This privacy policy describes how the MOT Plate Android app handles your information. It is short on purpose, because the app collects very little.
Who runs the service
MOT Plate is published by Optional Ltd, a company registered in the United Kingdom. The app communicates with a small server (the “backend”) run by us on Amazon Web Services in the United Kingdom region (eu-west-2).
What we receive
When you look up a number plate, the app sends two things to our backend:
- The number plate text you confirmed (e.g.
AB12CDE). - A Google Play Integrity token, which proves the request came from a genuine install of MOT Plate. The token is a one-time JWT issued by Google; it does not contain your account, name, email, or device location.
We do not receive, store, or ever see:
- Photos or screenshots you share with the app. Text recognition runs entirely on your device using on-device ML Kit.
- Your IP address beyond standard server logs (held for 7 days, then deleted).
- Your phone, account, advertising ID, or location.
What we do with it
The backend uses the plate to query the DVSA MOT History API on your behalf and returns the result to your app. The result is the same MOT history information that DVSA publishes openly under the Open Government Licence v3.0.
The backend does not log full plates. It logs minimal metadata for debugging (timestamp, success/failure code) for 7 days.
What stays on your device
The app stores your last 20 lookups (plate, make/model, MOT expiry date, timestamp) in private app storage so you can re-check them quickly. This list never leaves the device, is not synced to any cloud, and is wiped if you uninstall the app. You can clear it any time from Android’s Settings → Apps → MOT Plate → Storage → Clear data.
DVSA data
The MOT history we display comes from the DVSA MOT History API and is licensed under the Open Government Licence v3.0. The data may be out of date; for the definitive position contact DVSA or DVLA.
The MOT History API is intended for general use; it returns MOT outcomes, mileage at test time, and advisories. It does not return the registered keeper’s identity. We never receive any owner information, and the app never asks for any.
Lawful basis (UK GDPR)
A registration plate, when correlated with vehicle records, can be considered personal data under UK GDPR. The lawful basis we rely on is legitimate interest: you are voluntarily looking up a vehicle you have a reason to check (e.g. one you own, are about to buy, or are investigating). We process the minimum data needed to answer that lookup and discard it.
Third parties
- Amazon Web Services (eu-west-2): hosts the backend.
- Google Play Integrity API: verifies the app instance.
- DVSA: provides the MOT data.
We do not use advertising networks, analytics SDKs, or third-party trackers.
Children
The app is not directed at children. We do not knowingly collect data from anyone under 13.
Your rights
UK GDPR rights (access, rectification, erasure, portability) apply, but in practice we hold almost nothing about you. The on-device list is yours to clear yourself, and the backend retains only short-lived logs without your identity. You can still email the address below with a request and we will respond.
Contact
Questions or requests: office@optional.org.uk
Changes
If we update this policy we will increase the date at the top and, where the change is material, notify in-app on next launch.