Privacy Policy — MotoBot AI
App publisher: Omnexa. Contact: kontakt@omnexa.pl. Updated: 5 November 2026.
App and contact
This policy covers the Android app MotoBot AI, also called MotoBot, published under the Omnexa brand. For app and privacy matters, contact kontakt@omnexa.pl. The operator’s full legal identity is still being completed; the Omnexa brand alone does not fully identify the data controller.
Account and vehicle data
The server processes your email address, optional username, password hash, authentication information and account activity dates. Vehicle profiles include make, model, year, engine, fuel type, transmission, mileage and an optional VIN. Information comes from you or from OBD2 adapter readings.
Diagnostics, conversations and reports
Processed information includes DTC codes, OBD2 readings and samples, test parameters, vehicle and measurement quality metadata, conversations and AI responses. Conversation history is stored on the server. CSV and PDF files may be stored locally and shared by you. Report monitoring records information such as status, processing time, sample count, data quality and token usage; its database table does not contain the VIN, CSV contents or report contents.
AI and data recipients
When you use chat or request a diagnostic report, the server sends the query, conversation and vehicle context, or the CSV file and test metadata needed for analysis, to the OpenAI API. Do not include unnecessary personal data in requests. The AI provider may process data outside the European Economic Area; its documentation describes its rules and safeguards. Infrastructure, hosting and email providers may also access data needed to provide their services. Data is not sold. The operator still needs to confirm the infrastructure providers, regions and arrangements for international transfers.
Purposes and legal bases
Account management, vehicle profiles, history and requested analyses are processed to provide the service at your request (GDPR Article 6(1)(b)). Support, abuse prevention, usage limits and fault diagnosis serve the operator’s legitimate interests (GDPR Article 6(1)(f)). Statutory obligations rely on GDPR Article 6(1)(c), where applicable. Providing account data is voluntary but necessary for account features; optional information is not required for registration.
Android permissions
Bluetooth permissions allow the app to find and connect to an OBD2 adapter. Older Android versions may require location permission for Bluetooth scanning; the app does not use it to track your location. Notifications, the foreground service and wake lock support an active diagnostic session. Older Android versions may require file storage permission for exports. Manage permissions in system settings; denying permission may restrict the related features.
Security and retention
Connections to the production API use HTTPS, passwords are stored as hashes and access to account data requires authentication. Account, vehicle and conversation data remain on the server until deleted or until account use ends in accordance with your request. Local files remain until you delete them. Support information and logs are retained as necessary to handle requests and protect the service, and longer only where legally justified. The operator still needs to confirm the detailed log and backup retention schedule; no unverified retention period is promised.
Deleting your account and files
Select Profile → Delete account and data and confirm. Account deletion removes associated server vehicle profiles, conversations and messages, login tokens and linked account records. If you cannot access the app, email kontakt@omnexa.pl from your account address with the subject “MotoBot account deletion”. Do not send your password. Local CSV/PDF files and copies shared outside the service cannot be deleted remotely; delete them separately. Requests concerning data processed by external providers must also take their retention rules and legal obligations into account.
Your rights
Where applicable, you have rights of access, rectification, erasure, restriction, data portability and objection. Send requests to kontakt@omnexa.pl. We may request proportionate identity verification, but will not ask for your password. You may lodge a complaint with the President of Poland’s Personal Data Protection Office (UODO). We respond within GDPR time limits.
Document pages and changes
Opening a document on omnexa.pl sends the server your IP address, request time and URL, and browser information needed to serve and protect the page. These document pages contain no advertising, analytics or tracking cookies. Changes to processing practices will be described in an updated policy.