Privacy Policy
This Privacy Policy explains what data GarageBook ("we", "us", "our") collects when you use the GarageBook mobile application ("the App") and this website, how it is used, and the choices you have.
1. Data we collect
1.1 Account & profile
- Mobile number (your account identifier)
- Name
- 4-digit PIN — stored only as a one-way bcrypt hash, never as plaintext
- Ads preference (whether you switched ads off in the app)
- Legal acceptance records (see §6)
- Account creation timestamp
1.2 Vehicle data
For each vehicle you register: name, registration number, type, fuel type, brand/model (optional), purchase date and price (optional), odometer reading, insurance and PUC expiry dates, and an optional vehicle photo. Vehicle photos you attach are uploaded to and stored on GarageBook's servers so they can appear on your devices.
1.3 Expenses, fuel, trips, reminders
Every expense, fuel log, trip, trip expense and reminder you create is stored against your account and the selected vehicle — amounts, categories, dates, optional notes and odometer readings, plus computed fields such as mileage derived from full-tank entries. Aggregated insights (monthly totals, category breakdowns, cost-per-km) are derived on demand and are not sold or shared.
1.4 Diagnostics (first-party)
To keep the service reliable, the App sends basic request diagnostics with its API calls — a random request ID, your platform (Android/iOS), app version and OS version. Our servers record these together with your account ID, the API endpoint called, the response status and the request duration. This diagnostic log contains no request content, no personal fields and no location data, and is not used for advertising or profiling.
2. How we use data
We use your data solely to operate the App for you: authenticate your account, store and display your records, compute your analytics, remember your ads preference, and diagnose service problems. We do not sell your data. We do not share it with third parties except as described in §4 (advertising) or where required by law.
3. Permissions
The App requests only the permissions it actually uses:
- Internet — to communicate with the GarageBook API.
- Camera — to capture a vehicle photo when you choose to add one.
- Photos / Media Images — to let you pick an existing vehicle photo.
We do not request location, contacts, microphone, calendar, SMS, or background tracking permissions.
4. Advertising
Free accounts may see ads served by Google AdMob: banner, native, interstitial, app-open and rewarded formats (rewarded ads currently gate the analytics PDF export and per-vehicle analytics). Google may collect device and advertising identifiers in line with its own Privacy Policy. You can opt out of personalised ads at the operating-system level (Android Settings → Google → Ads). Full details: Advertising Disclosure.
5. Security
We follow reasonable security practices, stated here exactly as implemented:
- Communications between the App and our servers use HTTPS.
- PINs are hashed with bcrypt; we never see or store the plaintext PIN.
- Authentication tokens are stored on-device in the platform's secure storage (Android Keystore-backed encrypted storage / iOS Keychain).
- The backend uses short-lived access tokens (15 minutes) with refresh-token rotation; signing in on a new device revokes other sessions.
No system can guarantee absolute security. We will notify affected users without undue delay if a breach materially affects their data.
6. Legal acceptance records
When you sign up or sign in, the App records that you accepted the Terms & Conditions and this Privacy Policy, with a timestamp. This acceptance log is kept for compliance purposes and is not used for marketing.
7. Data retention & deletion
We retain your data while your account is active. Records you delete in the App (vehicles, expenses, trips, reminders) are immediately hidden from your account and marked deleted in our database; they are removed from backing storage as part of routine maintenance rather than instantly. On account deletion, personal data is removed except where retention is required to comply with law, prevent fraud, or resolve disputes. See Data Deletion and Account Deletion for the exact process and timelines.
8. Your choices & rights
- Update your name and PIN at any time from the Profile tab.
- Request account deletion, or a copy of your data, by emailing contact.rozbill@gmail.com from a message that includes your registered mobile number.
9. Children
GarageBook is intended for users 18 years of age and older. We do not knowingly collect data from children. If you believe a child has provided us data, contact us so we can delete it. See the Children's Privacy Statement.
10. This website
- This website sets no cookies and runs no analytics or tracking scripts.
- Your dark/light theme choice is saved in your browser's local storage only; it never leaves your device.
- Web fonts (Plus Jakarta Sans, Source Code Pro) are loaded from Google Fonts, which means your browser requests the font files from Google's servers; Google may log those requests per its privacy policy.
- The contact options on this site are email links — the site itself collects no form data.
Because no cookies or trackers are used, no cookie consent banner is required.
11. Disclaimer
GarageBook is not responsible for data loss caused by circumstances beyond our reasonable control, including natural disasters, force majeure events, device failure or theft, hardware failure, operating-system corruption, cloud-provider or third-party outages, or user actions (such as accidental deletion or a shared PIN). You are encouraged to keep your own copies of important information.
12. Updates to this policy
We may update this Privacy Policy from time to time. Material changes will be surfaced on next sign-in, with the "Last updated" date above kept current.
13. Contact
Questions about this Privacy Policy: contact.rozbill@gmail.com.