Privacy during the QuietDrive beta

Updated 16 October 2026.

Using QuietDrive is also covered by our terms of use.

Who operates QuietDrive

QuietDrive is operated by Minhazul Karim (Minhaz), who is responsible for the personal information described here. For support, privacy questions or a data-rights request, email minhazulkarim26@gmail.com. QuietDrive is an independent app and is not affiliated with or endorsed by MG or SAIC Motor. MG is a trademark of its owner.

Visiting this website

The public marketing website at quietdriveapp.com does not add analytics scripts, advertising trackers, contact forms or a mailing list. Cloudflare serves and protects the website and processes technical request information, such as your network address, browser information and request time, for delivery and security. If you follow the TestFlight invitation, Apple processes that visit under its own privacy terms. If you email us, we use the information you choose to include to answer your request. The app and garage process the information described below; their analytics are separate from this marketing website.

Information we use and why

When you sign in with an MG account, our Cloudflare backend sends your MG email or phone number, country calling code (for phone sign-in), and password to the MG service for your selected account region. We store the connection credentials and tokens encrypted on the server so the connection can serve your requested features. The service operator controls the encryption key; this is not end-to-end encryption. Your iPhone stores a revocable QuietDrive session in Keychain, not your MG password. An expired or replaced MG session requires deliberate reconnection. Signing out does not remove the stored MG sign-in: it stays on the server until you remove it or delete your QuietDrive account, as described under Your choices and rights.

MG supplies your account identity, linked vehicle identifiers and vehicle details. Depending on your car, responses can include battery and charging readings, lock and climate state, odometer, precise vehicle location and observation times. We store readings, charging estimates, settings and activity history to provide your garage and history. Readings may be old, missing or incomplete.

Vehicle readings are requested from MG only when you manually refresh (in the app or by tapping a widget’s reading time), when you send a command and the last saved reading is too old to show the car is switched off, or, if you turn them on, by automatic checks of your selected car at the interval you choose (every 8, 12, 24, 48 or 72 hours). Automatic checks are off unless you turn them on and accept their 12 V battery risk; they run on QuietDrive’s server, read status only, are saved and measured like a refresh, and stop by themselves on the safety rules shown in the app. The old fleet-wide background polling has been removed, including for previously enabled settings. Opening saved readings does not request new vehicle telemetry from MG. Signing out ends the current QuietDrive session. A request you already sent may finish. A pause after heavy use and a low-12V precaution can return saved readings without contacting the vehicle. Pseudonymous vehicle-safety records retain bounded request timestamps and up to 24 recent 12 V voltage readings separately from account history, including after account deletion, so reconnecting cannot reset the protection.

Each time you ask for a vehicle reading or send a command, and each time a request or command is refused, we save a short measurement in your garage. It holds the time and outcome, how long the request took, the car's model, model year and account region, the reported 12 V voltage, battery level and outside temperature, whether the car reported itself powered on or charging, MG's own wake indicators, and how many requests the car had in the previous half hour and day. When a request fails or is refused, it also holds a fixed code for the reason and the step that failed, with MG's numeric status code where there is one, but never MG's message. When you confirm the 12 V battery is fine after a pause, the confirmation and those counts are saved the same way. After a command, the next reading is compared with what the command asked for (for example, whether the doors now report as locked) and the result is saved the same way. It holds no vehicle identification number, location or credential; a keyed code links one car's measurements together. We use these measurements to work out how much a request costs the 12 V battery, to set the warnings and pauses that protect it without making you wait more than necessary, and to find and fix vehicle controls that do not work for a model or MG region.

Vehicle commands are sent only when you request them through the app's supported controls. We keep related outcomes in your garage's activity history. Availability depends on the vehicle and MG's service.

We also process technical request information, account/IP hashes for sign-in rate limiting, and bounded diagnostic records to protect the service and investigate failures. Application diagnostics record operation categories, timings and outcomes without deliberately logging MG passwords, tokens, vehicle identifiers, locations or raw readings. Hosting providers process network information needed to deliver and protect requests.

