Privacy Policy for Roadfolio

Introduction

Welcome to Roadfolio, developed and operated by Moon Company LLC ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("Roadfolio" or the "App"). By using Roadfolio, you agree to the collection and use of information in accordance with this policy.

If you do not agree with the terms of this Privacy Policy, please do not use the App.

Information We Collect

1. Personal Information

When you create an account, we collect:

• Email Address: Used for account creation, authentication, and communication
• Password: Encrypted and stored securely via Firebase Authentication
• User ID: A unique identifier assigned to your account (Firebase UID)

2. User-Generated Content

You choose to provide the following data, which is stored locally on your device and optionally backed up to Firebase cloud storage:

• Vehicle Information: Make, model, year, VIN, mileage, photos, powertrain type
• Maintenance Records: Service type, cost, date, mileage, photos, receipts (OCR text), service shop information, notes
• Fuel Fill-ups: Gallons, cost, date, mileage, fuel type, notes, receipt photos
• Trip Logs: Start/end locations (GPS coordinates), start/end mileage, distance, trip purpose (business/personal/commute), date/time
• Service Shop Information: Shop name, location, ratings, reviews (if you choose to add them)

3. Location Data

• Precise Location: Collected only when you start or end a trip
• Permission: Location access is requested only when needed ("when in use")
• Usage: Location data is used solely to record trip start/end points and is not shared with third parties
• Control: You can disable location permissions in your device settings at any time

4. Photos

• Camera Access: Used to capture photos of vehicles, maintenance records, receipts, and VIN barcodes
• Photo Library Access: Used to select existing photos from your device
• Storage: Photos are stored locally on your device; cloud backup is optional (Premium/Fleet tiers only)
• Usage: Photos are never shared with third parties or used for any purpose other than your vehicle tracking

5. Usage Data

We collect anonymous analytics data via Firebase Analytics to improve the App:

• Product Interactions: Screens viewed, features used, buttons tapped
• App Performance: Crash reports, error logs, device information (via Firebase Crashlytics)
• Device Information: Device model, operating system version, app version
• Usage Patterns: Feature usage frequency, session duration

Important: Usage data and crash reports are anonymous and not linked to your personal identity.

6. Subscription and Payment Information

• In-App Purchases: Managed by Apple App Store, Google Play Store, and Superwall
• Payment Processing: We do NOT store credit card numbers, billing addresses, or payment details
• Transaction Records: We receive confirmation of successful purchases (transaction ID, subscription tier, purchase date) but no financial information
• Third-Party Processors: Apple, Google, and Superwall handle all subscription management, payment validation, and paywall optimization according to their privacy policies

How We Use Your Information

1. To Provide the App's Core Features

• Authenticate your account (Firebase Auth)
• Store and sync your vehicle data (WatermelonDB + optional Firebase cloud backup)
• Track maintenance history, fuel economy, and trip logs
• Calculate statistics (MPG, maintenance costs, trip distances)
• Generate reports (PDF, CSV exports)
• Send maintenance reminders (local notifications via Notifee)

2. To Manage Subscriptions

• Verify your subscription tier (FREE, TRAVELER, PREMIUM, FLEET, LIFETIME)
• Enable or restrict features based on your account tier
• Display subscription paywalls and process in-app purchases via Superwall
• Optimize paywall experiences through A/B testing
• Sync subscription status with App Store/Play Store

3. To Improve the App

• Analyze app usage patterns (Firebase Analytics)
• Identify and fix bugs (Firebase Crashlytics)
• Understand which features are most valuable to users
• Optimize user experience and performance

4. To Communicate with You

• Send transactional emails (password resets, account confirmations)
• Provide customer support
• Notify you of important updates or changes to the App

We will NEVER send marketing emails without your explicit consent.

