Privacy policy
Trogro (representative Young Kon Kim, Korean business registration no. 647-19-01998; "we") runs Ollie ("the service"). This policy explains, as Korea's Personal Information Protection Act (PIPA) Article 30 requires, what personal data we process and why, how long we keep it, who else handles it, and how you can exercise your rights. The Korean version is the primary text.
1. Why we process personal data
We process personal data only for the purposes below. If a purpose changes we will take the steps the law requires, including asking for new consent (PIPA Article 18).
- Taking sign-ups and admitting people (the waitlist and the operators' approval)
- Running the service: talking with your car, keeping its service record, checking quotes, finding a shop, explaining fault codes, service reminders and car alerts, fuel spend, sharing a car
- The car phone (optional): reading the car's OBD data for mileage, battery health, fault codes, trips and the driving score
- Google (optional): adding bookings to your calendar, checking free time, reading fuel and car charges from your card-alert emails
- Usage limits per plan, and service statistics (counts per setup step and the like, never message text)
- Answering questions and complaints, preventing abuse, security
2. What we collect
| Category | Items | How |
|---|---|---|
| Sign-up (required) | Telegram user ID, Telegram display name, username, profile photo URL, whether the bot may message you, your language, your car (make, model, year, whether you plan a car phone) | Telegram login on the website, the sign-up form |
| Using Ollie (required) | Your conversation (your messages and Ollie's replies), your car (possibly its VIN), service records (date, work, cost, shop), mileage, fuel records, facts you tell the car, answers to the daily question, settings (language, units, time zone, notifications), speech statistics (counts of listed words only, never message text), usage (AI usage and its cost), setup statistics (step and time only) | Telegram chat |
| Photos and documents (optional) | What is read from a receipt, dashboard or registration photo (the work, the amount, the mileage, the car). The photo itself is not stored. A registration document's owner name, resident registration number and address are not stored. Car documents (PDF or photo) are stored as text with address, phone, email and name lines removed; the file is not kept. | Photos and files sent in Telegram |
| Car phone (optional) | Values read over OBD (speed, engine rpm, temperatures, battery voltage, fuel level, odometer, fault codes and the like), trips (start and end time, distance, hard braking and acceleration counts), the phone's status (app version, device model, Android version, battery and temperature, network type, carrier, signal strength, error counts), a device token (stored only as a hash). No location (section 11). | The Ollie app on an Android phone kept in the car |
| Google (optional) | Google tokens (encrypted), calendar events Ollie creates, the card-alert senders you confirmed, and for fuel and car charges only: amount, currency, merchant brand, date. Card digits and email text are not stored; charges unrelated to the car are discarded at once. | Connecting your Google account (OAuth) |
| Collected automatically | Session cookie, language cookie, IP address (rate limiting and security logs), service logs | Generated when you use the site or the app |
3. How long we keep it
We keep personal data only for the period consented to or required by law, and destroy it without delay afterwards.
| Data | Kept |
|---|---|
| Sign-up details | Until you delete your account (/delete CONFIRM). Sign-ups never admitted are deleted one year after the application |
| Account, conversation, service and fuel records, car details, settings, usage | Until you delete your account. /reset CONFIRM clears your conversation any time. On a shared car the car's records stay with its other members (section 6). |
| Raw car data (OBD values) | 45 days |
| Per-minute summaries | 90 days |
| Daily summaries, trips, fault codes, driving scores | As long as the car exists |
| Car phone status | The latest report and a daily summary, until the device is removed or the car is deleted |
| Car document text | Until /docs remove or the car is deleted |
| Google tokens, card-alert settings | Until /disconnect google or account deletion |
| Server logs | The hosting provider's retention (up to 30 days) |
| Backups | May remain in database backups we take; each backup is destroyed within 90 days of being made |
4. Sharing with third parties
We do not currently provide personal data to third parties. If that changes we will tell you who receives what, for what purpose and for how long, and ask for separate consent where the law requires it, except where a law specifically provides otherwise.
People who share a car in Ollie see that car's service record, driving data and fuel records. Each person's conversation, answers to the daily question, card and Google details stay private to them.
5. Processors and transfers abroad
We entrust processing to the companies below, and some of them are abroad (PIPA Article 28-8). Data travels over encrypted connections (HTTPS) whenever the service needs it.
