Privacy Policy
The owner of the application and website is Giani Dimitri.
Owner’s email address: hello@magica-app.com.
Website Privacy Policy
Types of Data Collected
Among the Personal Data collected by this Site, either autonomously or through third parties, are: Cookies, Usage Data, email, name and surname. Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific informational texts displayed before the data is collected. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during use of this Site. Unless otherwise specified, all Data requested by this Site is mandatory. If the User refuses to communicate it, it may be impossible for this Site to provide the Service. In cases where this Site indicates certain Data as optional, Users are free to refrain from communicating such Data, without any consequence on the availability of the Service or its operation. Users who have doubts about which Data is mandatory are encouraged to contact the Owner. Any use of Cookies – or other tracking tools – by this Site or by the owners of third-party services used by this Site, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy, if available. The User assumes responsibility for any Personal Data of third parties obtained, published or shared through this Site and guarantees having the right to communicate or disseminate it, releasing the Owner from any liability towards third parties.
Methods and Place of Processing of Collected Data
Processing Methods
The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. Processing is carried out using computer and/or telematic tools, with organizational methods and with logic strictly correlated to the purposes indicated. In addition to the Owner, in some cases, other subjects involved in the organization of this Site (administrative, commercial, marketing, legal staff, system administrators) or external subjects (such as third-party technical service providers, postal carriers, hosting providers, IT companies, communication agencies) may have access to the Data, also named, if necessary, Data Processors by the Owner. The updated list of Processors may always be requested from the Data Controller.
Legal Basis of Processing
The Owner processes Personal Data relating to the User if one of the following conditions exists:
- the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be authorized to process Personal Data without the User’s consent or one of the other legal bases specified below, until the User objects (“opt-out”) to such processing. This is not, however, applicable if the processing of Personal Data is regulated by European legislation on Personal Data protection;
- processing is necessary for the execution of a contract with the User and/or for the execution of pre-contractual measures;
- processing is necessary to comply with a legal obligation to which the Owner is subject;
- processing is necessary for the performance of a task in the public interest or for the exercise of public powers vested in the Owner;
- processing is necessary for the pursuit of the legitimate interest of the Owner or third parties.
It is in any case always possible to request the Owner to clarify the concrete legal basis for each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.
Place
Data is processed at the operational headquarters of the Owner and in any other place where the parties involved in processing are located. For further information, contact the Owner. The User’s Personal Data may be transferred to a country different from where the User is located. To obtain further information on the place of processing, the User can refer to the section relating to details on the processing of Personal Data. The User has the right to obtain information regarding the legal basis of the transfer of Data outside the European Union or to an international organization governed by international public law or formed by two or more countries, such as the UN, as well as regarding the security measures adopted by the Owner to protect the Data. If one of the transfers just described takes place, the User can refer to the respective sections of this document or request information from the Owner by contacting him at the details provided at the beginning.
Retention Period
Data is processed and stored for the time required by the purposes for which it was collected. Therefore:
- Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of such contract is complete.
- Personal Data collected for purposes related to the legitimate interest of the Owner will be retained until such interest is satisfied. The User may obtain further information regarding the legitimate interest pursued by the Owner in the respective sections of this document or by contacting the Owner.
When processing is based on the User’s consent, the Owner may retain the Personal Data for a longer period until such consent is revoked. Furthermore, the Owner may be obliged to retain the Personal Data for a longer period in compliance with a legal obligation or upon order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, at the expiration of such period, the right of access, deletion, rectification and the right to data portability can no longer be exercised.
Purpose of Processing Collected Data
The User’s Data are collected to enable the Owner to provide its Services, as well as for the following purposes: Statistics, Tag Management and Contacting the User. To obtain further detailed information on the purposes of processing and on the Personal Data specifically relevant for each purpose, the User can refer to the respective sections of this document.
Details on Processing of Personal Data
Personal Data are collected for the following purposes and using the following services:
– Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to track the User’s behavior.
