tells the server whether the switch is on, and the server records when it was turned on.
While it is on and the camera screen is open, each time a photo reaches the server, this app's server sends Anthropic, an external AI provider, the report's most recent photos (up to three), each with its category (plate, damage, scene, document), and the checklist step you are on, to sharpen the next instruction on the camera screen (for example: retake the plate closer). The answer is one short instruction line, shown on the camera screen in place of the standard instruction and not saved in the report; if it does not arrive in time, the standard instruction stays. Nothing else is sent for this: no location, no times, no notes, none of the details or answers you typed in the report, no details of the other driver and nothing from 'My details'.
Under Anthropic's terms for API customers, what it receives is not used to train its models, and it keeps it only for a limited time (by default up to 30 days). The server keeps a record of each such request — which photos were sent, when, and what came back — deleted with the report.
You can turn the switch off at any time: from then on the app asks for no new guidance. Once the change reaches the server — on the next connection while 'Backup to server' is on — requests still waiting in line are cancelled, and one already sent is finished.
Not in the app yet
A future version may offer automatic reading of photos (for example a licence plate or an insurance card) through an external AI provider. This feature is not in the app today; before it is enabled, this policy will be updated and a separate, explicit consent will be asked — neither the consent to AI drafting nor the one to AI photo guidance covers it.
This website
collidoc.com is hosted at Cloudflare. It has no forms, no accounts and no cookies. To know how many people visit and which pages they read, the site loads Cloudflare's Web Analytics script, which by Cloudflare's stated design counts page views in aggregate only: no cookies, no local storage in the browser and no fingerprinting of the device. Apart from Cloudflare, which hosts the site and runs that script, no one receives anything from your visit.
Contact and changes
Operated by: Ishay Cohen.
Questions and requests: privacy@collidoc.com. When what the app keeps or sends changes, this page is updated and the date at the top changes with it. The current version is always at https://collidoc.com/en/privacy.