| Recipient (contact) | Country | Data | Purpose | Retention |
|---|---|---|---|---|
| Anthropic, PBC | United States | Your conversation, the parts of the car's record a reply needs, photo and document contents, car-related card-alert emails | Writing replies (the AI model), web search, reading photos, documents and emails | Anthropic's API data retention policy |
| OpenAI, L.L.C. | United States | As for Anthropic | Backup AI model, used only when the main model (Anthropic) is failing or the operator switches to it | OpenAI's API data retention policy |
| Railway Corporation | United States | Everything in this policy | Hosting the servers and the database | Until the contract ends, or the periods in section 3 |
| Google LLC | United States | If you connect Google: calendar events, access to card-alert emails. Shop search: the query (a shop name, a district) | Calendar and mail features (only if connected), shop search and ratings | Google's policies; Ollie stores place IDs only |
| Brave Software, Inc. | United States | Search queries (car and service questions) | Web search for drivers outside Korea | Brave's policy |
| US National Highway Traffic Safety Administration (NHTSA) vPIC | United States | The VIN only | Decoding a VIN (make, model, year) | A public API; nothing that identifies you is sent |
| Telegram (Telegram Messenger Inc. and affiliates) | United Arab Emirates and others (per Telegram's policy) | Your conversation, photos, Telegram account details | Carrying messages (the messenger you use) | Telegram's policy |
| NAVER Cloud Corp. | Korea | Search queries, destination addresses | Shop and place search, blog reviews, address lookup, map images | NAVER's policy |
| Kakao Corp. | Korea | Search queries | Shop and place search | Kakao's policy |
How to refuse a transfer abroad: do not sign up, or, once you use Ollie, delete your account with /delete CONFIRM. The AI model is the core of the service, so refusing that transfer means you cannot use Ollie. Google transfers stop if you never connect Google or run /disconnect google.
Public data (NHTSA recalls and complaints, Korea's vehicle management data, the public register of garages) is only downloaded; no personal data is sent.
6. How we destroy data
- Data past its period or purpose is destroyed without delay. Raw car data is removed by month by a clean-up that runs every hour.
- Account deletion (/delete CONFIRM): your account, conversation, settings, usage and sign-up are deleted and Google access is revoked at Google. A car only you belong to is deleted with all its records. On a shared car your conversation and membership go; the car's records stay with the other members (with your name as author removed).
- Electronic records are deleted from the database so they cannot be restored. We hold no paper records.
- Data in backups is destroyed with the backup, within 90 days of the backup being made.
7. Your rights
You may ask at any time to see, correct, delete or stop the processing of your personal data, directly in Ollie or through the contact in section 13.
- See: ask the car (its record, the car's details), /fuel, /docs, /usage, /google, /devices
- Correct: tell the car (a service record, the mileage, the car's details)
- Delete: /delete CONFIRM (account), /reset CONFIRM (conversation), /docs remove (documents), /removecar (a car)
- Stop: /quiet (the daily question), /cardalerts off, /disconnect google, removing the car phone (/removedevice)
- A copy of your data: email the address in section 13 and we will send it within 10 days
We act within 10 days and tell you the result, or why the law limits the request. A representative may ask on your behalf.
8. Children under 14
Ollie is a service for drivers and does not accept sign-ups from children under 14. If we learn that we hold personal data of a child under 14, we destroy it without delay.
9. How we keep it safe
- Access control: row-level security on every user table in the database, so each person reads only their own data and the cars they share. The service connects without administrator rights.
- Encryption: all traffic over HTTPS. Google and card tokens are stored encrypted; car-phone tokens only as a hash.
- Collecting less: the car-phone app only reads the car; it cannot change a setting or clear a fault code. National ID numbers are masked before anything reaches the conversation history or a log.
- Operations: the database sits on a private network with no public address; only the founders hold operator rights; secrets are never kept in the code repository.
10. Cookies
The website uses only these cookies, each needed for the site to work. Nothing is used for advertising or analytics, so there is no cookie consent pop-up.
ollie_session: keeps you signed in after the Telegram login (expires after 7 days).ollie_lang: remembers the language you picked, English or 한국어 (deleted when you close the browser).ollie_next: remembers where to return after the Telegram login (expires after 15 minutes).
The Telegram login button on the home page is provided by Telegram; when you use it, Telegram may set its own cookies under Telegram's privacy policy. You can block cookies in your browser, but then you cannot sign in on the website.
11. Location
Ollie does not collect your location. A location sent in Telegram is discarded unread, and directions are made only to a destination you name. The car phone's location feature is off by default and will not be switched on for users before the filing (or registration) under Korea's Location Information Act is complete. Today it is used only to test the founders' own cars.
12. Automated processing (the driving score)
With a car phone, a driving score is calculated automatically from hard braking, hard acceleration and night driving. It is shown only when you ask, and it is not used for any decision with legal or similarly significant effect on you. You may ask how it is calculated.
13. Privacy officer
- Name and title: Young Kon Kim, representative
- Email: privacy@olliecar.com
- Telegram: ask in your chat with @OllieCarBot
You can also report or seek advice on a privacy infringement at: the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors' Office (www.spo.go.kr, 1301), the Korean National Police Agency (ecrm.police.go.kr, 182).
14. Changes to this policy
We announce a change on the website and in Ollie 7 days before it takes effect (30 days for a change that is worse for you). Earlier versions stay readable on this page.
Effective date: 27 September 2026