Google Analytics with Anonymized IP (Google Inc.)
Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Site, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize advertisements on its advertising network. This Google Analytics integration anonymizes your IP address. Anonymization works by shortening, within the borders of the European Union member states or other countries party to the European Economic Area agreement, the IP address of Users. Only in exceptional cases, the IP address will be sent to Google’s servers and shortened within the United States.
Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy” “Opt Out“.
Display Advertisers Extension for Google Analytics (Google Inc.)
Google Analytics on this Site may use Google interest-based advertising, third-party audience data and information from the DoubleClick Cookie to extend statistics with demographic data, interests and information on interactions with ads. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy” “Opt Out“.
Facebook Ads Conversion Tracking (Facebook, Inc.)
Facebook Ads conversion tracking is a statistics service provided by Facebook, Inc. that links data from the Facebook advertising network with actions taken within this Site. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy“.
Google AdWords Conversion Tracking (Google Inc.)
Google AdWords conversion tracking is a statistics service provided by Google Inc. that links data from the Google AdWords advertising network with actions taken within this Site. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy“.
– Remarketing and Behavioral Targeting
These services allow this Site and its partners to communicate, optimize and serve ads based on past use of this Site by the User. This activity is carried out through the tracking of Usage Data and the use of Cookies, information which is transferred to partners to whom the remarketing and behavioral targeting activity is linked. In addition to the opt-out possibilities offered by the services listed below, the User may opt out of receiving cookies related to a third-party service by visiting the Network Advertising Initiative opt-out page.
AdWords Remarketing (Google Inc.)
AdWords Remarketing is a remarketing and behavioral targeting service provided by Google Inc. that links the activity of this Site with the Adwords advertising network and the Doubleclick Cookie. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy” “Opt Out“.
Facebook Custom Audience (Facebook, Inc.)
Facebook Custom Audience is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that links the activity of this Site with the Facebook advertising network. Personal Data collected: Cookies and email. Place of processing: USA. “Privacy Policy” “Opt Out“.
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that links the activity of this Site with the Facebook advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy” “Opt Out“.
Twitter Remarketing (Twitter, Inc.)
Twitter Remarketing is a remarketing and behavioral targeting service provided by Twitter, Inc. that links the activity of this Site with the Twitter advertising network. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy” “Opt Out“.
Remarketing with Google Analytics for Display Advertising (Google Inc.)
Google Analytics for display advertising is a remarketing and behavioral targeting service provided by Google Inc. that links the tracking activity carried out by Google Analytics and its Cookies with the Adwords advertising network and the Doubleclick Cookie. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy” “Opt Out“.
– Contacting the User
Mailing List or Newsletter
By registering for the mailing list or newsletter, the User’s email address is automatically added to a contact list to which email messages containing information, including commercial and promotional in nature, relating to this Site may be transmitted. The User’s email address may also be added to this list as a result of registration on this Site or after making a purchase. Personal Data collected: name, surname, email.
– Tag Management
These types of services are intended for the centralized management of tags or scripts used on this Site. The use of such services involves the flow of the User’s Data through them and, if applicable, their retention.
Google Tag Manager (Google LLC)
Google Tag Manager is a tag management service provided by Google LLC. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy“.
– Registration and Authentication
By registering or authenticating, the User allows the Site to identify him and give him access to dedicated services. Depending on what is indicated below, registration and authentication services may be provided with the help of third parties. If this occurs, this Site may access some Data stored by the third-party service used for registration or identification.
Direct Registration (This Site)
The User registers by filling out the registration form and providing their Personal Data directly to this Site. Personal Data collected: email, password, name, surname, website.
– Interaction with Social Networks and External Platforms
These types of services allow interaction with social networks, or with other external platforms, directly from the pages of this Site. Interactions and information acquired by this Site are in any case subject to the User’s privacy settings for each social network. In the event that a service for interaction with social networks is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages on which it is installed.
