Geldos Station · Forecourt Privacy
PUMP 00 · DATA METER RESET

Privacy Policy

Geldos Station keeps your fuel card balances, café orders and loyalty points in one app. This page explains, pump-stage by pump-stage, exactly what the app holds and where it stays.

Personal data sold
0.00
litres · ever
Ad networks
0.00
integrated
Third-party trackers
0.00
running
Last updated 21 September 2026
Scope

Who this policy covers

This policy applies to the Geldos Station mobile app, published by Amelia Frost. It covers the information the app handles on your phone and the limited information that must travel to a fuel station's own systems so a balance can be read, a café order can be placed, or loyalty points can be redeemed.

It does not cover the separate privacy practices of the fuel networks, station operators or payment processors whose systems the app talks to. Those organisations hold your card account with them, and their own privacy terms govern that relationship.

On device

What stays on your phone

Geldos Station is built around local storage first. The following live in the app's private storage area on your device and are not copied to any server run by the publisher:

  • Fuel card records — the card numbers you add, a friendly label if you set one, and which card you marked as default.
  • Card PINs — stored using your device's secure keystore/keychain, never in plain text, and never transmitted anywhere except to the station network that issued the card, in order to authenticate a balance lookup.
  • Cached balances and transaction history — the litres pumped, price per litre, amount spent and timestamp for each transaction, kept so the balance screen works offline after a prior sync.
  • Loyalty point totals and accrual history — the figures behind the bonus screen chart.
  • Your café order history and any saved favourites.
  • App preferences — notification toggles, default pickup time, and display settings.

Deleting the app removes all of this local data from your device permanently. It is not backed up to the publisher.

In transit

What must leave your device, and why

Some actions cannot work offline. In each case the app sends the minimum needed, directly to the relevant station system, over an encrypted connection:

Balance syncCard number + PIN sent to the issuing fuel network to retrieve your current balance and recent transactions.
Café orderThe items chosen, your requested pickup time, and a short order reference sent to that station's café counter system.
Loyalty redemptionYour loyalty identifier and the reward you selected, sent to the network's loyalty platform so the discount or coupon is issued.
Push notificationsAn anonymous device token held by your platform's push service, used only to tell you an order is ready or a balance changed.

Nothing else is transmitted. There is no background upload, no silent sync of your history, and no copy of your data sent anywhere for the publisher's own use.

Zero

What Geldos Station does not do

  • No advertising SDKs, ad IDs, or ad networks are present in the app.
  • No third-party analytics, behavioural profiling, or session-recording tools.
  • No selling, renting, licensing or trading of your data — this is not a business model we operate, now or in future versions.
  • No account registration with the publisher. There is no Geldos Station username, no password on our side, and no user database to breach.
  • No contacts, photos, calendar, microphone or camera access requested.
  • No cross-app or cross-device tracking of any kind.
Location

Location and permissions

If you choose to enable it, the app may use your approximate location purely to show which partner stations are nearby and to pre-select the café menu for the station you are heading to. Location is used in the moment, on the device, and is not logged, stored as history, or transmitted to the publisher.

Location is optional. Declining it leaves every core function — balances, ordering by choosing a station manually, and loyalty — fully usable. You can revoke the permission at any time in your device settings.

Notices

Push notifications

Notifications are off until you switch them on. When enabled, they cover order-ready alerts, low-balance warnings, and confirmation that a loyalty redemption has been applied. Notification content is generated for your device only; the publisher does not send marketing pushes and does not operate a promotional messaging list.

Retention

How long data is kept

Local data is kept for as long as you keep the app installed and the card added. Removing a card from the app deletes its cached balance, PIN entry and transaction cache immediately. Clearing app data or uninstalling deletes everything at once.

Records held by a fuel network or café operator — the actual account ledger behind your card — are retained under that operator's own schedule and are outside the publisher's control.

Your rights

Access, correction and deletion

Because the publisher does not hold a copy of your data, you exercise most rights directly in the app: view everything on the balance, orders and bonus screens; correct a mistyped card by removing and re-adding it; delete by removing a card or uninstalling.

For data held by the fuel network about your card account, contact that network directly. If you need help working out who to ask, write to us and we will point you in the right direction.

Children

Age

Geldos Station is intended for licensed drivers and adult account holders. It is not directed at children under 13, and we do not knowingly hold data from them. Since no data reaches the publisher, there is nothing on our side to remove; a parent or guardian can delete everything locally by uninstalling the app.

Changes

Updates to this policy

If the app's data behaviour ever changes — for example if a new feature requires something to be transmitted — this page will be updated and the date at the top revised before that version ships. Material changes will also be flagged inside the app.

Questions about anything above? Email amelia.frost98@gmail.com or use the support page.

Meter reading, end of document: 0.00 personal records collected by the publisher. The nozzle was never lifted.