Privacy policy
- You need an account to use TripGears. You sign in with an email address and a password.
- Your vehicles and photos are private to your account. Other users cannot see them.
- There is no advertising, no analytics, no crash reporting and no tracking in the app.
- We do not sell your data or share it with anyone for marketing.
Who is responsible for your data
The controller of your personal data is the publisher of TripGears:
- Name
- Roman Gusev IT
- Address
- Warszawa, Poland
- Tax ID (NIP)
- 5242958092
- support@tripgears.app
What we collect
Your account
Your email address and your password. The password is stored by our authentication provider only as a salted hash, never as readable text. When you sign in, the authentication service records the time of the sign-in, your IP address and your device's or browser's user agent, to keep sessions and accounts secure.
Your vehicles
For each vehicle: its type, the name you give it (up to 60 characters) and the distance unit you choose, together with technical identifiers, version numbers and timestamps. The app has no fields for a VIN, a licence plate or an odometer reading.
Photos you attach
Photos are optional. When you attach one, the app opens your phone's system photo picker and receives only the photo you choose. The app never asks for permission to use your photo library, camera, microphone, location, contacts or Face ID. On Android 12 and earlier, libraries built into the app declare storage permissions that the app never requests.
Before a photo leaves your phone, the app re-encodes it and removes embedded metadata such as camera details and GPS location, and refuses to upload it if any remains. Photos are stored as JPEG or PNG, up to 5 MB each and up to 5 per vehicle, together with their file type, size, width, height and a checksum.
Sync records
To keep your devices consistent, the service keeps technical records of the changes you make. When two changes to the same vehicle collide, these records can hold copies of the vehicle's earlier and later details, including its name.
Technical data sent by the app
The sync service receives a random identifier created for the app's local database on your phone, and the name and version of your phone's operating system. The app does not send an advertising identifier or a hardware identifier such as an IMEI or serial number.
What we do not collect
Your name, phone number, date of birth, location or contacts. Apart from the photo you choose, the app reads nothing from other apps. The app contains no analytics, crash reporting, advertising, attribution or tracking software.
Why we use it
- To provide the service you signed up for: your account, your vehicles and photos, and keeping them in sync between your devices. The legal basis is the performance of our contract with you (Article 6(1)(b) GDPR).
- To keep the service secure, using the sign-in records described above. The legal basis is our legitimate interest in protecting your account and the service (Article 6(1)(f) GDPR).
We do not use your data for advertising, profiling or automated decisions about you.
Where your data is stored
On your phone
Your vehicle records are kept in a local database that the app encrypts. Copies of your photos are kept as image files in the app's private storage, protected by your phone's own encryption. On an iPhone, these files can be included in your device backup to iCloud or a computer; the database stays encrypted with a key that remains on the original phone.
In your browser
If you use the TripGears website client, it keeps a copy of your records and downloaded photos in your browser's storage, which the app does not encrypt. Signing out of the website removes that copy.
In the cloud
Your account, records and photos are stored with the providers listed below. Photos are kept in private storage that only your account can read.
Who processes your data for us
- Supabase (Supabase Pte. Ltd.) hosts the database, the authentication service and photo storage. Region: London, United Kingdom, which the European Commission recognises as providing adequate data protection.
- PowerSync (Journey Mobile, Inc.) synchronises your records between your devices and the database. It receives your sign-in token, which identifies your account and includes your email address, and the technical data described above. It does not receive your photo files. Region: European Union.
- GitHub hosts this website and records visitors' IP addresses for security. This website sets no cookies and loads nothing from other sites.
These providers process your data only to run the service for us. Both providers' data processing terms include the European Commission's Standard Contractual Clauses for any transfer outside the European Economic Area.
The publisher can technically access stored data as the operator of the service, and does so only to run it, to fix a problem, or to act on your request.
How long we keep it
- Your account, vehicles, photos and sync records are kept for as long as your account exists.
- When you delete a photo, it is marked deleted at once. The file is removed from cloud storage by the device or browser you deleted it from, the next time it runs online at least 24 hours later. If that does not happen, the file stays until you ask us to remove it or your account is deleted.
- Vehicles cannot yet be deleted in the app. To remove one, ask us by email.
- When your account is deleted, your data is removed from the service, including your photos. Copies can remain in our providers' backups until those backups expire.
Your rights
You can ask us to give you a copy of your data, to correct it, to delete it together with your account and photos, to restrict or object to its use, or to receive it in a portable format. Email us at support@tripgears.app from the address of your account, and we will act on your request within one month, as the GDPR requires.
You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl.
Cookies
The mobile app uses no cookies. The TripGears website client uses only the cookies needed to keep you signed in. This website sets no cookies.
Children
TripGears is not directed at children under 16, and we do not knowingly collect data from them.
Security
Data travels between the app and our providers over encrypted connections. Access rules in the database, in photo storage and in the sync service limit every record and every photo to its owner's account.
Changes to this policy
When the app changes what it collects or who processes it, we update this page and its effective date before the change reaches you.