Tweet Button and Twitter Social Widgets (Twitter)
The Tweet button and Twitter social widgets are services for interaction with the social network Twitter, provided by Twitter Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy“.
Like Button and Facebook Social Widgets (Facebook, Inc.)
The “Like” button and Facebook social widgets are services for interaction with the social network Facebook, provided by Facebook, Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy“.
+1 Button and Google+ Social Widgets (Google Inc.)
The +1 button and Google+ social widgets are services for interaction with the social network Google+, provided by Google Inc. Personal Data collected: Cookies and Usage Data. Place of processing: USA. “Privacy Policy“.
User Rights
Users may exercise certain rights with reference to the Data processed by the Owner. In particular, the User has the right to:
- revoke consent at any time. The User can revoke consent to the processing of their Personal Data previously given.
- object to the processing of your Data. The User can object to the processing of their Data when it occurs on a legal basis other than consent. Further details on the right of objection are indicated in the section below.
- access your Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of processing and to receive a copy of the Data processed.
- verify and request rectification. The User can verify the correctness of their Data and request its update or correction.
- obtain limitation of processing. When certain conditions occur, the User can request the limitation of the processing of their Data. In this case, the Owner will not process the Data for any other purpose except their retention.
- obtain deletion or removal of your Personal Data. When certain conditions occur, the User can request the deletion of their Data by the Owner.
- receive your Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its transfer without obstacles to another controller. This provision applies when the Data is processed using automated tools and the processing is based on the User’s consent, on a contract to which the User is a party or on contractual measures related to it.
- lodge a complaint. The User can lodge a complaint with the competent personal data protection authority or take action in court.
Details on the Right of Objection
When Personal Data is processed in the public interest, in the exercise of public powers vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing for reasons connected to their particular situation. It is noted that if their Data were processed for direct marketing purposes, Users can object to the processing without providing any justification. To discover whether the Owner processes data for direct marketing purposes, Users can refer to the respective sections of this document.
How to Exercise Your Rights
To exercise the User’s rights, Users may send a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and are fulfilled by the Owner in the shortest possible time, in any case within one month.
Additional Information on Processing
Defense in Court
The User’s Personal Data may be used by the Owner in court or in preparatory phases to its eventual establishment for defense against abuse in the use of this Site or the connected Services by the User. The User acknowledges that the Owner may be required to disclose the Data by order of public authorities.
Specific Information
At the User’s request, in addition to the information contained in this privacy policy, this Site may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System Logs and Maintenance
For reasons related to the operation and maintenance, this Site and any third-party services used by it may collect System Logs, that is, files that record interactions and which may also contain Personal Data, such as the User’s IP address.
Information Not Contained in This Policy
Further information regarding the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
Response to “Do Not Track” Requests
This Site does not support “Do Not Track” requests. To discover whether any third-party services used support them, the User is invited to consult their respective privacy policies.
Changes to This Privacy Policy
The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page and, if possible, on this Site as well as, where technically and legally feasible, by sending notification to Users through one of the contact details in the Owner’s possession. Please therefore consult this page regularly, with reference to the date of last modification indicated at the bottom. If the changes affect processing whose legal basis is consent, the Owner will proceed to collect the User’s consent again, if necessary.
Definitions and Legal References
Personal Data (or Data)
Any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
Usage Data
Information automatically collected through this Site (including from third-party applications integrated on this Site), including: IP addresses or domain names of computers used by the User connecting to this Site, URI (Uniform Resource Identifier) addresses, the time of request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response from the server (good completion, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal notations of the visit (for example, the time spent on each page) and details relating to the route followed within the site, with particular reference to the sequence of pages consulted, parameters relating to the operating system and the User’s computing environment.
User
The individual using this Site who, unless otherwise specified, coincides with the Data Subject.
Data Subject
The natural person to whom the Personal Data refers.
