Privacy Policy

The controller of personal data processed through GarIQ is:

Demis Troisi Switzerland

Contact for privacy requests: [email protected] (email only — no postal street address is published yet).

GarIQ is a vehicle logbook product. This policy covers the GarIQ mobile application and the marketing / account-related pages on gariq.app.

Depending on how you use GarIQ, we may process:

Account data — email address, password (handled by our authentication provider), full name or nickname, and optional sign-in via Apple or Google.

Garage, vehicle, and logbook data — garages and members; vehicles (including photo, plate, specs, and odometer); and events such as refuel, charge, maintenance, insurance, tax, inspection, expense, trip, and note, with dates, costs, odometer readings, and notes you enter.

Files — vehicle photos, optional event attachments, and documents you store in the vault. Files are kept in private cloud storage buckets.

Support messages — content you send to our support email.

Technical and crash data — limited diagnostic information needed to run the service and, when enabled, crash reports (see processors below).

Website data — preference values stored in your browser (see the website section below).

We process data to:

- provide and secure your account and the logbook features you request; - store and display the vehicle and event history you create; - run AI features that draft entries or answers from content you submit (always subject to your confirmation before anything is saved as a logbook entry); - send transactional email related to your account (for example verification or garage invites); - process paid-plan entitlements through the app stores; - diagnose crashes and keep the service reliable; - respond to support requests.

Where Swiss or applicable European data-protection law requires a legal basis, we rely on performance of a contract (providing the service you asked for), legitimate interests (security, reliability, product improvement that does not involve advertising profiles), and consent where the law requires it for a specific optional feature. You can withdraw consent for optional processing without losing access to core logbook features that do not depend on that consent.

When you use AI features, GarIQ may send the text, photos, PDFs, or vehicle/event context you provide to large-language-model providers so they can produce a draft suggestion or answer.

Nothing is written into your logbook as a saved event without your explicit confirmation. AI output is a proposal. You review it and decide whether it is kept.

Voice dictation, when you use it, uses your device or operating-system speech recognition (Apple or Google on the device). GarIQ does not run a separate GarIQ speech server for that step.

We use service providers who process data on our behalf or as independent controllers where the product requires it. Today that includes:

- Supabase — database, authentication, file storage, and server-side functions that power the app; - Anthropic (Claude) and OpenAI — language-model processing for AI drafts and related features (including embeddings used for document search where that feature is available); - TypeSafe (Jev) — Ask question classification (the question text you type and our instructions only; vehicle id, plate, VIN, and logbook contents are not sent); - Perplexity — labeled Ask web-fallback queries (vehicle identity including VIN plus your question; the license plate is withheld before the query leaves our servers); - Apple App Store and Google Play, together with RevenueCat — subscription purchase, renewal, and entitlement status for paid plans (billing itself happens in the store, not on gariq.app); - Resend — transactional email; - Sentry — crash reporting configured without default personal identifiers and without session replay or performance tracing products; - logo.dev — brand-name logo lookup when you look up vehicle brands; - Frankfurter — public FX rate lookups used for currency conversion (no personal profile is sent for that rate lookup); - Vercel — hosting for this website.

We do not use third-party advertising SDKs or product-analytics advertising networks in the GarIQ app as shipped today.

GarIQ is multi-user by design within a garage you control:

- Garage sharing — if you invite someone to a garage (on plans that include sharing), members can see and work on the vehicles and history in that shared space according to the roles the product provides. - Vehicle cession — when you transfer a vehicle to another GarIQ user through the in-app cession flow, an allowlisted subset of that vehicle’s history is copied to the buyer as the product describes in the app.

We do not sell your personal data.

Application data is stored in cloud infrastructure operated through our processors (notably Supabase). Exact hosting regions depend on that provider’s configuration for the GarIQ project.

Soft delete: when you delete records in the app, GarIQ marks them as deleted (`deleted_at`) rather than permanently erasing every row immediately. Deleted data is permanently removed within 30 days. A vehicle that is only inactive, or that you transferred without deleting it, is not removed.

We keep account and logbook data while your account is active and for a reasonable period afterward as needed for backups, dispute handling, and legal obligations. Crash reports are retained according to our crash-reporting provider’s retention settings.

You can delete your account from inside the GarIQ app. If you delete your account, events you logged in other people’s shared garages remain visible to the owner, with your name. Account deletion soft-deletes personal data where appropriate, preserves shared-garage history so other members are not left with broken records, and deletes your authentication user so you can no longer sign in.

From Settings → Data you can download your logbook on every plan, before or instead of deletion: one zip with the data file (JSON) and the files still stored with it. An incomplete download is not shared. You can finish up to three of these downloads per UTC day, with at least 15 minutes between them. A separate Timeline year export as PDF is included on Basic and Advanced, and is not included on Free.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also have the right to lodge a complaint with a competent supervisory authority.

To exercise privacy rights or ask a question about this policy, email [email protected]. Please describe your request clearly and the account email you use in GarIQ. We may need to verify that we are speaking with the account holder.

For billing, renewals, and refunds on paid plans, contact Apple or Google through the store account where you purchased — gariq.app does not take payment and cannot issue store refunds.

On gariq.app we currently observe:

- a theme preference stored in the browser as `gariq-theme` (light / dark); - a locale preference handled by next-intl (cookie / locale routing) so the site can show English, German, or Italian.

These are functional preferences for displaying the site. This policy does not claim additional marketing or advertising cookies beyond what a fresh visit actually sets.

GarIQ is not directed at children. We do not knowingly collect personal data from children under the age required by applicable law to use online services without parental authority. If you believe a child has created an account, contact [email protected] and we will take appropriate steps.

We may update this Privacy Policy when the product or the law changes. The Last updated date at the top of this page will change when we do. Continued use of GarIQ after an update means you should review the new text. Material changes that require notice under applicable law will be communicated in a manner appropriate to the change.