Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains how GarageApp ("we", "us") collects, uses, stores, and shares information when you use our mobile application and related backend services.

Who we are: GarageApp is operated for the purpose of providing the vehicle management service described in the app. The primary data processor for hosting and authentication is Supabase (database, authentication, file storage, and server-side functions) in accordance with their terms and privacy documentation.

Information we collect:

• Account and authentication: identifiers and profile data from Apple, Google, email, or phone sign-in (processed by Supabase Auth), and session tokens stored securely on your device.
• Profile and preferences: information you add to your profile (for example name, username, profile photo, and your national ID number, the cédula de identidad or CI), and app preferences such as appearance (light / dark / system).
• Driver’s license: if you add your driver’s license, its number, the name and birth date printed on it, its categories and expiry date, and photos of its front and back, stored in private storage.
• Vehicles and policies: vehicle identifiers, policy details, dates, amounts, insurers, and similar fields you enter.
• Photos and files: images and documents you upload (for example vehicle photos, plates, policy receipts), stored in Supabase Storage. Access is enforced so that only you and fleet members you authorize can retrieve objects tied to your fleet.
• Parking: records needed to operate parking-related features (for example session metadata or messages initiated through the app).
• Precise location: if you allow location access, the app reads your device’s precise location while you are using it, to pin where you parked on the parking map and to place a monthly parking spot. These coordinates are stored with your parking records so you can find your vehicle and get directions. Location is not collected in the background.
• Push notification token: if you enable push notifications, a device token is stored so we can deliver operational messages (for example policy expiry reminders) via Apple Push Notification service (APNs) on iOS or Firebase Cloud Messaging (FCM) on Android. On iOS, a street parking session also stores a Live Activity token so its Lock Screen countdown can be updated.
• Invitations: when you invite someone to a fleet, we process the contact information needed to deliver and accept the invitation.
• Subscription status: your active subscription tier (Starter, Pro, Fleet, or Dealership) is stored in your profile to gate features. Subscription purchases are processed by the Apple App Store (iOS) or Google Play Store (Android) and managed through RevenueCat, which receives your GarageApp user ID and your purchase and subscription records; we receive only a confirmation of entitlement, never payment card or billing details.
• Technical data: standard diagnostics may include IP address, timestamps, and error logs when you use authenticated APIs or Edge Functions, for security and reliability purposes.

Device permissions: The app may request the following permissions on your device:

• Photo library / camera: requested only when you choose to add a vehicle photo or scan a document. Photos are uploaded to your private fleet storage and are not used for any other purpose.
• Location (while using the app): requested when you use the parking map, to pin where you parked or place a monthly parking spot. You can revoke this permission at any time in your device settings.
• Push notifications: requested to send you operational alerts such as policy expiry reminders. You can revoke this permission at any time in your device settings.

How we use information: to provide and improve the app; to authenticate you; to store and display your data; to run scheduled or on-demand tasks you trigger (such as vehicle tax or fine lookups against public services like SUCIVE); to send operational notifications you allow; to operate fleet sharing and invitations; and to comply with applicable law.

Automated processing: Some features use automated parsing or OCR on images you provide. Text is read on your device. On plans with enhanced scanning (Fleet and Dealership), the image or PDF you scan is also sent to Google Cloud Vision, which returns the text it reads. Outputs are aids only; you should review important fields before relying on them.

No advertising or cross-app tracking: We do not use advertising SDKs, sell your personal information, or track you across other companies’ apps or websites for advertising purposes. We do not use your data to build profiles for third-party advertising.

Shared fleet and viewers: If you invite other users to a fleet, they can see vehicle data and uploaded photos for that fleet as permitted by the product. Only the owner controls edits and deletions of that fleet’s data unless otherwise stated in the app. You can revoke access from the vehicle’s Share screen.

Third-party services: We use Supabase for data hosting, authentication, storage, and Edge Functions. Sign-in with Apple or Google is subject to their respective privacy policies. Push notifications are delivered through APNs (Apple) on iOS and FCM (Google) on Android. Enhanced document scanning (Fleet and Dealership plans) uses Google Cloud Vision to read text from the images and PDFs you scan. In-app subscription purchases are processed by the Apple App Store or Google Play Store and managed through RevenueCat; their privacy policies apply to those transactions. Public agencies (such as SUCIVE) receive only the queries needed for lookups you initiate. We do not share your personal information with third parties for their own marketing purposes.

Your rights: Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, or delete data we hold about you, and the right to data portability. You can update profile data directly in the app and delete your account and all associated data in the app: open the User hub, tap your profile to open Account, then tap Delete account (in the Android app: Account → Account options → Delete account). For other requests, contact us at support@garageapp.app.

Retention and deletion: We retain your information while your account is active and as needed to provide the service. When you delete your account, your personal data and fleet content are permanently removed. Some residual backups or security logs may persist for a limited period as required by applicable law.

International transfers: Our service providers may process data in countries other than your own. We rely on appropriate safeguards as required by applicable law.

Children: GarageApp is not intended for children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from such children.

Changes: We may update this Privacy Policy from time to time. The “Last updated” date at the bottom of this page reflects the current version. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact: For privacy requests or questions, email us at support@garageapp.app.

GarageApp