Data Processor (or Processor)
The natural person, legal entity, public administration and any other entity that processes personal data on behalf of the Owner, as set out in this privacy policy.
Data Controller (or Owner)
The natural or legal person, the public authority, the service or other body that, individually or together with others, determines the purposes and means of processing personal data and the tools adopted, including security measures relating to the operation and use of this Site. The Data Controller, unless otherwise specified, is the owner of this Site.
This Site
The hardware or software tool through which the Personal Data of Users is collected and processed.
Service
The Service provided by this Site as defined in the respective terms (if present) on this site/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document is understood to extend to all current member states of the European Union and the European Economic Area.
Cookies
Small portion of data stored within the User’s device.
Legal References
This privacy notice is drawn up on the basis of multiple legislative orders, including Articles 13 and 14 of Regulation (EU) 2016/679. Unless otherwise specified, this privacy notice concerns exclusively this Site.
The Magica application records data within the application’s own environment.
Giani Dimitri has no access to any data within the application.
Giani Dimitri is not responsible for data recorded or processed by the application itself.
Magica tracks certain user actions regarding the graphical interface, usage methods and frequency of use of the application. To retrieve this data, the Google Firebase service is used. The data obtained through Google appears to Dimitri Giani in anonymous form. In addition to the owner, in some cases, categories of those responsible involved in the organization of the application (administrative, commercial, marketing, legal staff, system administrators) or external subjects (such as third-party technical service providers, postal carriers, hosting providers, IT companies, communication agencies) may have access to such data, also named, if necessary, Data Processors by the Owner. The updated list of Processors may always be requested from the Data Controller.
This data is archived on third-party servers, information about which may be provided upon request. Data will be archived for as long as necessary for the application to function.
Privacy Policy for the Magica app
Last updated: 6 August 2026
This section covers the Magica app for iPhone, Apple Watch, CarPlay and its
widgets. How the magica-app.com website handles data is described in the
previous section of this document.
1. Data controller
The data controller is Dimitri Giani, Largo Riviera 7, Pisa 56128 Itala.
P.IVA: IT02381200506, C.F. GNIDTR80C25G702S.
For anything concerning your data, write to hello@magica-app.com
(support: support@magica-app.com).
2. In short
Magica works without an account: we do not know who you are. We do not
collect your name, your email address, or any of the content you create in the
app — vehicles, trips, GPS routes, refuellings, expenses, photos and documents
stay on your device and are never uploaded to our servers.
We only collect which features of the app get used, tied to a random
identifier that does not identify you, so we can tell what works and what does
not. You can turn this off whenever you want. There are no ads, no profiling,
and we do not sell or share data with anyone.
Three things fall outside that promise, described in full further down because
you deserve to know them:
- some features need the network to exist at all — voice commands, AI
vehicle search, nearby fuel stations, speed cameras, weather, charge points,
notifications (sections 6 and 7). Wherever a position is needed, it is sent
rounded to roughly one kilometre, used only to answer the request, and not
stored; - purchases: we know that a subscription is active, which product and when
(section 9). Payment details are handled by Apple; we never see them; - app crashes: when Magica crashes we receive a technical report, without
your data (section 7).
If you enable the iCloud backup, your data is copied into your iCloud
storage, which is Apple’s responsibility. We have no access to it.
3. Data the app handles on your device
In normal use, the following data is created and kept on the device:
| Category | Content |
|---|---|
| Vehicles | make, model, plate (if you enter it), year, fuel type, technical data, photo |
| Trips | date and time, GPS positions along the route, speed, distance, duration, start and end addresses, tags, notes, driving score |
| Refuellings and charges | date, quantity, price, fuel type, odometer, position of the refuelling, notes |
| Services, deadlines and costs | type of work, date, amount, garage/place, expiry dates, notes |
| Attached documents | photos and PDFs you attach to trips, services and vehicles |
| Sport Mode | telemetry of accelerations and track sessions |
| Statistics, goals and badges | values computed from the data above |
| Settings | app preferences, units, currency, notifications, Bluetooth devices recognised for automatic trip start |
This data is yours and stays in the app’s own storage: you can export it
(PDF, CSV, GPX, full backup), transfer it to another device, or delete it at any
time, including by uninstalling the app.
