Refil is a free mobile app developed by Marcos Novo, an individual residing in Spain. Refil shows you the cheapest gas station and EV charger near you. For any data-protection or privacy inquiries, contact marcosnovo@gmail.com.
Refil does not ask you to create an account (signing in is optional; the app opens an anonymous identity by itself, see section 6). We do not sell your personal information and we show no advertising inside the app. We do measure how well our own ad campaigns work, using Meta — but only if you allow it, and declining costs you no features (see section 6). We use your location to find gas stations and chargers near you: the app sends it to our servers to look them up and, for your alerts, we keep your last position rounded to about 1 km (section 4); we do not sell it or use it for advertising; third parties only receive the minimum described in section 6 (the “Where are you going” route, the map and the search box).
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know what personal information we collect about you, the right to delete that information, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of your personal information.
Refil does not sell or share your personal information, and we do not use it for cross-context behavioral advertising — so there is nothing to opt out of. We will not discriminate against you for exercising any of your privacy rights. Because the app collects only anonymous data and never asks for identifying information, the simplest way to exercise these rights is to uninstall the app; for any other request, email marcosnovo@gmail.com. You may also learn more about your rights from the California Attorney General.
Only if you accept analytics (during onboarding or in Profile → Privacy) do we send the following, without linking it to your identity and with no advertising tracking:
| Data | Purpose |
|---|---|
| Anonymous per-install identifier (UUID minted on first launch) | Avoid duplicating the daily telemetry ping per device (it also identifies your price reports, see below) |
| Country, language, time zone, app and OS version, device model | Segment usage and diagnose issues by country / build / OS |
| Product interaction events (e.g. paywall shown, vehicle added, search performed) | Understand which features are used and prioritize improvements |
| Subscription tier (free / pro) | Track the Pro share in aggregate |
| Approximate location, rounded to about 5 km (only if you grant location permission) | Aggregate view of where the app is used |
Anonymous counts (no permission needed). Whether or not you accept analytics, the app sends, at most once per install per day, that it was opened and which features were used (for example, “search performed”), together with the selected market’s country and the build type. These counts carry no identifier — neither device nor account — and we do not store your IP address with them, so they cannot be linked to you or to each other: they are aggregate statistics, not personal information.
Community price reports. If you send a price or flag that a station does not exist, the app sends the report with that same anonymous per-install identifier, to count how many different people reported it and to curb abuse; of your IP we only keep a salted hash, not the address. This does not depend on analytics, because it is an action you start. The legal basis is our legitimate interest in keeping prices reliable (GDPR art. 6.1.f), and reports are deleted after 90 days.
Your location. The app uses your GPS location to find nearby gas stations and chargers, and in many cases sends it to our servers: (a) to look for stations near you — the nearby-station search in several countries, the Radar feature and the Apple Watch app ask our server for the stations around your position, and that request carries your coordinates. The server uses them only to answer: it does not store them in its database or link them to your account. Like any web request, they may end up in the technical logs of our hosting provider (Cloudflare), which are kept for at most 7 days and used only to diagnose errors; (b) for your price alerts — so the server can evaluate your alerts and nearby cheap-station notices, the app uploads your last known position at most once an hour (also in the background if you granted “Always” permission, section 11). The server rounds it to about 1 km and keeps only the latest one, linked to your account identifier (an anonymous one if you have not signed in): each upload replaces the previous one, and it is deleted when you delete your account (section 15); and (c) if you sign in and save addresses, they sync with your account like any other favorite. We do not sell your location or use it for advertising; the only thing that can reach third parties when you use the map, routes or search is explained in section 6.
The anonymous data above is stored on Cloudflare infrastructure under our control. Apple (iOS) or Google (Android) processes subscription payments under its own privacy policy.