We use account and vehicle information to provide the service you request. Where UK/EU data-protection law applies, this is processing necessary to provide our service under our agreement with you. We use limited technical diagnostics, abuse-prevention records and request measurements for our legitimate interests in running a secure, reliable beta that does not drain your car's 12 V battery. Optional device permissions remain under your control. We do not use your information for advertising, sell it, or make automated decisions with legal or similarly significant effects. Wherever you live, we use the same information only for the purposes in this notice, to provide the service you ask for, and we honour the rights below for every user.

Creating an MG account and linking a car

If you create a new MG account in QuietDrive, our server passes your details to the MG service for the region and country you choose: your email address, your answer to MG's puzzle check (CAPTCHA), the six-digit code MG emails you, and your new password. Before it is sent, the password is turned into the scrambled (hashed) form MG's service requires; QuietDrive does not store it. MG also receives your language, your country where MG asks for it, and a random device ID. Only while setup is in progress, our server keeps your email address, region, country and MG's puzzle details encrypted. Each step expires after at most 10 minutes, and these details are deleted when setup finishes, you cancel or it expires. Hashed forms of your email address and network address limit how often setup can be started and codes requested. Before setup starts you must accept MG's terms of use and privacy notice, and MG's own terms then apply to your MG account. To use the new account in QuietDrive, you then sign in as described above.

If you link a car in QuietDrive, the camera reads the car's QR code on your iPhone. Only the text in the QR code is sent, to our server, which passes the details MG needs to MG (the car's vehicle identification number only in hashed form). You then enter the 4-digit code your car shows, which goes to MG in hashed form. During this step our server keeps a one-time ID and a hashed form of the car's vehicle identification number encrypted; the step expires after 2 minutes, and these details are deleted when you finish, cancel or start again. QuietDrive does not keep the QR text or the 4-digit code. A car linked this way is added to your MG account and then appears in your QuietDrive garage like any other linked car. Scanning the QR code a car shows for signing in on its own screen signs that screen in to your MG account.

The camera is used only when you choose to scan a car's QR code or save a receipt or document. Camera pictures are processed on your iPhone and are not uploaded to QuietDrive; saved documents stay on your device.

Bluetooth keyless start (experimental)

Keyless start is an experimental feature that uses your car's MG Bluetooth Digital Key. To set it up, you enter your 4-digit MG vehicle PIN. It is sent over an encrypted connection to our server, which passes it to MG in the hashed form MG requires; QuietDrive does not store or log the PIN. MG then returns your car's Bluetooth key: two key codes, the car's Bluetooth address and how long the key is valid. Our server passes the key to your iPhone without storing it. If no key is active yet, setup asks MG to create one, which can contact your car and counts towards the vehicle-contact limits that protect its 12 V battery.

Your iPhone keeps the key in its Keychain on that iPhone only: it is not synced to iCloud or moved to another device. A Bluetooth signal-strength calibration and a random ID for your iPhone are kept with it. Signing out removes the key from your iPhone. QuietDrive cannot cancel the key at MG; you can manage it in the MG iSMART app.

When you calibrate or ask for keyless start, Face ID confirms it's you on your iPhone; QuietDrive never receives face data. Our server checks that MG still lists the key as active and gives your iPhone a one-time permission, which counts towards the same vehicle-contact limits and expires in under a minute. Your iPhone then connects directly to the car over Bluetooth. Only the outcome (accepted, calibrated, rejected, unknown or cancelled) is sent back to our server, where it is kept with your vehicle-safety records. Each setup, permission and outcome is also saved as a request measurement, like other vehicle requests.

Usage analytics

During the beta, QuietDrive collects usage analytics to help us develop the app and make it better: which features owners use, and where sign-in, readings or controls go wrong for particular cars and regions.

In newer iPhone beta builds, usage analytics are active by default to help improve QuietDrive, except where your iPhone’s region is in the EU or EEA: there the app asks first and sends nothing from the app until you choose Share analytics. Where the app asks first, its analytics rely on your consent. Elsewhere, including the UK, they rely on our legitimate interest in improving the beta, and you can turn them off at any time. The app sends PostHog, our analytics provider, which screens you open, when the app opens, whether sign-in worked (with your MG account region) and whether vehicle controls were sent, unavailable or cancelled, with the app and iOS version, a random ID created on your phone and, after sign-in, your garage's random ID. You can turn analytics off in Account → Privacy & maps at any time. An opt-out saved in an earlier build remains off; builds that previously asked retain their installed behavior until updated.

