Privacy Policy

Red Nose Garage is built by Red Nose Garage ("we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, and your rights around it. We'll be direct — no legalese padding.

1. What We Collect

Account information

When you sign up, we collect your email address and optionally your name. If you sign in via Google or another OAuth provider, we receive basic profile information (name, email, profile photo) from that provider.

Vehicle and maintenance data

Everything you enter into the app: vehicle details (VIN, make, model, year, mileage, plate number, color), service records, smog and registration data, fuel logs, insurance policies, accessories, photos, notes, and planned maintenance. This is your data — we store it so the app works.

Usage and settings

We store your preferences — theme, currency, distance unit, and reminder settings. We may log basic usage information (feature interactions, errors) to improve the product.

Payment information

If you subscribe to Pro, payments are processed by Stripe. We never see or store your full card number. Stripe gives us basic billing information (plan, status, last 4 digits) to manage your subscription.

Contact form submissions

If you reach out via our contact form, we store your name, email, and message to respond to you.

2. How We Use Your Data

• To provide the app's core features (storing, displaying, and organizing your vehicle data)
• To send email reminders you've opted into (smog, registration expiration)
• To send transactional emails (account verification, password reset, household invites)
• To manage your Pro subscription and process billing
• To respond to support requests
• To improve the product (bug fixes, feature development)

We do not sell your data. We do not use your vehicle data for advertising. We do not share your personal information with third parties except as described below.

3. Third-Party Services We Use

• Supabase — our database and file storage provider. Your data lives on Supabase-hosted Postgres and object storage (for photos). Supabase is hosted on AWS.
• Vercel — our hosting platform. Your requests are routed through Vercel's infrastructure.
• Resend — handles transactional emails and reminders. Your email address is passed to Resend to deliver messages you've requested.
• Stripe — payment processing for Pro subscriptions. Stripe's privacy policy governs how they handle your billing information.
• Google Gemini — powers our AI Maintenance Advisor. Your vehicle's year, make, model, and mileage are sent to Google's Gemini API to generate maintenance recommendations. No personally identifying information is included in these requests.
• NHTSA (National Highway Traffic Safety Administration) — a free public U.S. government API we use for VIN decoding and recall data. No personal data is sent to NHTSA.

4. Household Sharing

When you invite someone to your household, they can see the vehicles and records you've shared with them based on the role you assign (editor or viewer). Their email address is used to send them an invite. You can remove household members at any time, which revokes their access.

5. Data Retention

We retain your data as long as your account is active. When you delete your account, your profile, vehicles, records, and photos are permanently deleted. Some residual data (such as billing records) may be retained by Stripe for legal and financial compliance purposes.

6. Your Rights

You have the right to:

• Access the data we hold about you
• Export your vehicle records as a PDF at any time (Pro feature)
• Correct inaccurate information in your account
• Delete your account and all associated data
• Opt out of email reminders in your notification settings

If you're a California resident, you have additional rights under the CCPA, including the right to know what personal information we've collected and to request its deletion. We don't sell personal information, so opt-out of sale rights don't apply.

7. Security

We use Supabase's row-level security to ensure users can only access their own data. Passwords are managed by Supabase Auth and are never stored in plaintext. Photos are stored in private Supabase Storage buckets. That said, no system is 100% secure — please use a strong, unique password and enable any available two-factor authentication.

8. Children's Privacy

Red Nose Garage is not intended for users under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we'll remove it promptly.

9. Changes to This Policy

If we make material changes to this Privacy Policy, we'll notify you by email or with an in-app notice before those changes take effect.

10. Contact

Questions or requests about your data? Email us at support@rednosegarage.com.