NovaAuto

Type approval, vehicle data and road tax — entirely on the device

Privacy policy

Last updated: 5 September 2026

NovaAuto looks up vehicle data and calculates cantonal road tax — both entirely on your device. We run no server for this app, and there is no account or login. The vehicle database is built into the app; nothing is fetched and nothing is transmitted. The vehicle and tariff data originate from publicly available third-party sources and are neither collected nor verified by us. The app makes no internet connection at all. Keeper data is not queried and is not part of this app.

1. Data controller

We have not appointed a data protection officer or an EU representative because we do not reach the relevant thresholds. Please address all requests to the contact above.

2. What data we process

What we explicitly do not collect

• No account, no name, no e-mail address
• No advertising, no advertising ID, no analytics, no trackers
• No server of our own and no network connection whatsoever
• No keeper data, no licence plate lookup

3. Permissions on your device

The app requests only the following permissions. Each of them can be revoked at any time in your device settings; the app remains usable afterwards, with reduced functionality.

• Camera — Only to scan the registration document. Recognition runs on the device; no image is stored or transmitted. The app also works without this permission — you can type the type approval number by hand.

4. Legal bases

We process personal data under the Swiss Federal Act on Data Protection (revFADP). Where the GDPR applies, we rely on:

• Performance of a contract (Art. 6(1)(b) GDPR) — everything needed for the app to deliver the function you requested.
• Legitimate interests (Art. 6(1)(f) GDPR) — secure and stable operation, abuse prevention, troubleshooting.
• Consent (Art. 6(1)(a) GDPR) — for anything you actively enable in this app: the camera (only to scan the registration document). Consent can be withdrawn at any time with effect for the future by revoking the permission in your system settings.
• Legal obligation (Art. 6(1)(c) GDPR) — in particular commercial and tax retention duties for payments.

5. Recipients and third parties

6. Retention and deletion

We store nothing because we run no server for this app and the app makes no network connection. Your input stays on the device and disappears on uninstall.

Step-by-step instructions are available at Delete data.

7. Children and young people

This app is not directed at children. We do not knowingly collect personal data from children under 16. If we learn that such data has been submitted without parental consent, we delete it without delay.

8. Data security

Wherever the app transmits data at all, connections are encrypted via HTTPS/TLS. On the server side we use access restrictions, tenant separation and regular backups. Nobody can, however, guarantee absolute security for data transmission over the internet.

9. Your rights

• Access to the personal data we process
• Rectification of inaccurate data
• Erasure or destruction of your data
• Restriction of and objection to processing
• Receiving or porting your data in a common format
• Withdrawal of consent with effect for the future

An informal message to info@babala.ch or a call to 076 792 63 50. We normally respond within 30 days. To verify your identity we may request suitable proof. You may also lodge a complaint with a supervisory authority (Switzerland: FDPIC; EU: your competent authority).

10. Changes to this policy

We may adapt this policy when the app or the legal framework changes. The version published on this page, with the date shown above, is the applicable one. We announce material changes inside the app.