Privacy Policy

Last updated: 2026-05-28

The short version: we keep your data private, we don't sell it, and you can export or delete it anytime.

What we collect

We only collect what we need to run the app you signed up for.

• Account data: email address, the OAuth provider you signed in with (Google or Apple, if you used one), and a password hash if you set one. We don't store your password in plaintext.
• Profile: username, display name, avatar, header image, bio, location-sharing preference, and the date you joined.
• Builds and installs: everything you log — vehicles, builds, install records, notes, prices, dates, performance results, inspiration references.
• Photos and videos: the media you upload to your builds, installs, performance results, and car spottings. Plate-blur edits you apply are baked into the uploaded file — we don't keep an "unblurred original" copy on our servers.
• Location, only when you ask for it: event lat/lon when you create or check in to an event, car-spotting lat/lon when you drop a pin. We never collect background location and we never share your live location with anyone.
• Reactions, comments, friendships, crews, and other social activity you create inside the app.
• Error telemetry via Sentry: stack traces and the screen you were on when something crashed. We scrub auth tokens, email addresses, and content bodies from these reports.
• Product analytics via PostHog, only if you opt in via the iOS App Tracking prompt: the screens you visit, the buttons you tap, and which features get used most. We never include device fingerprints or cross-app identifiers. If you decline the prompt, we don't send identifiers at all.

What we don't collect

• No fingerprinting. No cross-app trackers. No third-party advertising SDKs.
• No browsing history outside the app.
• No phone number. We don't even ask.
• No contact list.
• No background location.

What we never do with your data

• We don't sell it. Ever.
• We don't share it with advertisers. There are no advertisers — Garage Built has no ads.
• We don't hand it to affiliate networks. When you tap an affiliate link, the network sees our affiliate ID, not you.
• We don't use it to train AI models for sale to anyone else. If we ship an AI feature, it's optional and the data stays inside the product.

Who we share data with (and why)

• Supabase — hosts the database and storage that backs the app. They're our data processor; they're contractually bound by the same privacy rules we follow.
• Sentry — receives the scrubbed error reports described above so we can fix crashes.
• PostHog — receives product analytics only if you opted in via the iOS App Tracking prompt.
• Singular — receives the install-attribution ping when you arrive from a referral link, plus standard launch/session pings the SDK fires whenever the app starts. We use it to credit affiliate partners, not for advertising or analytics — no ad-network adapters are wired up. Only anonymized device + session identifiers cross the wire; no email, no profile data, and on iOS we respect your App Tracking Transparency choice.
• Apple / Google — receives subscription billing events when you pay for Premium. They handle the money; we never see your card details.

That's the whole list. If we ever add another processor we'll update this page first.

Your controls

• Export your data — Settings → Download your data. We bundle everything you've created in the app as a zip you can take with you.
• Delete your account — Settings → Delete account. Hard delete, immediate. No grace period. All your data is purged from our database and storage.
• Opt out of analytics — On iOS, decline the App Tracking prompt. We respect the choice across every analytics surface.
• Block someone — Settings → Blocked users. Block is bidirectional: neither of you sees the other's content.
• Plate-blur preference — Settings → License plate blur. Default is "never blur"; choose "always" or "ask each time" if you'd rather have control on every upload.

Children

Garage Built isn't for anyone under 13. We ask for date of birth at signup and block accounts under that threshold. If you believe a child has signed up, email us and we'll delete the account.

Changes to this policy

We'll update the "Last updated" date above when this changes. Check back here whenever you're curious.

Questions

Email [email protected]. We read everything.