Some of it — the GPS positions and your movements in particular — is
personal data that describes your habits. That is exactly why the app keeps it
local and does not send it to our servers, except in the cases listed in
section 6.
4. Permissions the app asks for
Magica only asks for permissions that serve a concrete feature. You can deny or
revoke any of them at any time in the iOS Settings: the app keeps working, with
that feature switched off.
| Permission | What it is for |
|---|---|
| Location (including in the background) | recording trip routes, the position of a refuelling, where you parked, nearby fuel stations and charge points, speed camera alerts |
| Motion & Fitness | recognising automatically that you are driving, to start and stop a trip |
| Bluetooth | recognising your car stereo or Bluetooth device to start trips automatically, and talking to the Board Magica accessory |
| Local Network | finding your other devices for data transfer and for API Mode over your Wi-Fi |
| Camera | taking the vehicle photo, photographing documents, reading the odometer |
| Photos | picking and saving vehicle images and attachments |
| Microphone | recording voice commands |
| Notifications | deadline reminders, driving and efficiency alerts, app news |
| Siri & Shortcuts | triggering Magica actions by voice or from iOS Shortcuts |
5. iCloud and backup (Apple)
If your iPhone has iCloud enabled, Magica uses it in two ways:
- Backup of the app data. On your request, or automatically if you enable
automatic backup, the app creates an archive with the database and the
attachments and saves it in the Magica folder of your iCloud Drive. - Syncing some preferences across your devices, through iCloud’s key-value
store.
In both cases the data stays in your iCloud account: the controller has no access whatsoever to that space. Processing there is governed by Apple Inc.’s
privacy policy. The same applies to the full iPhone backup handled by iOS, which
may include the app’s data.
The app also uses Apple’s services built into iOS to show maps, turn coordinates
into addresses (geocoding), search for places and compute routes: in those
operations the coordinates are processed by Apple under its own policy.
6. When data leaves the device towards our servers
These are all the features that send data to servers operated by the
controller (api.magica-app.com, admin.magica-app.com, tracker.dimix.it).
6.1 App usage statistics
To understand which features get used and how to improve the app, Magica
collects usage statistics through an analytics service operated directly by the controller (not by a third party).
What is sent:
- a random identifier generated by the app on first install. It does not
contain your name, your email address or the device identifier, it stays on
this device, it does not link your devices to one another, and it is replaced
by a new one if you uninstall and reinstall the app; - usage events (for example: opening a screen, starting a trip, exporting a
report) and the screens visited; - the length of usage sessions;
- device model, iOS version, app version, language and country as reported
by the system settings; - your subscription status and purchases (product, price, currency,
transaction identifier, trial or promotional period), to measure how
subscriptions are doing.
What is not sent: your vehicles, your trips, your routes, your positions,
the amounts you record in the app, or anything you have written.
The statistics are never used to profile you for advertising and are not shared
with third parties.
You can turn them off at any time in Settings → Share usage statistics,
inside the app. With the switch off nothing is sent any more, and no feature of
the app changes or becomes limited.
6.2 Voice commands
When you use a voice command, the audio recording is sent to our servers, and
from there:
- the audio is passed to OpenAI to be transcribed into text. The audio is
not retained: it is deleted right after transcription; - the transcribed text is passed to Anthropic to interpret the command.
Only the technical context needed to interpret it correctly travels with the
command: vehicle fuel type, units, currency, language, vehicle name, current
odometer reading, and the list of available expense and service categories. No
data that identifies you is transmitted.
