Romy's Garage

Privacy Policy

Last updated: November 4, 2026

Romy's Garage has two parts. The restoration part works entirely on Your device. The optional car sharing part (introduced in version 1.1) lets several people share a car, and therefore stores the car sharing data You and the other members enter on Our server in the European Union. This Privacy Policy explains what is processed for each part, who processes it, and why, and tells You about Your privacy rights. It also covers Our website romysgarage.app, including the support form (see "Our Website and Support Form" below).

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means the sign-in state created for You to access the Service via Sign in with Apple (see "Account and Sign-In Data" below).
  • Application refers to Romy's Garage, the software program provided by the Company.
  • Car Sharing Account means the account created on Our server when You start using the car sharing part with Sign in with Apple. It is separate from the restoration part, which needs no server account.
  • Car Sharing Data refers to the information entered in the car sharing part by You or other members of a shared car — the car (name, make, model, year, optional licence plate, photo, odometer, currency), memberships and invite codes, trips (odometer readings, times, optional notes), costs (amount, category, payer, date, optional notes and fuel quantity), reservations, settlements, and — only if You choose to save it — the parking location at the end of a trip.
  • Business, for the purpose of the CCPA/CPRA, refers to the Company as the entity that determines the purposes and means of processing Consumers' personal information and does business in the State of California.
  • CCPA/CPRA refers to the California Consumer Privacy Act as amended by the California Privacy Rights Act of 2020.
  • Company ("the Company", "We", "Us", or "Our") refers to Alejandro Morillo Diaz, Am Markt 14, Burg auf Fehmarn, Germany.
  • For the purposes of the GDPR, the Company is the Data Controller for the limited Personal Data described below.
  • Consumer, for the purpose of the CCPA/CPRA, means a natural person who is a California resident.
  • Country refers to: Schleswig-Holstein, Germany.
  • Device means any device that can access the Service, such as an iPhone or iPad.
  • GDPR refers to the EU General Data Protection Regulation.
  • Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual, as further defined under the GDPR and the CCPA/CPRA respectively. We use "Personal Data" and "Personal Information" interchangeably.
  • Project Data refers to the vehicle project information You create within the Application — project names, categories, parts, tasks, milestones, budget entries, journal entries, before/after photo pairs, and photos You take or import. Project Data is not transmitted to the Company; see "Project Data Stays on Your Device" below.
  • Service refers to the Application and Our website romysgarage.app (the "Website").
  • Service Provider means any natural or legal person who processes data on behalf of the Company (a Data Processor under the GDPR). For Romy's Garage, this means RevenueCat, Inc., Apple Inc., for the car sharing part only Supabase, Inc., and for the Website Cloudflare, Inc. and Formspree, Inc. (see "Third-Party Service Providers" below).
  • You means the individual accessing or using the Service. Under GDPR, You may be referred to as the Data Subject.

Collecting and Using Your Personal Data

Types of Data Collected

Sign-in identifier. When You sign in with Sign in with Apple, Apple issues a stable, app-specific identifier for Your Apple ID (not Your actual Apple ID or email address). This identifier is stored locally in Your Device's Keychain and is also shared with RevenueCat so that Your Pro Subscription can be recognized across reinstalls or additional devices.

Name (optional). Apple lets You choose whether to share Your name the first time You sign in. If You do, it is stored locally in Your Device's Keychain to personalize the Account screen in Settings. It is never transmitted to the Company or any third party.

Email address (optional, not stored). Apple may share Your email address (or a private Apple relay address) with the Application at the moment You sign in. Romy's Garage does not persist this email address and does not transmit it anywhere.

Subscription and purchase status. To unlock Pro features, the Application checks Your subscription status with RevenueCat, which in turn relies on Apple's App Store to validate Your purchase. Neither the Company nor RevenueCat ever receives Your payment card details — those are handled entirely by Apple.

Project Data. See "Project Data Stays on Your Device" below — this data is never sent to Us.

Car sharing (only if You use it). When You start car sharing, Sign in with Apple creates Your Car Sharing Account on Our server. We store Your Apple sign-in identifier, the email address Apple provides (which may be a private relay address), and the display name You choose. We then store the Car Sharing Data You enter, together with the time each entry was made. Members of a shared car see each other's display names and the Car Sharing Data of that car, because the whole point is to share trips, costs, reservations and the settlement. If someone adds a person without the app (for example a relative), the name entered for that person is stored as part of the car's data.

Parking location (optional). When You end a trip, You can save where the car is parked. Only then does the Application ask for Your location (precise, "while using the app"), once, and stores it with the car so the other members can find it. Parking locations are deleted automatically after 60 days. You can turn this off for every trip.

