Privacy Policy

We collect information you provide directly when using the Service, as well as information collected automatically when you interact with the platform.

We use the information we collect to provide, maintain, and improve Gearboxe. Specifically, we use your data to:

• Operate and deliver the core vehicle tracking, community, and messaging features
• Send maintenance reminders via email and push notifications when services are due or overdue
• Process subscription payments and manage your billing
• Deliver achievement and milestone notifications
• Enable vehicle ownership transfers between users
• Generate PDF reports of your vehicle history and build threads
• Facilitate content discovery through search and public profiles
• Detect, prevent, and address abuse through content moderation and rate limiting
• Monitor and fix technical issues through error tracking
• Communicate with you about updates, security alerts, and support responses

We do not sell your personal information to third parties. We do not use your vehicle data, maintenance records, or community content for advertising purposes.

Your data is stored securely using industry-standard encryption in transit and at rest. We use trusted infrastructure providers with strong security practices:

• Clerk — Authentication, identity management, and session tokens
• Convex — Real-time database and serverless backend infrastructure
• Cloudflare R2 — Secure file and image storage (photos, videos, receipts, documents)
• Sentry — Error monitoring and application performance (anonymized diagnostic data only)
• Resend — Transactional email delivery (maintenance reminders, support, and notifications)

All authenticated requests are verified using secure JWT tokens. Webhook signatures are validated using industry-standard verification (Svix). While we implement robust security measures, no method of electronic storage is 100% secure. We encourage you to use a strong, unique password for your Gearboxe account.

We integrate with third-party services to provide and enhance the Service. Each service operates under its own privacy policy. We only share the minimum information necessary for these services to function:

• Clerk — Authentication and user management (name, email, profile photo)
• Convex — Backend data storage (all user-generated content)
• Stripe — Payment processing for web subscriptions (customer ID, subscription status)
• RevenueCat — Subscription management across platforms (user ID, subscription events)
• Sentry — Error tracking and performance monitoring (device info, error logs, stack traces)
• Resend — Email delivery (email address, notification content)
• Cloudflare R2 — File storage (photos, videos, receipts, documents)
• Expo Push Notifications — Mobile push notification delivery (push tokens, notification content)

We encourage you to review the privacy policies of these third-party providers.

We use minimal cookies and local storage to operate the Service:

• Authentication cookies — Managed by Clerk to maintain your login session
• UI preference cookies — Used to persist interface settings such as sidebar state

We do not use third-party advertising or analytics cookies. We do not use tracking pixels or cross-site tracking.

If you use the mobile app, we may send push notifications for maintenance reminders, achievement unlocks, direct messages, social interactions, and vehicle transfer updates. You can disable push notifications at any time through your device settings or your Gearboxe notification preferences.

Email notifications are sent for maintenance reminders and important account events. You can manage your email notification preferences in your account settings.

You control the visibility of your content through privacy settings:

• Private — Only visible to you
• Unlisted — Accessible via direct link but not discoverable through search
• Public — Visible to all users and discoverable through search

Your profile (name, username, bio, and profile photo) is visible to other users. When you transfer a vehicle, the receiving user gains access to the full vehicle record including service history, maintenance logs, and associated media. Shared vehicles and build threads include QR codes and shareable links.

We retain your personal data for as long as your account is active or as needed to provide the Service. Specific retention periods include:

• Account data — Retained until you request deletion
• Notifications — Automatically deleted after the configured retention period
• Vehicle transfer requests — Retained for a limited period after completion
• Content reports — Retained for moderation and safety purposes

If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Vehicle data, maintenance logs, build threads, messages, and media associated with your account are permanently deleted upon account deletion unless you have exported them beforehand.

You have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data and account (30-day grace period applies)
• Export — Download your vehicle data and maintenance records as PDF reports
• Opt-out — Disable email notifications, push notifications, or both independently
• Block — Block other users to prevent them from viewing your content or messaging you

To exercise any of these rights, use the settings page in your account or contact us at support@gearboxe.com. We will respond to your request within 30 days.

Gearboxe is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@gearboxe.com.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. If we make material changes, we will notify you via email or through an in-app notification at least 7 days before the changes take effect.

The "Last updated" date at the top of this page indicates when this policy was last revised.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@gearboxe.com.