Privacy at Odo

Last updated 7 September 2026

Odo keeps a record of your driving. That record is yours. This page explains exactly what the app holds, what — if anything — leaves your phone, and what you can make us do about it.

Who we are

Launchbench Ltd of 128 City Road, London, EC1V 2NX, company number 17427395, is the data controller for the information described here. We are registered with the Information Commissioner's Office under number ZC237536. You can reach us at privacy@launchbench.dev.

The short version

What stays on your phone, always

These never travel, whether or not you sign in, and are deliberately left out of the backup file the app can create — because a backup goes wherever you send it.

• Driver details: names, home address, telephone number, email, driving licence number and expiry date, and any photograph of a licence.
• Insurance policies: insurer, policy number and dates.
• The incident log in full: what happened, where, the photographs, and any details of another party you recorded at the scene.
• Individual GPS fixes. The app keeps the raw positions behind each journey for up to six months so it can redraw the route accurately, then deletes them.
• Places you have named and marked as staying on this phone — including the name itself, which is removed from a journey before that journey is synced, backed up or exported. Also the work a garage has told you about but not yet done, and your payment plans.

If you record another driver's details after a collision, that information stays on your phone and is never sent to us. You decide whether to produce a document from it and who to give that document to.

What is copied to our server, if you sign in

• Your vehicles: registration, make, model, colour, year, odometer readings — and, if you paired the car with your phone, the Bluetooth address of its stereo, so a second device knows which car it is.
• Your journeys: when they started and ended, how far, the odometer readings, the shape of the route, and the start and end positions. Where a journey began or finished somewhere you have named, that name travels too — unless you marked the place as staying on this phone.
• Fuel and charging entries: date, quantity, cost, grade, and the filling station or charge point — its position, and its name where you gave it one.
• Your service history: what was done, when, at what mileage, what it cost and who did it.
• Your reminders: what is due and when, and any note you added.
• Your email address, to identify the account.

Your journey records describe where you have driven. We treat that as the most sensitive thing we hold. It is stored so that only your own account can read it, and we do not look at it.

Why we hold it, and on what basis

• To provide sync and the shared garage — because you have asked us to, under our contract with you.
• To take payment and manage your subscription — the same contract.
• To keep the service secure and working — our legitimate interest in running a service that stays up and is not abused.
• To meet legal obligations — tax records, and responding to lawful requests.
• With your consent — sending us a report when the app fails. It is the only thing here that asks, and you can withdraw it at any time.

Nothing else relies on consent, because we do not do any of the other things that would need it.

Who else touches it

• Supabase hosts the database and sign-in, in London. They process it only on our instructions, under a written agreement.
• Cloudflare hosts this website and the page where you can delete your account without installing the app. That page receives your email address when you use it, and nothing else.
• Sentry receives crash reports, and only if you have turned them on. They see what broke and nothing about you.
• Google Play handles distribution and payment. We never see your card details.
• OpenStreetMap supplies map imagery. Loading a map tells them roughly which part of the map you are looking at.

That is the complete list. There is no advertising network, no analytics provider and no data broker on it.

When something goes wrong

Software fails, and on somebody else's phone we cannot see it happen. Two separate things deal with that, and only one of them can ever leave your phone.

A log on your phone

Whenever the app fails, it writes down what failed and stops there. It stays in Odo's own private storage, it is never sent anywhere, and you can read the whole of it under Settings. If you ask us for help you can send it to us — through your email or messaging app, whichever you choose — and you can read every line of it before you do.

Reports sent automatically, if you ask for them

There is a switch under Settings, and it is off until you turn it on. You are also offered the choice during first-time setup, alongside the permissions the app asks for, so it is a decision you are shown rather than one buried for you to find.

With it on, the same failures are also sent to Sentry, who store them for us in Frankfurt, in the European Union. A report contains the error, the point in our code it came from, the version of the app and the model of phone. Before anything is sent, the app removes vehicle registrations, locations, email addresses and driving licence numbers from it. It carries no name, no account, no IP address and nothing that identifies your phone, and it records nothing about what you were doing — not which screens you opened, not which features you used.