For technical monitoring and service improvement, the transcribed text and the
response stay in our logs for a maximum of 30 days, after which they are
irreversibly anonymised. Only aggregate metrics remain (processing time, command
type, outcome), which cannot be traced back to a person.
The feature is optional: it is enabled only after you have read and accepted
the dedicated notice shown in the app, and you can simply not use it without any
limitation to the rest of the app.
6.3 AI vehicle search
When you look for your vehicle by describing it, the text you write is sent
to our servers and from there to Anthropic, which interprets it to identify
make, model and technical data. Nothing else is transmitted. The same consent
described in 6.2 applies.
6.4 Fuel stations and fuel prices
If you use the fuel station map, or the prices widget, the app sends our servers
the approximate position of the area and a search radius, in order to
receive the list of stations and prices.
The position is rounded by the app before it leaves, to about one kilometre:
what reaches us is an area, not an address. It is used only to answer the
request, it is not stored, it is not associated with your identifier, and it is
not used to reconstruct your movements.
6.5 Speed camera alerts
If the feature is on, the app periodically sends our servers the approximate position of the area, the radius and the country, to receive the list of speed
cameras nearby. The same conditions as 6.4 apply: position rounded to about one
kilometre before sending, used only to answer, not stored.
6.6 Push notifications and Live Activities
To deliver notifications, iOS assigns the app a notification token, which is
registered with Google Firebase Cloud Messaging (section 7) and, for the Live
Activity of a trip in progress, with our servers. The token identifies the app
installation on that device, not you. It is used solely to deliver the
notification and is discarded when the activity ends or when you uninstall the
app.
6.7 App content
The app downloads content from our servers that has nothing to do with your
data: the list of makes and models, news and service announcements, configuration
parameters. Those requests only carry the app’s language. As with any connection
to the internet, the server records the requesting IP address in its technical
logs.
7. Third-party services
| Service | Data transmitted | Purpose | Location | Policy |
|---|---|---|---|---|
| OpenAI, L.L.C. | audio recording of the voice command | speech-to-text transcription | USA | openai.com/privacy |
| Anthropic PBC | transcribed command text; vehicle search text | interpreting the request | USA | anthropic.com/privacy |
| Google (Firebase Cloud Messaging) | notification token, installation identifier, technical device data, IP address | delivering push notifications | USA/EU | firebase.google.com/support/privacy |
| Google (Firebase Crashlytics) | crash reports: device type, iOS and app version, app state at the time of the crash, installation identifier | diagnosing and fixing malfunctions | USA/EU | firebase.google.com/support/privacy |
| WeatherAPI.com | approximate position (~1 km), language | weather shown in the app and on the Board Magica accessory | USA | weatherapi.com/privacy.aspx |
| Open Charge Map | approximate position (~1 km) | list of nearby charge points (electric vehicles) | EU/USA | openchargemap.org/site/about/privacy |
| Frankfurter API | currency codes and date | exchange rates for expenses in foreign currency (no personal data) | EU | frankfurter.app |
| Chatbase, Inc. | the messages you type in the support chat | automated user support | USA | chatbase.co/privacy |
| Apple Inc. | coordinates and queries for maps, geocoding and routing; in-app purchases; iCloud backup | making maps, purchases and iCloud work | USA/EU | apple.com/legal/privacy |
Firebase Crashlytics collects a report only when the app crashes, and that
report contains technical information about the state of the program: it does
not contain your vehicles or your trips.
The support chat is an external service embedded in the app: what you type in
that window is processed by Chatbase, Inc. Avoid entering personal data that is
not necessary for your support request.
8. Features that stay on your network or your devices
Some features exchange data without going through any server: the
communication happens directly between your own devices.