Notifications. If You allow notifications, Your Device's push token, language and time zone are stored so We can tell You, for example, that another member reserved the car or closed a settlement. Messages are delivered through Apple Push Notification service.

Car sharing subscription. To check whether a car is paid for, Our server asks RevenueCat for the car owner's subscription status (number of car slots and expiry date) and stores that status. Purchases of extra seats are recorded with their transaction identifier so each purchase is credited once.

Receipt scanning. If You scan a fuel receipt, the text is recognised on Your Device; the photo is never uploaded. Car photos You add to a shared car are uploaded so the other members can see them.

Support correspondence. If You email Us for support, We process the content of Your message and Your email address to respond to You.

We do not collect: location data (other than the optional parking location described above), contacts, health data, browsing or in-app usage analytics, advertising identifiers, or any data via cookies or web-tracking technologies. Romy's Garage is a native iOS application with no embedded analytics, advertising, or tracking SDKs, and Our Website uses no cookies, analytics or tracking either.

Device permissions. The Application may request access to Your Device's Camera, solely so You can take a photo of a part or Your vehicle directly within the app. Romy's Garage does not request access to Your full Photo Library — the built-in iOS photo picker lets You choose existing photos without granting the app broader library access.

Apple's own diagnostics (optional, controlled by You). If You have enabled "Share With App Developers" under Your Device's Privacy & Security settings, Apple may share anonymized crash and performance data with Us through App Store Connect. This is entirely controlled by You in Your Device settings and governed by Apple's own privacy policy, not by the Application itself.

Use of Your Personal Data

The Company may use the limited Personal Data described above to:

  • Operate and maintain the Service, including recognizing Your Pro Subscription.
  • Provide the car sharing part: show members their shared car, trips, costs, reservations and parking spot, calculate settlements, and send the notifications You allowed.
  • Process Your Subscription purchase, renewal, and cancellation (performed by Apple and RevenueCat on Our behalf).
  • Respond to Your support requests and correspondence.
  • Comply with legal obligations, resolve disputes, and enforce Our agreements.

We do not use Your Personal Data for advertising, profiling, or automated decision-making, and We do not send marketing communications based on Personal Data collected through the Service.

Sharing Your Personal Data

We share Personal Data only in the following situations:

  • With RevenueCat (Service Provider): to recognize and manage Your Pro Subscription.
  • With Apple (Sign in with Apple, App Store payment processing, push notifications): as necessary to authenticate You, process Your purchase and deliver notifications.
  • With Supabase (Service Provider, car sharing only): hosting of Our car sharing database, file storage and server functions in the EU (Frankfurt, Germany).
  • With the other members of a shared car: Your display name and the Car Sharing Data of that car are visible to everyone who is a member of it. Members join only with an invite code from a member.
  • For legal reasons: if required to do so by law or in response to a valid request by a public authority.
  • For business transfers: if the Company is involved in a merger, acquisition, or asset sale, the very limited Personal Data described in this Policy may be transferred as part of that transaction; We will provide notice before it becomes subject to a different Privacy Policy.

We do not share Personal Data with advertisers, data brokers, or analytics partners, because We do not work with any.

Project Data Stays on Your Device

Your vehicle project information — including project names, categories, parts, tasks, milestones, budget entries, journal entries, before/after photo pairs, and any photos You take or import — is stored exclusively on Your Device. This Project Data is never transmitted to, or accessible by, the Company or any third party, including RevenueCat, Apple or Supabase. If You move a car between the restoration and the car sharing part, only the details You see in the form (name, make, model, year, odometer and the cover photo) are copied into the shared car.

If You use the Application's optional "Export data" feature, You create a backup file that You choose where to save or share (for example, via Files, a cloud-storage app of Your choice, AirDrop, or email) using Your Device's standard share sheet. That choice, and any resulting storage of the file, is entirely Yours; the Company never receives or has access to Your exported backup files.

Because Project Data never reaches Us, We cannot access, restore, or delete it on Your behalf — You are always in full and immediate control of it (see "Delete Your Personal Data" below).

Our Website and Support Form

Hosting and server logs. Our Website romysgarage.app is delivered through Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When You open a page, Cloudflare processes the technical data needed to deliver it and protect it against attacks: IP address, date and time, the requested address, the referrer and Your browser's user agent. We do not store or analyse these logs ourselves. The legal basis is Our legitimate interest in a secure, working Website (Art. 6(1)(f) GDPR).

No cookies, no tracking. The Website sets no cookies and uses no analytics, advertising or tracking services. Fonts and images are served from Our own domain. The "Split car costs" calculator runs only in Your browser; a shared result link contains numbers only (distances, amounts, split rules), never names.