We count how many people choose “Share analytics” and how many choose “Don’t share”, both when the app asks and each time you change the switch in Account → Privacy & maps. This count is anonymous: our server sends PostHog only your answer, where you gave it, whether your iPhone’s region is in the EU or EEA, and the app build, without the random device ID, your garage ID, your network address or any account details. Your answer itself is not stored on our server. As with any request, a hashed form of your network address and the time are kept briefly to limit how often answers can be sent (see Retention and deletion).

Our server also sends PostHog a short pseudonymous record of each sign-in, vehicle request and account step (creating an MG account, linking a car, reconnecting, checking for linked cars, Bluetooth key setup and keyless start, removing the MG sign-in and deleting your account): its kind and outcome, the car's model, model year and MG account region, how long it took and any fixed error code, linked to your garage's random ID (a failed or refused sign-in, each account-creation step and an account deletion get a one-off ID instead). During the beta it does this for every account, including when you turn off or decline analytics in the iPhone app (which stops only the app's own analytics). It relies on our legitimate interest in finding and fixing problems for particular cars and regions while QuietDrive is in beta, and you can object by emailing us.

Newer iPhone beta builds also record which features you open and whether each action worked, with a fixed error code when it didn't (never an error message): signup and vehicle-linking steps; manual refresh outcomes, duration and whether the reading changed; control outcomes and duration; keyless start setup, permission and Bluetooth outcomes; Siri and Shortcuts use; which widget sizes are on your screens, when you open the app from a widget and whether a widget refresh brought a newer reading; saving, deleting, exporting and restoring charging and ownership records, and saving a home price, battery size or budget; data exports and vehicle switches; Premium paywall views and purchase and restore outcomes; and the distance unit, currency, steering side, appearance, map and car paint you choose. Trip planning records completion status, why a plan failed (including the error code when the charger search fails), whether battery assumptions are available, charging-stop counts, duration and opening Apple Maps. Roadside help records the country you choose for help, which kind of contact you tap (emergency number, assistance number or MG website, never the number) and which guides you open. It never sends destinations, searches, routes, prices, amounts, record text or document contents to PostHog. The developer's account follows the same analytics preference as other accounts.

Newer iPhone beta builds also send a record each time the app updates your dashboard with the car's saved readings: the reported 12 V voltage, original reading and receipt times, reading age, whether the reading is repeated or newer, and the battery protection outcome, with powered-on and charging flags. Missing or unusable voltages remain unknown. This adds no requests to MG and follows the same analytics opt-out. Older builds and the server do not send these readings.

Analytics never include your MG email, phone number or password, vehicle identification number, vehicle PIN or keys, location, coordinates, raw MG responses or other vehicle readings. The only country they include is the one you choose in Roadside help, never where your iPhone is. PostHog stores this data in the EU. Our PostHog project is set to discard IP addresses, and every event we send asks PostHog not to work out a location from the IP address. Deleting your QuietDrive account does not remove analytics already sent: email us and we will delete them from PostHog.

Information on your device

QuietDrive keeps the selected car’s model, model year, reported equipment and last readings in a protected dashboard cache on your device, scoped to your signed-in garage and cleared when you sign out. The garage also retains previously reported car information. Trip planning, charger-type lookup and Help use saved car information without requesting a new reading from MG or waking the car. Known charger types are matched locally from reported plug information or documented model specifications; unknown types remain unset. Help text is bundled offline; ambiguous model generations require your choice.

Widgets keep recent readings in a shared app container. Service journals, charging-ledger entries, ownership records, saved places and attached documents are stored on your device. They are not uploaded to the QuietDrive garage by these local-record features. If you set up keyless start, its Bluetooth key is kept in your iPhone's Keychain as described above. Files you export, share or place in cloud-synced folders are handled by your chosen destination and may contain personal or vehicle information.