- Data transfer between devices. You can copy Magica’s data from one device
to another (including to Android) over the local Wi-Fi network. The data
travels straight from one device to the other; the transfer only starts after
you confirm it on both. - API / MCP Mode. If you enable it, the app exposes your data as a service on
the local network, so that a computer of yours, or an AI assistant you have
authorised, can read or modify it. Every client must be paired with a code
shown on screen, gets access you can revoke at any moment, and every operation
is written to a local audit log. The feature is off until you turn it on,
and the service is reachable only from your own local network. - Board Magica accessory. If you use the accessory, the app sends it over
Bluetooth the texts to display (greeting, data about the trip in progress,
weather). The accessory has no internet connection and stores nothing.
9. Purchases and subscriptions
Purchases (subscriptions and one-off purchase) are handled by Apple through
the App Store. The controller never receives or processes your payment
details: from Apple we only learn that a subscription is active, which product
it is and its transaction identifier, used to unlock the features and for the
statistics described in 6.1.
10. Legal bases for processing
| Processing | Legal basis (GDPR art. 6) |
|---|---|
| Vehicles, trips, expenses and attachments on the device | performance of the service you requested (art. 6.1.b) — the data stays on your device |
| Voice commands and AI vehicle search | consent (art. 6.1.a), given by enabling the feature; withdrawn by no longer using it |
| Fuel stations, speed cameras, weather, charge points | performance of the service you requested (art. 6.1.b): the feature cannot work without a position |
| Push notifications and Live Activities | performance of the service you requested (art. 6.1.b) and your consent to the notification permission |
| Usage statistics | the controller’s legitimate interest in improving and securing the app (art. 6.1.f), with the objection exercisable directly from the app’s settings |
| Crash reports (Crashlytics) | the controller’s legitimate interest in keeping the app working correctly (art. 6.1.f) |
| Support (email and chat) | performance of the service and legitimate interest in answering requests |
| Purchases | performance of the contract and legal obligations |
11. Retention periods
- Data in the app: stays on your device until you delete it or uninstall the
app. The controller holds no copy of it. - iCloud backup: stays in your iCloud storage until you delete it.
- Voice commands: the audio is not retained; text and response stay in the
logs for at most 30 days, then are irreversibly anonymised. - Usage statistics: individual events are kept for 14 months, then
deleted; only aggregate figures remain, referring to no installation. - Crash reports: according to Google Firebase Crashlytics’ policies (as a
rule 90 days for the crash detail). - Server technical logs: 30 days.
- Support emails: kept as long as needed to handle the request and for any
subsequent dispute period.
12. Transfers outside the European Union
Some of the providers listed in section 7 are based in the United States.
Transfers rely on the Standard Contractual Clauses approved by the European
Commission and/or on the provider’s certification under the EU-U.S. Data Privacy Framework. You can ask about the safeguards in place by writing to
hello@magica-app.com.
13. Your rights
In relation to the data concerning you, at any time you can request: access,
rectification, erasure, restriction of processing, portability, and you can
object to processing based on legitimate interest. Where processing is based on
consent, you can withdraw it at any time, without affecting the lawfulness of
processing carried out beforehand.
Write to hello@magica-app.com. We will answer within one month.
Since the app works without an account, to act on a request concerning the usage
statistics we need the identifier of your installation: the simplest way is to
write to us through the support function inside the app, which attaches it
to your request. Without that identifier we are genuinely unable to connect any
data to you — which is also the reason we do not collect anything else.
If all you want is to stop being measured, there is no need to write: the
switch in Settings → Share usage statistics takes effect immediately.
You also have the right to lodge a complaint with the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or with the supervisory
authority of the country where you live.
14. Children
Magica is not intended for children under 16 and does not knowingly collect
their data. If you believe a child has provided us with data, write to
hello@magica-app.com and we will delete it.
15. No advertising and no ad tracking
The app shows no advertising, does not use the IDFA (Apple’s advertising
identifier), does not ask for permission to track you across other companies’
apps and websites, does not profile you for marketing, and does not pass data to
advertising intermediaries.
16. Changes to this policy
The controller may change this policy at any time, announcing it on this page
and, for significant changes, through the app. The date of the last update is
shown at the top of this document.