Privacy Policy

Information we collect

We collect only what’s needed to run your garage:

• Account details — your email address and a password (stored only as a secure hash by our authentication provider).
• The records you add — vehicle details, service and cost history, reminders and private notes.
• Files you upload — photos and documents you attach to your vehicles and events.
• Billing information — if you subscribe to a paid plan, our payment processor (Stripe) collects your payment details directly; we receive only limited billing data such as your subscription status, never your full card number.
• Basic technical data — needed to keep the service secure and working. This includes your IP address, browser and device type, and server log data (such as pages requested and timestamps). We use this to keep the service secure, diagnose problems, and prevent abuse.

How we use your data

We use your data to provide and maintain the service, to send you reminder and account emails (reminder emails only when you turn them on), to process payments for paid plans, and to keep your account secure. We do not sell your data or use it for third-party advertising.

Legal basis (EU/EEA users)

Where the GDPR applies, we rely on: performance of our contract with you (to provide the service), your consent (for optional reminder emails, which you can withdraw at any time), and our legitimate interests (to keep the service secure and reliable).

Where your data is stored

Your data is stored with our infrastructure providers — Supabase (database, authentication and file storage), hosted in the EU (Ireland, eu-west-1) — and the site is served via Vercel’s global edge network.

International transfers

Some of our providers may process data outside your country, including in the United States. Where data is transferred out of the EU/EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect it.

Sharing and processors

We share data only with the providers that help us run the service, acting on our instructions:

• Supabase (database, authentication, storage)
• Resend (sending account and reminder emails)
• Vercel (hosting)
• Stripe (payment processing for paid plans)

If you choose to generate and share a report, anyone with that report’s link can view it — sharing is under your control.

If you hand a vehicle over to a new owner using a transfer code, a copy of that vehicle’s history and its attached photos and documents is passed to the new owner’s account. Your private notes and insurance entries are never transferred, and you choose whether to include cost figures. Your own copy of the record is kept in your account, read-only.

Your rights

You can access, correct, export or delete your data at any time. The app includes a one-click data export (JSON) and account deletion in Settings. Depending on your location you may also have the right to object to or restrict certain processing, or to lodge a complaint with your data protection authority. To exercise any right, use the in-app tools or contact us at support@mygaragejournal.com.

California residents

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to correct it. We do not sell or share your personal information as those terms are defined under California law. You will not be discriminated against for exercising these rights. To make a request, use the in-app tools or contact us at support@mygaragejournal.com.

Retention

We keep your data for as long as your account is active. When you delete your account, your vehicles, history, files and reminders are removed from the live service. Residual copies may remain in encrypted backups for a limited period before they are automatically overwritten.

Cookies and local storage

We use only essential cookies and browser storage needed to keep you signed in and remember preferences (such as dark mode). We do not use third-party advertising or tracking cookies.

Children

My Garage Journal is not directed at children under 16, and we do not knowingly collect their data. You must be at least 16 to use the service.

Changes to this policy

We may update this policy from time to time. We’ll revise the “last updated” date above, and significant changes will be highlighted in the app.

Contact

Questions about this policy or your data? Email us at support@mygaragejournal.com.