Location, calendar, camera, Bluetooth and Face ID access are optional, and the app asks for each only when you use a feature that needs it. Apple Maps processes map searches, address lookups and trip directions, including the places you choose. The trip planner sends rounded charging search-area coordinates through QuietDrive to Open Charge Map to find compatible charging locations. QuietDrive caches public charger listings for up to one hour, without account identifiers in the cache, and does not save your trip or forward your account or vehicle identity to Open Charge Map. Cable and plug preferences are saved on your device for each car. You can hide maps and manage system permissions in iOS Settings. Sample preview uses synthetic data and does not sign in to MG.

Service providers and international processing

Cloudflare hosts the backend, database and encrypted connection storage. PostHog (EU cloud) receives the usage analytics described above. MG receives account authentication, account creation, car linking, Bluetooth-key setup, vehicle-reading and requested control operations. Apple provides TestFlight, maps and platform services. TestFlight may share beta feedback, crash and usage information with us under Apple's TestFlight privacy information. Information you voluntarily include in support messages is used to answer your request; avoid sending passwords, verification codes, vehicle PINs or unredacted vehicle/location screenshots.

These providers operate internationally, so processing may occur outside your country. Cloudflare describes its processing arrangements and international-transfer safeguards in its Data Processing Addendum. MG and Apple process information under their applicable privacy terms. QuietDrive does not promise that all data remains exclusively in the UK or EU. Contact us for information about the providers and safeguards applicable to your request.

Retention and deletion

Cloud garage records remain until you delete your QuietDrive account. Your encrypted MG sign-in stays on the server until you remove it or delete your account; signing out, or a QuietDrive session ending, does not remove it. QuietDrive sessions end after 90 days without use and can be revoked earlier by sign-out or account deletion. Account-setup details are deleted when setup finishes, is cancelled or expires (each step lasts at most 10 minutes), car-linking details expire after 2 minutes, and keyless-start permissions expire in under a minute. The service keeps up to 50 recent refresh-diagnostic entries per garage; they are replaced as new entries arrive or removed with the account. Request measurements are removed with the account, or after one year if sooner. API-limit records are keyed by hashed IP or account identity; accepted request timestamps expire from active counting after at most one hour (15 minutes for login) and are pruned on later requests. Vehicle-contact records use a hashed vehicle identity; the active budget covers 24 hours, up to 24 recent 12 V readings are kept and replaced as new ones arrive, and a low-voltage stop remains until an explicit recovery check succeeds. These separate safety records are not erased by account deletion and have no automatic deletion timer.

Use Account → Delete QuietDrive account to remove active cloud garage records, stored MG credentials and QuietDrive sessions. This leaves your MG account and vehicle binding unchanged. Cloudflare's point-in-time recovery mechanisms can retain earlier database contents for up to 30 days. Cloudflare Workers application logs are retained for up to seven days. These recovery/log windows are separate from active-account deletion. Deletion does not remove information independently held by MG or Apple.

Local records, attached documents, device backups and copies you exported or shared remain under your control. Remove them separately where needed. Cloud export is a bounded view of available records and is not a promise of a complete historical backup.

Your choices and rights

You can use sample mode without an MG account, hide maps, manage device permissions, remove your saved MG sign-in, export available records, sign out or delete your QuietDrive account. To remove the saved MG sign-in, use Account → Remove MG sign-in from QuietDrive in the iPhone app, or Account → Disconnect on the website. Your history is kept, and QuietDrive can't contact your car until you sign in again.

Depending on applicable law, you can ask for access, correction, deletion, restriction or portability of your personal information. You have the right to object to our processing based on legitimate interests. These rights are subject to the conditions in the relevant law. Contact minhazulkarim26@gmail.com; we may need enough information to verify the request safely. UK users can complain to the Information Commissioner's Office at ico.org.uk, and users elsewhere may contact their local data-protection authority, for example the ANPD in Brazil, the KVKK in Türkiye, the Information Regulator in South Africa or the OAIC in Australia.