Skip to main content
GarageMate

GarageMate — Privacy Policy

Last updated: October 5, 2026

This Privacy Policy explains what GarageMate ("we", "us") collects and how we use it. By using GarageMate (the "Service") you agree to this Policy.

1. Information we collect

  • Account information: your email address and authentication credentials. Passwords are handled by our authentication provider; we do not store them in plain text.
  • Vehicle information: details you add about your vehicles (for example year, make, model, trim, engine, VIN, and mileage).
  • Records you create: maintenance, repair, and modification logs, notes, and your diagnostic/assistant conversations.
  • Photos: images you upload (for example of a part, a symptom, or damage).
  • Feedback you send: if you use the in-app feedback form, your message and any contact details (email or phone) you voluntarily provide — used only to respond to your feedback.
  • Usage and device data: basic analytics about how you use the Service (actions taken, approximate device/browser information, and similar), collected via our analytics provider only if you have agreed. We ask once, on your first visit, and nothing is sent to the analytics provider before you answer. Declining costs you nothing — the Service works the same either way.
  • Cookies / local storage: used for sign-in/session at all times, and for analytics only after you have agreed. We record your answer (and its date) in your browser so we do not have to ask again.

2. How we use your information

  • Provide and operate the Service (store your vehicle history, generate diagnoses and guides, and deliver reminders).
  • Process your inputs through AI to generate responses.
  • Maintain, secure, debug, and improve the Service.
  • Communicate with you about the Service.

We do not sell your personal information.

3. AI processing (important)

To generate diagnoses, answers, guides, quote analyses, and parts searches, we send our AI provider (OpenAI) the request you make and the information it needs to answer it:

  • the text you type or dictate, and any photos you attach (including photos of a repair quote);
  • your vehicle's year, make, model, trim, engine, and mileage, and its maintenance, repair, and modification history and past diagnoses;
  • for a parts search where you ask where to buy a part today, the address or city and ZIP/postal code you enter.

We do not send your email address or password. The AI may run web searches to verify vehicle-specific facts. Please do not submit information you would not want processed this way — for example, avoid including license plates, faces, or other people's personal details in photos. Per OpenAI's API terms, inputs and outputs sent through their API are not used to train their models by default.

In the mobile app, we ask for your permission before the first AI request is sent. You can withdraw it at any time in Settings → AI data sharing; the AI features then ask again before sending anything, and the rest of the Service works without it.

4. Service providers (sub-processors)

We share data only with providers that help us run the Service:

  • OpenAI — AI processing of your inputs and outputs.
  • Supabase — database, file storage, and authentication.
  • Vercel — application hosting.
  • PostHog — product analytics. Only if you agreed (see Section 1); if you declined, or your browser sends a Do Not Track or Global Privacy Control signal, PostHog is never loaded and receives nothing at all.

These providers process data on our behalf, subject to their own terms.

We honor browser-level opt-out signals — Do Not Track and Global Privacy Control — automatically. If your browser sends either, we treat it as a decline and do not ask you again.

To change your answer, clear this site's data in your browser (Site settings → Clear cookies and site data), and we will ask again on your next visit.

5. Data retention

We keep your account and vehicle history for as long as your account is active, so the Service can act as your vehicle's memory. Some conversational content may be retained or hidden according to in-product limits. You can delete records you created, and you can delete your account at any time (see "Your choices and rights").

Deleting your account takes effect immediately and cannot be undone. It removes your cars, your maintenance, repair and modification logs, your diagnoses and saved guides, and the photos you uploaded. There is no grace period and we cannot restore the data afterwards. We may keep records we are required to keep by law, or that we must preserve in connection with a legal claim that has already been made or is reasonably foreseeable.

6. Your choices and rights

  • Access and update your vehicle data and logs in the app.
  • Delete individual records you created.
  • Delete your account, and the data in it, from inside the app: Settings → Delete account, on the web app and in the iOS/Android app.
  • Request export of your personal data, or ask us to delete an account you can no longer sign in to, by contacting us at henryyaobusiness@gmail.com.
  • Depending on where you live (for example California, or the EEA/UK), you may have additional rights such as access, correction, deletion, portability, and objection. We will honor applicable rights.

7. Security

We use reasonable measures to protect your data, including encryption in transit and access controls (row-level security, so you can only access your own data). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children.

9. Data location

The Service and its providers are based in the United States; your data is processed and stored there.

10. Changes to this Policy

We may update this Policy. We will update the "Last updated" date and, where appropriate, notify you in the Service.

11. Contact

Privacy questions or requests: henryyaobusiness@gmail.com.