Turning it off stops it, immediately and for good, and turning it down costs you nothing at all. The choice is remembered on that phone alone, so switching it on here does not switch it on anywhere else.

Where your data is kept

The database holding your synced records, and the sign-in that protects it, are in London, in the United Kingdom. Your journeys, your vehicles, your fuel entries and your reminders do not leave the country.

Two things sit outside it, and both are ones you choose:

• Crash reports, if you turn them on, are held by Sentry in Frankfurt. This is a transfer to the European Union, which the United Kingdom recognises as providing an adequate level of protection.
• This website and the account deletion page run on Cloudflare's network, so a request you make to them is handled at whichever of their locations is nearest you, which may be outside the United Kingdom. Where that happens, the transfer is covered by the safeguards in our agreement with Cloudflare, including the UK's International Data Transfer Addendum. The only personal data involved is the email address you type into the deletion page.

Places you have named

You can give a name to somewhere you stop — a filling station, a supermarket, a relative's house — and Odo will recognise it next time. You can also mark a place as staying on this phone, which is there for the ones that say something about you rather than about a shop.

Here is the limit of that, stated plainly, because it is easy to assume more. Marking a place private keeps its name on your phone: we never receive it, and it never appears on your other devices. It does not, and cannot, keep the place itself secret — because a journey to it syncs with the coordinates it started and finished at. Anyone who could read your synced records would still see that you stop at the same address most evenings. They would not be told you call it Home.

Hiding that would mean syncing a record of your driving with the driving removed. If that matters more to you than syncing does, the honest answer is not to sign in — the app is complete without an account, and then none of this leaves your phone at all.

Location, specifically

Odo asks for location permission "all the time" because it needs to keep recording after your screen goes off and while it is in the background — a journey log that stops when you put your phone down is not a journey log. It records only while a journey is running. You can start and stop journeys yourself, and you can turn off automatic starting entirely.

How long we keep it

• While your subscription is active, we keep your synced records so they are there on your other devices.
• If your subscription lapses, we keep them for 90 days and then delete them permanently. Your records stay on your phone throughout — the copy on our server is a copy, and losing it does not lose your data. We will email you when the subscription ends, and again about two weeks before deletion.
• If you ask us to delete your account, we do so within 30 days. The delay exists so that an accidental or malicious deletion can be reversed, not to keep your data longer than we need to.
• Copies of deleted records can survive for a short time in our host's encrypted backups, and are removed as those backups are overwritten in the normal cycle.
• Records we must keep for tax purposes — that a subscription existed and what was paid — we keep for as long as the law requires.

Deleting your account

From inside the app, under Settings, or on the web at odo.launchbench.dev/delete without installing anything. Both do the same thing. Deleting your account removes what is on our server; it does not touch what is on your phone, which stays yours and keeps working.

Your rights

You can ask us for a copy of what we hold, to correct it, to delete it, to restrict or object to what we do with it, or to have it sent to another service. Write to privacy@launchbench.dev and we will answer within a month.

In most cases you will not need us for the parts we hold: the app writes its own backup file, which you control, without an account and without asking us. That file is not everything on your phone. It deliberately leaves out the categories listed above as never travelling — your licence details, your address and contact details, your insurance policies and the whole incident log — because a backup goes wherever you send it, and those are the things that should not. It also does not yet include your named places, outstanding work or payment plans.

If you think we have got something wrong, please tell us first — but you can complain to the Information Commissioner's Office at ico.org.uk at any time.

Children

You must be 18 or over to hold an Odo account or to pay for Plus.

Someone under 18 can be part of a shared household garage, but only if an adult account holder adds them — they cannot sign themselves up. If you add someone under 18, you must be their parent or guardian, and you need to understand what you are agreeing to on their behalf: the journeys recorded against a shared vehicle are visible to everyone in that garage, including yours to them and theirs to you. Please make sure they understand it too.

Anyone in a household can leave it at any time, and their records stop being shared from that moment.

If something goes wrong

If a breach happens that puts your rights at risk, we will tell the Information Commissioner within 72 hours and tell you without undue delay where the law requires it.

Changes

If this policy changes in a way that matters, we will tell you in the app before it takes effect rather than quietly updating this page.