The short version.
- No accounts. The app doesn't ask you to sign up or sign in.
- No tracking. No analytics SDKs, no advertising IDs, no third‑party trackers.
- Your vehicles stay on your phone. Registrations and reminder settings live in local storage on your device.
- Lookups send only the registration. When the app looks up a vehicle, the registration goes to our server, which asks DVLA for the MOT and tax dates.
- Documents are encrypted on your phone. Scans in the Document Wallet are encrypted on the device and never sent to us.
- You can delete everything by removing a vehicle, or by deleting the app.
Who we are
Glovebox (previously MOT & Tax Tracker) is an iOS application that helps UK drivers keep on top of MOT and Vehicle Tax expiry dates, and keep copies of their driving documents. This privacy policy covers the iOS app and this website.
If you have any questions about this policy or how your data is handled, you can reach us at hello@dykewerk.app.
What information we collect
Information you give us
You give the app the UK vehicle registration number (and an optional nickname) for each vehicle you track. If you use the Document Wallet, you also give it scans of your documents. You can add or remove either at any time.
Information generated on your device
The app stores the following locally on your iPhone or iPad:
- Your list of tracked vehicles and their fetched details (make, model, MOT expiry, tax expiry).
- Your reminder preferences (1, 7, 14 or 30‑day notice for MOT and Tax independently).
- Your active subscription tier (managed by the App Store, not by us).
- If you use the Document Wallet: encrypted scans of your documents, and a list of which documents you've added, to which vehicle, when, and any expiry date you set.
This data is held in the app's private container. Apart from the registration lookup described below, none of it is sent to us.
Information we do not collect
- We do not require an account, email address, name or password.
- We do not use third‑party analytics, advertising or tracking SDKs.
- We do not collect device identifiers or location data. Our lookup server sees your IP address while it handles a request; see below.
- We do not sell, rent or share any data with third parties for marketing purposes.
Vehicle lookups
When the app looks up a vehicle, it sends the registration you typed to our lookup server at mot-api.dykewerk.dev. The server holds our DVLA API key, asks the DVLA Vehicle Enquiry Service for the vehicle's make, model, MOT expiry and tax status, and returns the result to your device, where it's stored.
The request contains only the registration. Like any web server, ours sees the IP address a request comes from. It keeps that address in memory for up to an hour to limit how many lookups one address can make. It caches each DVLA result for 24 hours so a repeat lookup doesn't go back to DVLA, and records the registration and the result in its log. DVLA's handling of the lookup is covered by its own privacy policy.
Document Wallet
With Unlimited Vehicles, you can keep copies of your driving licence and passport, and of each vehicle's insurance certificate, V5C, MOT certificate and breakdown cover. You scan them with the camera; the scanning happens on the device.
Each page is encrypted on the device with AES-256-GCM before it's saved. The key is kept in your iCloud Keychain, so a backup restored to a new phone can still open them; Apple encrypts iCloud Keychain end to end, and we can't read it. The encrypted pages are saved in the app's private storage and are included in your device and iCloud backups, still encrypted. The list of documents (type, vehicle, date added and any expiry date) isn't encrypted, so the app can show it before you unlock.
Documents only open after Face ID, Touch ID or your device passcode, and the app won't store documents on a device without a passcode. Nothing in the Document Wallet is sent to us.
Notifications
If you grant notification permission, the app schedules local notifications on your device to remind you of upcoming expiries, including any insurance, MOT certificate or breakdown cover expiry you set in the Document Wallet. They're scheduled on the device and don't go through any server of ours.
Subscriptions and payments
The app purchase and the Unlimited Vehicles subscription are processed by Apple through the App Store using your Apple ID. We never see your card details, billing address or full Apple ID. Apple tells the app only whether the subscription is active, so it can unlock the corresponding features.
Apple's own privacy policy applies to that transaction and can be found on apple.com.
This website
This site is self-hosted. The web server keeps standard access logs (IP address, user-agent) for security and abuse prevention. There are no cookies, no analytics and no advertising on this site, and no way for us to associate a visitor with an app user.
How long we keep things
Because vehicle data and documents live on your device, retention is up to you. Removing a vehicle or a document inside the app deletes it. Deleting the app removes everything from the device. The Document Wallet's key stays in your iCloud Keychain afterwards, and older backups may hold encrypted pages until they're replaced.
Your rights
Under UK GDPR you have the right to access, correct or erase any personal data we hold about you. We don't operate user accounts, and the lookup server has nothing that links a registration to a person, so in practice this means controlling the data on your own device. If you believe we've handled your data improperly, you can contact us, or lodge a complaint with the Information Commissioner's Office (ICO).
Children
The app is not directed at children under 13 and we do not knowingly collect data from them.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top of the page and, where appropriate, mention it inside the app. Continued use of the app after changes constitutes acceptance of the revised policy.
Contact
Questions or requests: