Privacy policy

What we collect

Only what the product needs to work. All of it comes from you — we do not buy data or pull it from other services.

• Account details. Your email address and username. Email comes from sign-up or from Google if you sign in with Google. We never see your Google password.
• Vehicle records. Everything you enter about your cars: year, make, model, trim, VIN, mileage, and every maintenance or modification entry with its date, cost, parts, and notes.
• Files you upload. Photos of your vehicles and the receipts or documents you attach to an entry or a part.
• Reminders. Service reminders you create, including their due date or due mileage.
• Push notification token. If you allow notifications on the iOS app, we store the device token Apple issues so reminders can reach your phone. It identifies the device, not you personally, and it is deleted when you sign out or delete your account.
• Billing state. Which plan you are on and the identifiers Stripe gives us to keep it in sync. Card numbers go to Stripe directly and never touch our servers.

What we do not collect

No advertising identifiers. No third-party analytics or tracking scripts. No location tracking — Wheelscribe never asks for your location. No contacts, no microphone. The camera and photo library are used only when you choose to scan a VIN or attach a photo, and those images go only to your own account's storage.

Why we collect it

To show you your own records, to keep your account secure, to send the reminders you asked for, and to bill you correctly if you are on a paid plan. That is the whole list. We do not profile you and we do not use your vehicle data to train anything.

Who processes it

We use a small number of service providers. They process data on our behalf and are not permitted to use it for their own purposes.

• Supabase. Database, authentication, and file storage. Your records and uploads live here.
• Vercel. Hosting for the website and the API.
• Stripe. Payment processing and subscription management for paid plans.
• Apple / Expo. Delivery of push notifications to the iOS app, when you have enabled them.
• NHTSA. When you decode a VIN, that VIN is sent to the US National Highway Traffic Safety Administration's public vehicle API to look up the year, make, and model. Nothing else about you is sent.

How long we keep it

Your records stay until you delete them or delete your account. Deleting an entry, a photo, or a car removes it and its files. Billing records are kept as long as the law requires for tax and accounting.

Deleting your account

You can delete your account and everything in it at any time, from either the website or the iOS app.

• On the web: go to your profile and use "Delete account".
• In the iOS app:open the Profile tab and tap "Delete account".

Deletion is immediate and permanent. It removes your login, your cars, every entry, every uploaded photo and receipt, your reminders, and any stored push token. It cannot be undone and we cannot recover a deleted account for you. If you are on a paid plan, cancel your subscription first so you are not billed again.

Your rights

You can see all of your data in the app at any time, correct it by editing it, export it on a paid plan, and delete it. Depending on where you live you may also have the right to request a copy of your data or object to how it is processed. Email us and we will help.

Children

Wheelscribe is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes

If this policy changes in a way that affects you, we will update the date at the top and, for anything significant, tell you in the app or by email.

Contact

Questions about privacy, or a request about your data: support@wheelscribe.com.