Privacy Policy

Garagey is provided by Aska Cheung (“Garagey,” “we,” “us,” or “our”). This policy applies to Garagey's iOS app, public website, cloud synchronization, AI features, support, and related services.

Questions and privacy requests can be sent to mraskacheung@gmail.com.

Account and profile information

Garagey uses Firebase Authentication. A Guest account receives an anonymous Firebase user identifier. If you connect or create an account, we may process your email address, display name, authentication provider (Apple, Google, or email), provider identifiers, and Garagey user ID. We do not receive your Apple or Google password.

Garage, photos, and AI results

We process vehicle photos you capture or select, AI identification and customization requests, generated variants, vehicle make, model, year, trim, specifications, notes, capture date, and related Garage metadata. This information is stored on your device and may be uploaded to Firebase Firestore and Firebase Storage under your Garagey identity for cloud sync, backup, and restoration.

Photos and prompts are transmitted to Google's AI services when needed to identify or customize a vehicle. Garagey does not sell your photos or use them for advertising, and does not train its own AI model on your photo content without providing separate notice and obtaining any required permission.

Location information

With your permission, Garagey may read a device location or location embedded in a selected photo. Before a location is stored in a capture, Garagey converts it into a randomized general area around an approximately three-kilometer neighborhood grid. Garagey does not intentionally retain the source precise coordinate. You can decline or revoke location access in iOS Settings.

Purchases, subscriptions, and credits

We process product identifiers, purchase and transaction identifiers, signed transaction information, subscription entitlement and expiration status, restored-purchase status, capture-credit balances, credit grants and debits, and limited fraud-prevention records. Apple processes payment card and billing details; Garagey does not receive full payment card data. RevenueCat helps manage purchases, entitlements, and paywall presentation.

Advertising, referrals, and rewards

Free users may see Google AdMob banner or rewarded ads. Depending on your region, Google's User Messaging Platform may present privacy choices before an ad request. Google may process device identifiers, IP address, approximate location derived from IP, ad interactions, diagnostics, and consent choices under its policies. Garagey also processes referral codes, invite opens and claims, rewarded-ad verification tokens, and associated credit grants. A device-only installation identifier may be hashed for abuse prevention and duplicate-reward controls.

Diagnostics, security, and support

We process App Check signals, request timestamps, operation status, security and fraud-prevention events, service logs, and information you voluntarily include in a support request. Apple may provide aggregated crash and performance information according to your device analytics settings. Please do not send passwords, full payment details, or unrelated sensitive information to support.

• Authenticate Guest and connected accounts and safely link providers.
• Identify vehicles and generate requested AI customizations.
• Save, synchronize, restore, and display your Garage.
• Process purchases, subscriptions, credits, referrals, and ad rewards.
• Prevent duplicate grants, abuse, fraud, and unauthorized access.
• Provide support, troubleshoot failures, and improve reliability.
• Comply with legal obligations and enforce our Terms.

Where applicable, we rely on performance of our contract, your consent, our legitimate interests in operating and securing Garagey, and compliance with legal obligations. You may withdraw consent where consent is the applicable basis, without affecting earlier processing.

We disclose information only as needed to operate Garagey, complete a transaction you request, comply with law, protect users and services, or complete a business transfer subject to appropriate safeguards.

Account, profile, Garage, and cloud photo data generally remain while your Garagey account is active. Deleting an individual capture removes that capture and its managed cloud assets. Deleting your account initiates deletion of the Garagey authentication account, profile, Garage, photos, AI variants, location data, referral and credit records, and Garagey's associated subscription-management customer record, subject to technical and legal exceptions.

Limited security logs, fraud-prevention records, deletion evidence, and encrypted backups may remain for up to 90 days before deletion or irreversible anonymization, unless a longer period is required by law. Apple, Google Play, and other payment providers retain transaction records under their own legal and accounting requirements.

See the Account Deletion page for in-app and email request instructions.

• Use iOS Settings to manage camera, photo, and location permission.
• Use Garagey's privacy options to revisit ad choices where available.
• Delete an individual capture without deleting the entire account.
• Delete your Garagey account from Settings or submit a verified request.
• Manage subscriptions and request refunds through Apple.
• Request access, correction, deletion, or restriction where local law provides it.
• Object to or withdraw consent from certain processing where applicable.

We may ask you to verify account ownership before acting on a request. You may also have a right to complain to your local data protection authority. Garagey does not knowingly sell personal information for money.

Garagey is not directed to children under 13, and we do not knowingly collect personal information from a child under 13 without legally valid authorization. A person under the age of majority should use Garagey only with involvement of a parent or legal guardian. Contact us if you believe a child provided information in violation of this policy.

We use access controls, authenticated per-user storage paths, App Check, transport encryption, integrity checks, and operational safeguards. No system is perfectly secure, so we cannot guarantee absolute security. Service providers may process information in the United States and other countries, subject to their contractual and legal transfer safeguards.

This public website is delivered as static files. It does not include a Garagey account login, Firebase SDK, advertising SDK, contact form, or first-party analytics and does not intentionally set analytics or advertising cookies. Your browser and hosting provider may still process basic request information such as IP address, user agent, and security logs to deliver and protect the site.

We may update this policy as Garagey changes. We will publish the revised policy here and update the date above. Material changes may also be communicated in the app or by another appropriate method.

Privacy questions and requests: mraskacheung@gmail.com