Get a Quote
No accounts. No ads. No advertising ID. No location. No third-party analytics SDK. This page covers both evmods.com.lb and the EVMODS Android app — what we receive, what we never touch, and how to have it deleted.
EVMODS is a specialist electric-vehicle workshop in Fanar, Lebanon, owned and run by Elie Meouchi (MOF# 4081239). We repair, diagnose, program and localize electric cars — Avatr, Voyah, Deepal, Zeekr, BYD, XPeng, Li Auto, MG, Changan and Hongqi among them.
We are the people responsible for the data described on this page. There is no parent company, no data broker behind us and no marketing department. If you have a question about anything here, you email elie@evmods.com.lb and Elie answers.
This policy covers two things: the website at evmods.com.lb, and the EVMODS Android app (package com.evmods.app) published on Google Play.
The EVMODS app is a thin wrapper around our website. It shows a short animated terminal-style splash, then loads evmods.com.lb inside a WebView — the same pages you would see in a browser: services, supported brands and models, portfolio, the quote request form, the Track My Car job-status page and contact details.
On top of that it does exactly one extra thing: about every 30 minutes, while the device has a connection, it asks our server whether there is a new workshop announcement (for example "Avatr 06T now supported") and shows it as an Android notification. That is the whole app.
There is no account, no login and no profile. Nothing you do in the app is tied to an identity, because there is no identity to tie it to.
| Permission | Why it is there |
|---|---|
| INTERNET | To load the website and fetch announcements. Without it the app is a blank screen. |
| ACCESS_NETWORK_STATE | To check you are online before trying to load or poll. |
| POST_NOTIFICATIONS | Android 13+ only. Asked once, so we can show workshop announcements. Decline it and the rest of the app works normally. |
| WAKE_LOCK | Added automatically by Android's WorkManager, which schedules the 30-minute announcement check. |
| RECEIVE_BOOT_COMPLETED | Also WorkManager — so the schedule survives a reboot. |
| FOREGROUND_SERVICE | Also WorkManager. We do not run a persistent foreground service of our own. |
WorkManager also injects a couple of internal system entries of its own (BIND_JOB_SERVICE, DUMP) that let Android run scheduled jobs. They give the app no access to your data.
Notice what is not in that list: no location, no camera, no microphone, no contacts, no storage or file access, no phone state, no device identifiers.
The shortest section to write, and the most important one to read:
Two pages on the site — reachable in the app too — have a form that sends us your details. Nothing is sent unless you fill it in and press the button. (The Track My Car page has a lookup box as well; that one is covered in section 07.)
If you include an email address or a VIN in a message, that travels with it too — but no form asks you for them, so that is entirely your call.
When you submit, the details are formatted into a plain-text email and sent to elie@evmods.com.lb, and nowhere else. The email also carries the IP address the submission came from, purely so we can recognise and block spam floods. There is no CRM, no mailing list, no newsletter signup, and no automated marketing. Your details are used to answer your enquiry and to do the work — nothing else.
Like every website, our server records the technical details that arrive with each request. We keep our own first-party count of page views so we know which pages are useful and can spot abuse. Because the app displays the website inside a WebView, the same thing applies to pages viewed in the app.
What is recorded per page view:
The app adds EVMODSApp/1.0 to its user-agent, so we can tell how many people use the app versus a browser. That is the only difference between the two.
This is a cookieless, first-party measurement: no cookie is set, nothing is stored on your device, and no third-party tracking script runs on the site. Visits are grouped for daily counting using a one-way hash of the IP, user-agent and date — a value that cannot be turned back into you.
When we open our own statistics page, IP addresses are looked up against a third-party IP-geolocation service to show an approximate country, region, city and network provider. That lookup happens on our side, gives us city-level accuracy at best, and is never used to identify an individual.
We use this only for traffic statistics and security — spotting bots, abuse and attacks. It is never combined with your enquiry details to build a profile.
The app's notifications are pull, not push. There is no Firebase Cloud Messaging, no push token, and no device registration anywhere on our server. Roughly every 30 minutes the app makes a plain GET request to https://evmods.com.lb/api/app-notices.php and asks: is there anything new?
That request carries no personal data — no identifier, no account, nothing about you or your car. The server sees only what any web request carries: an IP address, a user-agent and a timestamp. The response is a short list of public workshop announcements, identical for every user. Which announcements you have already seen is remembered on your device only, never on our server.
Turning them off: decline the notification prompt when it appears, or at any time go to Android Settings ▸ Apps ▸ EVMODS ▸ Notifications and switch them off. Everything else in the app keeps working exactly as before.
The Track My Car page lets you check where your car is in our workflow. You look it up with the tracking code we gave you, or with your plate plus the last four digits of your phone number.
What comes back is deliberately thin: the vehicle make and model, the current job status (received, diagnosing, awaiting approval, in service, ready for pickup, delivered) and the timestamps of those stages. That is all.
It never returns names, phone numbers, addresses, prices, invoices or notes — so a tracking code in the wrong hands reveals nothing personal. The lookup is rate-limited per IP address to stop anyone guessing codes in bulk.
What you type into the lookup box — the code, or the plate and those four digits — is used only to find that one job. It is checked against our records and then discarded: the page stores no search history, and your plate is never echoed back in the response.
The public website sets no cookies at all — which is why you have never seen a cookie banner on it. There are no advertising cookies, no tracking cookies and no third-party cookies, and our scripts write nothing to your browser's local storage.
The app's WebView keeps the ordinary browser storage mechanisms switched on, the same as any browser would — but since the site puts nothing in them, there is nothing there to read.
The only cookie anywhere on the domain belongs to the private staff admin area: a standard session cookie (plus an optional "stay signed in" cookie) that lets Elie stay logged in to the workshop management system. It is set only after a staff login, is restricted to that area, and is never issued to visitors or to the app.
We never sell your data. We do not share it with advertisers, data brokers, insurers, lead generators or anyone who might market to you.
The only parties that ever touch it, and strictly as service providers to us:
Beyond that, we would disclose information only if we were legally required to by a valid order from a competent Lebanese authority.
How long we keep things:
What you can ask for, at any time:
Email elie@evmods.com.lb from the address you contacted us with, or message us on WhatsApp from the number you gave us, and say what you want. No form to fill in, no fee. We will action it and confirm — normally within a few working days. The only thing we may have to keep is what Lebanese accounting law requires us to keep.
The EVMODS website and app are aimed at car owners and are not directed at children under 13. We do not knowingly collect information from children. If you believe a child has sent us personal details through a form, email elie@evmods.com.lb and we will delete it.
Everything travels over HTTPS. Plain HTTP requests are redirected to the encrypted version, so the app and the site never transmit anything in the clear.
On the server, form submissions are validated and sanitised, protected by hidden honeypot fields and rate limits, and database access uses prepared statements. The staff admin area sits behind a login and is completely separate from the public site.
No system is perfect, and we will not pretend otherwise. What we can promise is that we hold as little as possible in the first place — the least amount of data is also the safest amount.
If the app or the site starts doing something new with data, this page is updated before the change ships, and the "last updated" date at the top changes with it. The current version always lives at evmods.com.lb/privacy.
We will not quietly add advertising, tracking SDKs or data sales to this app. If that ever changed, it would be stated here in plain words, at the top of this page.
Questions about this policy, a data request, or anything else — you reach a human every time:
Tell us the model and what it's doing. You'll have a personal quote within hours — from the engineer, not a call centre.