Effective [DATE]. DRAFT for review.
GearLog is an app for tracking maintenance on vehicles and equipment. It is made by [BUSINESS NAME] ("we", "us"). This policy explains what information GearLog collects, how it is used, and the choices you have. Questions: [CONTACT EMAIL].
Information you give us when you create an account: your email address, the display name you choose, and your password. We store only a one-way hash of your password, never the password itself.
Equipment data in fleets that sync: for fleets covered by GearLog Pro, we store what you and the people in the fleet enter: machine details (name, make, model, year, serial or VIN, meter readings), specs, maintenance schedules, service records (dates, notes, costs, who did the work) and photos (for example receipts or parts). Data in fleets that don't sync stays on your phone and is never sent to us.
Fleet membership: which fleets you belong to, your role in each, and the email addresses of the people you add.
Subscription status: if you subscribe, the app store (Google Play or the Apple App Store) handles payment. We receive whether your subscription is active and when it ends. We never see your card or bank details.
Technical information: when the app talks to our servers, our hosting provider handles your IP address and basic request information (time, address requested) to deliver the request, keep the service secure and fix problems. We don't use it to identify or track you.
We don't collect your location, contacts, or anything from your phone other than what you choose to enter or attach. Photos are only uploaded when you attach them to a record in a fleet that syncs.
We don't sell or rent your information, use it for advertising, or share it with data brokers.
We keep your account and synced fleet data until you delete it. When you delete a record, machine or fleet, it is removed from sync; photo files of deleted records are erased within about a week. When you delete your account, we delete your account and every fleet you are the only owner of, with its machines, records and photos. Copies in our providers' routine backups expire on their own schedule.
Connections to our servers are encrypted (HTTPS), passwords are stored only as hashes, and access to the servers is limited. No system is perfectly secure, so keep your password private and save backup files somewhere safe.
GearLog is not meant for children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, contact us and we will delete it.
If we change this policy, we will update the date above, and for important changes we will tell you in the app before they take effect.
[BUSINESS NAME], [MAILING ADDRESS], [CONTACT EMAIL]