Garaged is a vehicle maintenance record for people who service their own cars and motorcycles. It is built so that your records stay with you. This page says exactly what leaves your phone, why, and what does not.
| What | Why | Legal basis |
|---|---|---|
| Email address | To identify your account, confirm it, and let you reset a forgotten password | Performance of a contract (providing the service) |
| Password | To secure your account. Stored only as a one-way hash; we cannot read it | Performance of a contract |
| Display name (optional) | Shown in the app if you set one | Performance of a contract |
| A display preference (list density) | So the app remembers how you like the garage list laid out | Performance of a contract |
Accounts are hosted by Supabase Inc. in the United Kingdom (London, eu-west-2). Supabase acts as our processor. Their authentication service keeps security logs, which can include the IP address and device details of sign-in attempts, for the period set out in their own policy.
Why an account at all, if your records stay on the phone? Because the vehicle lookup below spends a request against a government API quota issued in our name, and it has to be able to tell one user from another to limit how often it is called. Nothing else about the account is used for anything.
When you add a vehicle by its registration number, the app sends that number to a small service we run, which forwards it to the DVSA MOT History API and returns the vehicle's make, model, colour, fuel type, engine size, registration dates, MOT test results and recorded mileages. That data is then stored on your phone.
The same lookup runs again from time to time, so that a new MOT test — its result, its mileage reading and any advisories — reaches your record without you having to re-enter it. This happens at most once a day for a vehicle, when you open that vehicle in the app, and whenever you tap Check for a new MOT yourself. It does not run in the background, and it does not run for a vehicle you have marked as sold.
You can add a vehicle by hand instead, without a lookup, and nothing is sent.
The following are stored only on your phone, in the app's private storage:
None of this is transmitted to us. The app has no server-side copy of your records.
You can set up a backup to a folder of your choosing on your phone or in a storage provider you already use (for example a folder synced by a cloud storage app). The app writes your records and documents there in plain, readable files so that they outlive the app.
You can generate a PDF report of a vehicle's history to hand to a buyer. It is produced on your phone. It is shared only when you share it, through Android's share sheet, to a recipient you choose. Location data is stripped from every image in it. We never receive a copy.
Reminders for planned jobs are optional, set per job, and delivered by your phone's own local notification system. No reminder is sent from a server. The app asks for notification permission the first time you set a reminder, and not before.
Under the UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, and object to or restrict our processing of it. Because the only personal data we hold is your account details, these requests are simple to meet.
Your maintenance records are already in your hands. The app's export produces every record and document in open formats (JSON, CSV and the original image files) at any time, without asking us.
To exercise any right, contact aoo.garaged@gmail.com. We will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
You can delete your account from inside the app, under Settings. Deleting it removes the account, the email address it is under, and everything held against it on our server. This cannot be undone.
You can also delete your account without the app: contact aoo.garaged@gmail.com from the email address on the account, and we will remove it.
Either way, deleting your account does not touch the records on your phone or in your backup folder. Those are yours to keep or remove. The registration lookup stops working until you create a new account, and the rest of the app keeps working on the records already on the phone.
Garaged is for people who own and maintain vehicles. It is not directed at children, and we do not knowingly hold an account for anyone under 13.
If the app starts sending records to a server — for example if an optional sync feature is added in future — that will be a change to this policy, published with the version of the app that introduces it, and described in the app before it is switched on for you.
| Party | Role | Their policy |
|---|---|---|
| Supabase Inc. | Hosts accounts and the lookup service | supabase.com/privacy |
| Driver and Vehicle Standards Agency (DVSA) | Answers vehicle lookups | gov.uk |
| Google (Play services, ML Kit) | Supplies on-device text recognition and document scanning components | policies.google.com/privacy |