Anonymous account and sync (Supabase). The first time you open the app, an anonymous account is created automatically on Supabase, our authentication and database provider, without asking you for any data (no email, no password). If you later sign in, that identity becomes your account. Under that identifier we associate your favourites and vehicles, your tier (Pro or Free), your notification status and your last known position (rounded to about 1 km, section 4). This happens even if you do not accept analytics, because the app needs it to offer those features: the legal basis is performance of the service you use (GDPR art. 6.1.b). Supabase acts as a processor. That data is deleted when you delete your account (section 15); if you never created one, write to marcosnovo@gmail.com and we will delete it.
Third-party services that receive minimal data when you use a feature:
These providers do not receive your Refil identifier or account, and the data is sent because you use that feature (GDPR art. 6.1.b).
We do not sell your personal information for money, and we do not transfer data to data brokers.
Advertising measurement (Meta). To learn which ads bring in new users and stop paying for the ones that do not work, we send Meta Platforms, Inc. a small set of usage events: app install, account creation, the first search of each session, and the start of a subscription or free trial. We never send your location, your saved stations, or your refuelling history.
Under the CCPA/CPRA this may qualify as sharing for cross-context behavioral advertising. It happens only if you have accepted analytics and have also, separately, turned on ad campaign measurement (Meta), which is off by default (during onboarding or in Profile → Privacy). Separately, iOS asks for permission to track across apps; only if you grant it do we attach your advertising identifier (IDFA). Declining either, or both, changes nothing about how the app works.
You can opt out at any time: analytics in Profile → Privacy inside the app, and tracking in iOS Settings → Privacy & Security → Tracking. Changes take effect immediately. We do not knowingly sell or share the personal information of consumers under 16.
We process only the minimum data necessary to maintain and improve the app, always anonymized. Telemetry data is kept for a maximum of 24 months and then deleted automatically.
Refil operates across markets, so depending on where you live you may have additional rights. Residents of the European Union and the United Kingdom have rights under the GDPR to access, rectify, erase, object to or restrict processing, and to data portability; the advertising measurement described in section 6 relies on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time, and the rest of our processing relies on our legitimate interest in maintaining and improving the app (Art. 6(1)(f) GDPR), limited to the minimum necessary and always anonymized. Since all data is anonymous, the simplest way to exercise these rights is to uninstall the app, after which we stop receiving any new data linked to your device. For any other request, email marcosnovo@gmail.com.
Refil is not directed to children under 13. We do not knowingly collect personal information from children, and we do not request personally identifying data at any point.
If you voluntarily join the launch waitlist on our website (refil.app), we store your email address and your approximate location (country/region/city, inferred from your connection by Cloudflare; no GPS, no IP address) for the sole purpose of notifying you at launch. The legal basis is your consent when submitting the form. We do not use this data for advertising or share it with third parties, and we delete it once the launch is complete or whenever you ask to be removed by writing to marcosnovo@gmail.com.
Android app notice. If you ask us, from an Android phone, to tell you when Refil is on Google Play, we store your email address, the language and page you signed up from and your approximate country (inferred by Cloudflare; no IP address, no city) for the sole purpose of sending you a single email when the app is available. That email includes a link that deletes your data immediately; if you don't use it, we delete it 90 days after the notice. We never sell or share this data. The email is sent through our email provider (Resend), acting as a service provider.
Price rise and fall email alerts. If you ask on refil.app to be emailed when a fuel price rise or fall is expected in a country, we store your email address, the country you choose, your fuel preference (optional), the language and page you signed up from, and the confirmation date. The sole purpose is to send you those alerts —the same public verdict shown on the “Will prices rise tomorrow?” page— and nothing else. Nothing is switched on until you open the link in the confirmation email and press the button, and every alert includes a one-click unsubscribe link. We keep the data while you are subscribed; if you unsubscribe we delete it after 30 days, and if you never confirm, after 7 days. We never sell or share this data. Emails are sent through our email provider (Resend), acting as a service provider. If you also follow Refil’s public Telegram channel, Telegram processes your data under its own policy; we receive none of it.
