Carvex — GCC Car Marketplace
Effective date: April 8, 2026
Carvex is an iOS app that aggregates car listings from public marketplaces across the GCC region. This policy explains what information the app handles and — just as importantly — what it does not handle.
Carvex does not:
Your favorites, saved searches, notes, recently viewed history, and premium entitlement cache are stored only on your device using iOS's standard local storage. If you uninstall the app, that data is removed.
Carvex displays car listings from publicly accessible marketplace websites. Requests are made directly from your device (for free sources) or via a Carvex-hosted backend (for premium sources, see below). No user data is transmitted to these marketplaces — your device simply downloads their public listing data.
Free-tier sources (fetched directly from your device):
Premium-tier sources (fetched via our Firebase backend):
For premium sources, Carvex runs a server-side pipeline that fetches public listing data once per day, normalizes it, and publishes a single JSON file to Firebase Storage. Your device downloads that file when you are subscribed to Carvex Premium. The backend does not receive any information about you — it only publishes data.
Carvex Premium is an auto-renewable subscription available in two tiers:
Payment is processed by Apple's In-App Purchase system. Carvex does not receive or store your payment details, Apple ID, or any billing information. Subscription receipts are validated locally using Apple's StoreKit 2 on your device — no receipt data is sent to Carvex or any third party. You can cancel or manage your subscription at any time in your iOS Settings → Apple ID → Subscriptions.
When you are subscribed to Carvex Premium, your device downloads the daily premium listings file from Firebase Storage. Firebase is a Google service. Firebase logs the IP address of each download request and the approximate time (standard HTTP server logging). Carvex does not associate these logs with any user identity because Carvex does not maintain user identities.
Firebase App Check: Requests for the premium listings file are protected by Firebase App Check using Apple's App Attest service. App Attest is an Apple framework that lets your device prove it is running an authentic, unmodified copy of Carvex. This verification happens inside Apple's Secure Enclave on your device; no personal data is sent to Carvex or Firebase as part of the attestation.
If you enable Background Alerts in Settings, Carvex uses iOS's local notification system to alert you when a favorited car drops in price or when new listings match one of your saved searches. These notifications are generated on your device. No push notification tokens are sent to Carvex or any remote server — Carvex does not use Firebase Cloud Messaging, Apple Push Notification Service, or any other remote push infrastructure.
Background Alerts rely on iOS's Background App Refresh framework to wake the app periodically. When woken, the app downloads the latest premium listings file (subject to the Firebase logging described above) and compares it to a locally-stored snapshot on your device. If a qualifying price drop or saved-search match is detected, a local notification is posted.
You can disable Background Alerts at any time in Carvex Settings → Notifications → Background Alerts, or globally in iOS Settings → Carvex → Background App Refresh / Notifications.
Carvex displays ads provided by Google AdMob. AdMob may collect and use certain data to serve personalized or non-personalized ads, including:
This data is collected and processed by Google, not by Carvex. For more information, see Google's Privacy Policy and how Google uses data from apps.
| Service | Used For | Data Controller |
|---|---|---|
| Google AdMob | Advertising | |
| Firebase Storage | Premium listings file delivery | Google (Firebase) |
| Firebase App Check | Device authenticity verification | Google (Firebase) + Apple (App Attest) |
| Apple In-App Purchase | Subscription processing | Apple |
Carvex itself does not operate its own servers that store user data. The Firebase backend is used only to publish the daily premium listings file.
Carvex is not directed at children under 13. We do not knowingly collect any information from children.
We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated effective date. Significant changes will also be noted in the app's release notes.
If you have questions about this privacy policy, contact us at:
dev.hamam@gmail.com
Hamam A. Alabdulla