Support form. When You contact Us through the support form, We process Your email address, the topic You chose, Your message and the language of the page in order to answer You. The form is processed by Formspree, Inc. (United States), which stores the message and forwards it to Us by email. The legal basis is the performance of a contract where Your request concerns the Service (Art. 6(1)(b) GDPR) and otherwise Our legitimate interest in answering Your request (Art. 6(1)(f) GDPR). Support correspondence is retained as described under "Retention of Your Personal Data" below.

App Store links and invite links. Links to the App Store contain campaign parameters that let Apple show Us aggregated figures (for example, how many downloads came from the Website); they contain no Personal Data, and Apple's privacy policy applies on the App Store. On iPhone and iPad, Safari may show an app banner; this is a Safari feature and sends no data to Us. Car sharing invite links (romysgarage.app/join/…) contain the invite code of a shared car; the page reads it only in Your browser to open the Application.

Retention of Your Personal Data

  • Sign-in identifier and name (Device Keychain): retained until You sign out of the Application or delete it from Your Device.
  • Subscription/purchase records held by RevenueCat and Apple: retained for as long as needed to provide the subscription service and to meet RevenueCat's and Apple's own legal, accounting, and tax obligations (typically several years for transaction records, per their respective privacy policies).
  • Support correspondence: retained for up to 24 months from the date Your inquiry is resolved, to handle follow-up questions and, where necessary, defend against legal claims. This also applies to messages sent through the support form, which We delete from Formspree within the same period.
  • Website server logs: processed by Cloudflare to deliver the Website and protect it against attacks; We do not store or analyse them ourselves.
  • Project Data: retained only on Your Device, for as long as You keep it there — the Company has no visibility into, or control over, this retention.
  • Car Sharing Data: retained while the shared car exists. Parking locations are deleted after 60 days. When a car is deleted by its owner, all of its data is deleted.
  • Car Sharing Account: retained until You delete it. On deletion Your sign-in data, email, push tokens and subscription status are erased and Your display name is removed. Trips and costs You entered in cars You did not own remain, without Your name, so the other members can still settle what they owe each other. Cars You own are handed over to the longest-standing other member, or deleted if there is none.

Transfer of Your Personal Data

Car Sharing Data is stored on Supabase infrastructure in the EU (Frankfurt, Germany). Your sign-in identifier and subscription status may be processed by RevenueCat, Inc., which is based in the United States, by Supabase, Inc. (United States) as Our hosting provider, and by Apple, which operates data centers internationally. Website requests are processed by Cloudflare, Inc. (United States) through its global network; Cloudflare participates in the EU-U.S. Data Privacy Framework. Support form messages are processed by Formspree, Inc. in the United States. Where Personal Data is transferred outside the European Economic Area (EEA) or the United Kingdom (UK) to a country not recognized as providing an adequate level of protection, We and Our Service Providers rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement, together with supplementary technical measures such as encryption.

Delete Your Personal Data

  • Project Data: delete individual projects, photos, tasks, or entries directly within the Application (press-and-hold on the relevant item, then confirm deletion), or delete the Application from Your Device to instantly and permanently erase all locally stored Project Data.
  • Sign-in identifier and name: sign out within the Application (Settings → Account → Sign Out) to remove them from Your Device's Keychain.
  • Car Sharing Account and Car Sharing Data: delete Your Car Sharing Account in the Application (Settings → Car sharing → Delete car sharing account; "Delete account" also deletes it). Owners can delete a shared car with all of its data in the car's settings; members can delete their own entries until they are settled, or leave a car.
  • Data held by RevenueCat: contact Us, or RevenueCat directly, to request deletion of Your subscriber identifier and associated purchase history, subject to any legal retention obligations RevenueCat or Apple may have for financial and tax records.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, the very limited Personal Data described in this Policy may be transferred; We will provide notice before it becomes subject to a different Privacy Policy.

Law Enforcement and Other Legal Requirements

The Company may disclose Personal Data if required to do so by law, or in the good-faith belief that such action is necessary to comply with a legal obligation, protect the rights or safety of the Company or others, or investigate wrongdoing in connection with the Service.

Security of Your Personal Data

Car Sharing Data is transmitted only over encrypted connections (TLS) and stored in a database where every table is protected by row-level security: a member can only read the cars they belong to, and the rules for trips, costs and settlements are enforced on the server. Because Your Project Data stays on Your Device rather than on a Company-operated server, it cannot be exposed by a breach of Our systems — We simply do not have it. The security of Project Data on Your Device depends on Your own Device security (passcode, Face ID/Touch ID, and keeping Your operating system up to date), which is Your responsibility. For the limited Personal Data We do process via RevenueCat and Apple, We rely on those providers' security measures; no method of electronic transmission or storage is ever 100% secure, and We cannot guarantee absolute security.

