Privacy Policy

This policy explains what WrenchPad stores about you, who else sees it, how long we keep it and how to get it erased. It only describes what the app does today, in plain English.

Who we are

WrenchPad is made by Albin Ma, in Ontario, Canada. Albin is the person accountable for your privacy. Questions, requests and complaints go to privacy@wrenchpad.app.

What we store

Only what you give us, and what the app needs to work:

• Your account: email address, Display Name, language, time zone and whether email reminders are on.
• Your vehicles: VIN and its decode, Nickname, Odometer Unit and Acquisition details.
• Your log: Odometer Readings, Maintenance Log entries (dates, Jobs, who did the work, shop names, notes), Custom Jobs, Reminders, and the history of edits to them.
• Your devices: push token, a hash of the installation key and platform.
• How many times your Public Page is opened each day, with nothing about the visitors.

VIN and odometer photos are read on your phone and never leave it. We don't collect your location. The website sets only appearance and language cookies, never sign-in or tracking cookies.

What we promise

• No ads.
• We never sell your data or your vehicle's.
• We never pass you on to shops, insurers or anyone else looking for leads.
• We don't track you across other apps or websites.

Why we use it

• To run the app you signed up for: your account, your vehicles, your log, Reminders and your Public Page. Without this data there's no app.
• To keep it working and safe: logs and traces to fix problems, and limits on how fast anyone can call the app, so nobody can flood it. These are our legitimate interests, and they use as little about you as they can.
• To remind you: an email when a Reminder comes due, unless you turn email reminders off in the app. If an email to you bounces or is marked as spam, Resend tells us and we turn email reminders off, but sign-in codes still reach you.
• To tell you about changes: an email when this policy changes in a way that matters.

Who else sees it

A few services run WrenchPad for us. Each one sees only what it needs:

• Supabase (database and sign-in), Render (the app's server) and Vercel (the website) host everything above.
• Expo, Apple and Google deliver push notifications, so they see push tokens and the notification text (a vehicle's Nickname and a Job).
• Resend sends sign-in codes and reminder emails, so it sees your email address and, in a reminder, a vehicle's Nickname and a Job.
• Grafana Cloud keeps logs and traces. They carry user ids, never emails or notes.

These services see the IP address you connect from. We use it only to limit how fast anyone can call the app, and we never store it.

All of it is stored in the US (US East). If you're in Canada or the EU, your data crosses the border.

Public Pages

A Public Page is a vehicle you choose to share. It shows:

• Your Display Name.
• The vehicle's specs, Current Odometer and the month you acquired it.
• Log entries, with their Jobs and the Parts used (never what anything cost), who did the work and shop names.

The VIN is masked (the last 6 characters are hidden) unless you choose to show it in full. A Public Page never shows your notes, or the name of "someone else" who did the work.

A Discoverable page is listed for search engines. Once something is public, copies of it (search caches, screenshots) are out of our control, even after you stop sharing.

How long we keep it

Deleting your account

You can delete your account from the You tab in the app. Your data is erased from our database immediately. Copies held by the services we use are erased within 30 days, and your address comes off Resend's list of addresses it won't email. We keep the address only until that's done. Backups age out within 7 days.

Your rights and requests

You can ask to see, correct, delete or take a copy of your data:

• Email privacy@wrenchpad.app from the email on your account. We only act on requests sent from it.
• We answer within 30 days. Until the app can export your data, we send you a copy by email.
• Not happy with the answer? Complain to the Office of the Privacy Commissioner of Canada. In the EU or UK, contact your local data protection regulator.

Age

WrenchPad isn't for anyone under 16.

Changes

When this policy changes, the date at the top changes too. If we start collecting something new or add a new kind of service, we email you first.