Refil includes an optional feature that detects when you refuel at one of your saved stations and asks whether you'd like to log the fill-up. Providing it requires iOS's “Always” location permission. On Android the current version does not ask for background location and does not include this detection (see section 14).
If you take part in the invite programme, we process the following to run it: your Refil account identifier (an account is required to invite and to use a pass), your personal pass, who invited you or whom you invited, the days on which you open the app while an invitation is pending (the day only, no time or location) and an encrypted fingerprint (SHA-256) of the purchase identifier Apple assigns to your Apple Account. When you use a pass, the app also asks Apple for a device check (DeviceCheck) that only tells us whether that iPhone has already been used for a pass; Apple gives us no device identifier.
The purpose is to apply the programme terms: granting the Pro months and icons, and preventing fraud. The legal basis is the performance of the terms you accept by taking part (Art. 6(1)(b) GDPR) and our legitimate interest in preventing fraud (Art. 6(1)(f)). Whoever invited you only sees how many invitations they have confirmed or in progress, never your name or your data. If you delete your account we erase this data, except the encrypted Apple identifier fingerprint and the invitation status, which we keep unlinked from any account to stop the same Apple Account from using a pass again.
If we change how we process data we will publish the new version at this URL and update the date at the top of the document.
The Android app follows the same rules as the iPhone app, with these differences:
If you created an account (email or Google), you can delete it yourself in the app:
This permanently deletes your account and what is linked to it: synced vehicles, favorites, saved addresses, preferred brands, alert rules, notification tokens and your invite-programme data (except what section 12 says is kept unlinked). We cannot recover it afterwards.
If you never created an account, what the app syncs (favorites, alert rules, notification tokens and your last approximate position) is linked to an anonymous identifier, not to your name or email. Uninstalling the app stops new data but does not delete what is already stored: write to us and we will delete it. Telemetry deletes itself after 24 months. To ask for the deletion of some or all of your data without deleting your account, or if you cannot use the app, write to marcosnovo@gmail.com from the address of your account and we will answer within 30 days.
By downloading or using Refil you accept these terms. If you do not agree, do not use the app.
Refil helps you find the cheapest gas stations and EV chargers near you. Prices come from public authorities and data sources and are updated periodically; they may not be available in real time.
We make every reasonable effort to display accurate information, but displayed prices are not binding. The authoritative source is always the price posted at the station itself. We are not responsible for discrepancies between the published and the applied price per gallon.
Refil offers an optional paid subscription, Refil Pro, with two plans: a yearly plan and a monthly plan. Current pricing is shown in the app before you purchase.
Subscriptions are billed to your Apple ID and renew automatically unless you cancel at least 24 hours before the renewal date. You can manage or cancel them any time in Settings → Apple ID → Subscriptions. On Android, subscriptions are billed to your Google Play account, renew automatically unless you cancel before the renewal date, and can be managed or cancelled in Google Play → Payments & subscriptions.
Pricing may vary by country and local currency. Pro features include brand filtering, expanded widgets, and future enhancements announced in the app.
You may not:
To the maximum extent permitted by law, Refil shall not be liable for indirect losses, loss of profits, or damages arising from the use of or inability to use the app. Aggregate liability is limited to the amount you paid in the 12 months preceding the event giving rise to the claim.
We may update the app, modify features, or discontinue older versions to maintain service quality. We will notify you inside the app when changes materially affect your use.
These terms are governed by Spanish law. Any dispute shall be brought before the courts of the consumer's domicile where the consumer is a natural person, or before the competent Spanish courts otherwise. Nothing in these terms limits any rights you may have under the mandatory consumer-protection laws of your state of residence.
Found a bug, have a suggestion, or need help with your subscription?
Email marcosnovo@gmail.com. We reply within 48 hours on business days.
For billing or subscription issues you can also go directly to Apple's support center. On Android, see Google Play Help.