Third-Party Service Providers

We do not use any analytics, advertising, or crash-reporting SDKs beyond what is described above.

GDPR Privacy

Legal Basis for Processing Personal Data under the GDPR

We process the limited Personal Data described in this Policy under the following legal bases:

  • Performance of a contract: to provide the Service, Your Pro Subscription and the car sharing part, including sharing Car Sharing Data with the members of a car.
  • Consent: for the optional parking location and for notifications, which You can withdraw at any time in the Application or in iOS Settings.
  • Legitimate interests: to respond to Your support requests, keep the Service secure, and keep the anonymised trip and cost history of a shared car after a member deletes their account, so the remaining members can settle what they owe each other.
  • Legal obligations: where processing is necessary to comply with the law (for example, financial record-keeping by RevenueCat/Apple).

Your Rights under the GDPR

If You are in the EEA or UK, You have the right to:

  • Access the Personal Data We hold about You.
  • Rectify inaccurate Personal Data.
  • Erase Your Personal Data (see "Delete Your Personal Data" above — for Project Data, this is entirely within Your own control on Your Device).
  • Restrict or object to processing in certain circumstances.
  • Data portability for Personal Data You provided to Us and that We process by automated means.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with Your local data protection authority.

To exercise these rights, contact Us using the details below. We may ask You to verify Your identity before responding, and We will generally respond within one month.

CCPA/CPRA Privacy Notice (California Residents)

This section supplements Our Privacy Policy and applies solely to California residents.

Categories of Personal Information Collected (Last 12 Months)

Category Examples Collected?
A. Identifiers Sign-in identifier; name and email address (if You choose to share them); car sharing display name Yes
B. California Customer Records (Cal. Civ. Code § 1798.80(e)) Name Yes (overlaps with A)
C. Protected classifications Age, race, gender, etc. No
D. Commercial information Subscription/purchase status (via Apple/RevenueCat) Yes
E. Biometric information — No
F. Internet/network activity Browsing history, in-app analytics No
G. Geolocation data Parking location at the end of a car sharing trip, only if You choose to save it Yes (optional, deleted after 60 days)
H. Sensory data Audio/visual recordings No (Your own photos stay on Your Device and are never received by Us)
I. Professional/employment information — No
J. Education information — No
K. Inferences Profiles or predictions about You No
L. Sensitive personal information Government IDs, financial accounts, precise geolocation, health data, etc. Only the optional parking location (precise geolocation) described above

We Do Not Sell or Share Your Personal Information

We do not sell Personal Information for money, and We do not "share" it for cross-context behavioral advertising, because We do not use any advertising or ad-measurement technology.

Your Rights under the CCPA/CPRA

If You are a California resident, You have the right to: notice of collection; know/access the Personal Information We hold about You; request correction; request deletion (subject to exceptions such as RevenueCat's/Apple's legal retention obligations); opt out of sale or sharing (not applicable, as We do not sell or share); and non-discrimination for exercising these rights.

To exercise these rights, contact Us at the email below. We will verify Your identity before responding and will respond within 45 days (extendable once by 45 days where reasonably necessary).

Minors

We do not knowingly collect Personal Information from children under 16, and We do not sell or share Personal Information of any Consumer, regardless of age.

"Do Not Track"

The Service does not respond to Do Not Track (DNT) browser signals. Neither the Application nor the Website uses cookies or web-tracking technology, so there is no tracking activity for a DNT signal to affect.

Children's Privacy

Romy's Garage does not run its own age-verification check. Eligibility to use the Service is governed by Apple's own account requirements: the Application can only be used with an Apple Account that meets Apple's minimum age for that country, or, for younger children, an Apple Account organized by a parent or guardian through Family Sharing under Apple's own parental controls.

Under data protection laws such as COPPA (US) and the GDPR, We do not knowingly collect Personal Data from children under 13 (or the relevant minimum age under Your local law) outside of what is described above, and We do not knowingly sell or share any child's Personal Data. If You are a parent or guardian and believe Your child has provided Us with Personal Data without appropriate consent, please contact Us so We can address it.

Links to Other Websites

This Privacy Policy links to the privacy policies of RevenueCat, Apple, Supabase, Cloudflare and Formspree for Your reference. We have no control over, and assume no responsibility for, the content or privacy practices of those third-party sites.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of material changes by updating the "Last updated" date above and, where appropriate, through a notice within the Application prior to the change taking effect. You are advised to review this Privacy Policy periodically.

Contact Us

If You have any questions about this Privacy Policy, You can contact Us: