Privacy & Data
at GarageFolio

1) Scope
This Privacy Policy explains how we collect, use, share, and protect information when you use GarageFolio and related services (collectively, the "Service"). It applies to the Service on iOS and Android, and any related websites or support channels we operate.

2) What GarageFolio does
GarageFolio helps vehicle enthusiasts keep a traceable history of maintenance and mechanical work by allowing users to create vehicle profiles and upload invoices/receipts, photos, and notes tied to each vehicle.

3) Information we collect
We collect information in three categories: (A) information you provide, (B) information collected automatically, and (C) information processed by third-party services we use to operate the Service.

A. Information you provide

1. Account information
• Username (or email) and account identifiers.
• Profile details you choose to add (e.g., display name).

2. Vehicle information and records
• Vehicle details you enter (e.g., make/model/year, trim, mileage/odometer, nickname).
• Optional identifiers (e.g., VIN, license plate) if you choose to store them.
• Maintenance/repair entries (dates, descriptions, costs, shop/vendor info, parts, notes).

3. Uploads (invoices/receipts/photos/documents)
• Images/scans/PDFs of invoices, receipts, work orders, and photos of your vehicle/work.
• Uploads may contain personal data (e.g., your name, phone, email, address) and financial details (e.g., service amounts).
• Please do not upload highly sensitive data (e.g., government IDs, full payment card numbers). If included, it may be stored as part of the upload.

4. Sharing you initiate (public links)
• If you create a public share link, the content you choose to share may become accessible to anyone with that link (see Section 6).
• Important: A share link may include an entire vehicle profile and related maintenance history if you choose to share it.

5. Communications
• Support requests, feedback, and messages you send us.

B. Information collected automatically

1. Device and app diagnostics
• Device type, OS version, app version, language, and technical diagnostics needed for reliability and security.

2. Crash reports (Firebase Crashlytics)
• We use Firebase Crashlytics to collect crash logs and related diagnostic information to improve stability and performance.
• Crash reports may include device information, app state at the time of the crash, and identifiers needed to diagnose and fix issues.

C. Third-party services we use

1. Firebase Authentication
• We use Firebase Authentication to manage account sign-up and sign-in using username (or email) and password.
• We do not have access to your password in plain text. Authentication is handled by Firebase Authentication.

2. Firebase Crashlytics
• We use Crashlytics for crash reporting and diagnostics as described above.

Note: We do not currently offer "Sign in with Apple" or "Sign in with Google." If we add third-party sign-in methods later, we will update this Privacy Policy.

4) OCR and AI features (from launch)
GarageFolio provides OCR (text extraction) and AI-assisted features to help organize your records (e.g., extracting date/vendor/amount from receipts and categorizing maintenance entries).

• What is processed: your uploaded documents/images and metadata needed to generate results.
• What may be stored: extracted fields and/or text may be stored in your account to power search, summaries, and organization.
• How it's used: to provide the OCR/AI features you request and improve the Service.
• Service providers: OCR/AI processing may be performed on VCH-controlled infrastructure and/or by trusted vendors acting on our instructions and bound by confidentiality and security obligations.

5) How we use information
We use information to:

• Provide, operate, and maintain the Service (including storing and organizing your vehicle history).
• Authenticate users and secure accounts; prevent fraud and abuse.
• Process uploads, OCR/AI extraction, and categorization.
• Provide customer support and respond to requests.
• Improve reliability (debugging, crash analysis) and maintain performance.
• Send service-related communications (security notices, policy updates, operational messages).
• Comply with legal obligations and enforce our terms.

We do not sell your personal information.

We do not use your data for cross-app advertising "tracking" as that concept is commonly used in mobile ecosystems.

6) How we share information
We share information only as follows:

1. With service providers
• We share information with vendors that help us operate the Service (e.g., Firebase Authentication and Firebase Crashlytics, and hosting/storage providers).
• These providers are permitted to process data only to provide services to us and must protect it.

2. Public sharing links (your choice)
• If you create a public link, the selected content may be viewable by anyone who has the link, and the link may be forwarded, copied, saved, or reposted by others.
• If you choose to share a vehicle profile, that profile and related history may be visible through the link.
• You should avoid sharing links that expose sensitive personal information.
• Where available, you can revoke/disable a share link. After revocation, the link should no longer work, but we cannot control copies, screenshots, downloads, or caching performed by third parties before revocation.

3. Legal and safety
• We may disclose information if required by law or legal process, or to protect rights, safety, and security.

4. Business transfers
• If VCH is involved in a merger, acquisition, financing, or sale of assets, information may be transferred subject to appropriate protections.

7) Data retention

We retain information as long as needed to provide the Service and for legitimate business purposes (security, dispute resolution, legal compliance).

• User content (vehicles, records, uploads): retained until you delete it or delete your account, unless retention is required or permitted by law.
• Backups: data may persist for a limited time in backups and will be overwritten according to our backup retention schedule.

8) Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect information (e.g., encryption in transit, access controls, monitoring). No method of transmission or storage is 100% secure.

9) International transfers

Your information may be processed and stored in the United States and other countries where VCH or our service providers operate. Where required (e.g., under GDPR), we use appropriate safeguards for international transfers.

10) Your choices, rights, and account deletion
A. In-app controls

You may be able to:

• Edit or delete vehicle profiles, maintenance entries, and uploads.
• Manage or revoke share links (where available).
• Update account information.

B. Delete your account and associated data

If you create an account, you can initiate account deletion:

• In-app: Profile → Edit Profile → Delete Account
• On the web: submit a deletion request at https://mygaragefolio.com/delete-account

We may request verification to protect your account. Deleting an account removes the account and associated data from our active systems, except where we are legally required or permitted to retain certain information. Backups may persist for a limited period.

C. U.S. state privacy rights

Depending on where you live, you may have rights to access, delete, or correct personal information. We do not sell personal information.

D. GDPR rights (EEA/UK)

If GDPR applies, you may have rights to access, correct, delete, restrict processing, object to processing, and data portability, and to lodge a complaint with your supervisory authority.

11) Children's privacy
The Service is not directed to children under 13 (or the minimum age required by local law). We do not knowingly collect personal information from children.

12) Third-party links
The Service may contain links to third-party sites/services. We are not responsible for their privacy practices.

13) Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If changes are material, we will provide notice in the Service or by other means. The Effective Date reflects the latest version.

14) Contact us
Email: info@mygaragefolio.com
Address: 3100 Ray Ferrero Jr. Blvd, 5th Floor, Fort Lauderdale, FL 33314