Privacy Policy

Apex Optimal LLC

1. Data Collection

Pop the Hood stores your vehicles, maintenance records, garage inventory, and profile preferences locally on your device by default. We collect and process additional data as described below.

Data you provide during onboarding:

Vehicle details (make, model, year, trim, VIN, mileage)
Vehicle photo (stored locally; uploaded to Supabase only if cloud sync is enabled)
Driving profile (annual mileage, ownership duration, DIY comfort level)
User persona selection (e.g., daily driver, track, project)

Email address (optional):

You may optionally provide your email address during onboarding or in Settings. If provided, your email is stored locally on your device and sent to our server (Supabase) for the purpose of sending you product updates, new feature announcements, and maintenance tips. You can update or remove your email at any time in Settings. We will not share your email with third parties or use it for advertising.

Cloud Sync (optional, Pro subscribers only):

If you sign in with Google or Apple and subscribe to Pop the Hood Pro, you may opt in to cloud backup via Supabase. This syncs your vehicles, maintenance records, shopping list, to-do items, app settings, and vehicle/receipt images to a secure cloud database. Your data is associated with your authenticated account and is not shared with other users. You may sign out or delete your account at any time.

Anonymous Spec Corrections:

When you edit a vehicle's specifications (e.g., service intervals, fluid types, part numbers), we may anonymously send the difference between the database default and your correction to our server. This data contains only vehicle make, model, year, trim, and the spec values — no personal information, device identifiers, or account data. You can disable this at any time in Settings under "Help Improve Spec Data."

AI Features (Gemini):

When you use receipt scanning or the AI Mechanic chat, the content you submit (photos, text) is processed by Google's Gemini API to extract or generate information. We do not store this data on our servers beyond the duration of the request. Google's use of this data is subject to policies.google.com/privacy.

Error Reporting:

In production, we use Sentry to capture application errors and crash reports. These may include device type, OS version, and stack traces. No personal data, vehicle details, or maintenance records are included. You can review Sentry's privacy practices at sentry.io/privacy.

Subscriptions and Purchases:

We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat may collect installation identifiers (e.g., advertising or device IDs) and transaction history to process purchases, prevent fraud, and restore subscriptions across devices. You can review RevenueCat's privacy practices at revenuecat.com/privacy.

2. How We Use Data

We use the data we collect solely to provide and improve our services:

Maintenance tracking — Your vehicle details, mileage, and service history are stored on your device so you can log and view maintenance records.
Vehicle specifications — We use make, model, year, and trim to provide spec lookups, service intervals, and recall information.
Driving profile — Your annual mileage, ownership duration, and DIY comfort level help us tailor service recommendations and the app experience to your needs.
Email communications — If you provide your email, we use it to send product updates, new feature announcements, and maintenance tips. We do not send unsolicited advertising or share your email with third parties.
Cloud backup — If enabled, your data is synced to Supabase so you can restore it on a new device or recover from data loss.
Database accuracy — Anonymous spec corrections help us identify and fix inaccurate entries in our vehicle database. This data cannot be linked to any individual user.
AI features — Receipt photos and chat messages are sent to Google Gemini for processing and are not retained after the response is returned.
Subscriptions — RevenueCat and the platform stores use purchase and device data to grant and restore access to Pop the Hood Pro.
Stability — Error reports help us identify and fix crashes and bugs.

3. Third Parties

The following third parties may process data in connection with the app:

Supabase — Cloud database and authentication for optional backup/sync and email subscriber storage. Subject to supabase.com/privacy.
Google Gemini — AI processing for receipt scanning and AI Mechanic chat. Subject to policies.google.com/privacy.
Sentry — Error and crash reporting in production. Subject to sentry.io/privacy.
RevenueCat — Subscription and purchase management; may collect installation identifiers and transaction data.
Apple App Store — Distribution and payment for iOS; subject to Apple's privacy policy.
Google Play Store — Distribution and payment for Android; subject to Google's privacy policy.

We do not sell your personal data. We do not use your data for advertising.

4. Data Retention

Local data — Stored on your device until you delete it or uninstall the app.
Email address — Retained in Supabase until you request removal. You can update or clear your email in Settings at any time.
Cloud sync data — Retained in Supabase while your account is active. You may delete your cloud data by signing out and requesting deletion.
Anonymous spec corrections — Retained indefinitely in aggregate form. Because no personal identifiers are attached, these records cannot be attributed to or deleted for a specific user.
Error reports — Retained by Sentry per their standard retention policy (typically 90 days).

5. Your Rights (GDPR / CCPA)

Depending on where you live, you may have the right to:

Access — Request a copy of the personal data we hold about you.
Deletion — Request that we delete your personal data. For local-only data (vehicles, maintenance, inventory), delete it by uninstalling the app or clearing app data. For cloud-synced data or your email address, contact us or use the in-app options.
Correction — Request correction of inaccurate personal data.
Portability — Request your data in a portable format where applicable.
Opt-out — You can disable anonymous spec corrections in Settings. You can remove your email in Settings. You can disable cloud sync by signing out of your account. We do not sell personal data.

To exercise these rights, or if you have questions, contact us using the information below. You may also have the right to lodge a complaint with a supervisory authority in your country.

6. Contact

For privacy-related requests, questions, or to exercise your rights:

support@apexoptimal.dev

Apex Optimal LLC