Data Storage and Security

Local Storage

• Primary Storage: All data is stored locally on your device using WatermelonDB (SQLite database)
• Offline-First: The App works fully offline; internet is not required for core features
• Device Security: Data is protected by your device's security features (passcode, biometrics)

Cloud Backup (Optional - Premium/Fleet Tiers Only)

• Firebase Cloud Storage: If you enable cloud backup, your vehicle data is encrypted and stored in Firebase Cloud Storage
• Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
• Access Control: Only you can access your backed-up data using your authenticated Firebase account

Security Measures

We implement industry-standard security practices:

• Encryption: All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Authentication: Passwords are hashed and never stored in plain text (Firebase Authentication)
• Access Controls: Strict access controls ensure only authorized users can access their own data
• Regular Updates: We regularly update dependencies and security patches

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Sharing and Third-Party Services

Third-Party Services We Use

We integrate with the following third-party services. Each has its own privacy policy:

1. Firebase (Google)
   • Services: Authentication, Cloud Storage (optional), Analytics, Crashlytics
   • Privacy Policy: https://firebase.google.com/support/privacy
2. Superwall
   • Service: Paywall management, subscription optimization, and in-app purchase handling
   • Privacy Policy: https://superwall.com/privacy
3. Apple App Store / Google Play Store
   • Service: Payment processing for in-app purchases
   • Privacy Policies:
     • Apple: https://www.apple.com/legal/privacy/
     • Google: https://policies.google.com/privacy
4. NHTSA API (National Highway Traffic Safety Administration)
   • Service: VIN decoding for vehicle make/model lookup
   • Public API: https://vpic.nhtsa.dot.gov/api/
   • No personal data is sent; only VIN numbers

We Do NOT Share Your Personal Data

• No Selling: We will never sell, rent, or trade your personal information
• No Third-Party Marketing: We do not share your data with advertisers or marketing companies
• No Social Sharing: Vehicle data, photos, and records are private and never shared publicly

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal requests (subpoenas, court orders, government investigations)
• Protection of our rights, property, or safety
• Enforcement of our Terms of Service
• Prevention of fraud or illegal activity

Your Data Rights

Access and Control

You have full control over your data:

• View Data: All your data is accessible within the App
• Edit Data: You can modify or update any vehicle records, maintenance logs, fuel fill-ups, or trips
• Delete Data: You can delete individual records or entire vehicles at any time
• Export Data: Export your data in CSV, PDF, or Car Swap (.carswap) formats

Account Deletion

You can delete your account at any time:

1. Open Roadfolio → Settings → Account
2. Tap "Delete Account"
3. Confirm deletion

What happens when you delete your account:

• Your Firebase account is permanently deleted
• Cloud backup data (if any) is permanently deleted from Firebase
• Local data remains on your device until you uninstall the App
• Active subscriptions are NOT automatically cancelled (you must cancel via App Store/Play Store)
• This action is irreversible

Data Portability

You can export your data in the following formats:

• CSV: Comma-separated values for easy import into spreadsheets
• PDF: Detailed or condensed vehicle history reports
• Car Swap Package (.carswap): Complete vehicle transfer package with all photos and records

Opt-Out of Analytics

While Firebase Analytics is enabled by default, we collect only anonymous usage data. If you wish to limit data collection:

• Disable analytics via your device's app permissions (if available)
• Contact us at support@roadfolio.app to request analytics opt-out

Children's Privacy

Roadfolio is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our servers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• The "Last Updated" date at the top will be revised
• We will notify you via in-app notification or email (for significant changes)
• Continued use of the App after changes constitutes acceptance of the new policy

We encourage you to review this Privacy Policy periodically.

International Data Transfers

Roadfolio uses Firebase, which is operated by Google. Your data may be transferred to and stored on servers located outside your country of residence, including the United States. By using Roadfolio, you consent to the transfer of your data to countries with different data protection laws than your own.

Firebase complies with applicable data protection regulations, including GDPR (for European users) and CCPA (for California users).

California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know: What personal information we collect and how it's used
• Access: Request a copy of your personal information
• Delete: Request deletion of your personal information
• Opt-Out: Opt out of the sale of your personal information (Note: We do NOT sell personal information)

To exercise these rights, contact us at support@roadfolio.app.

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Restrict processing of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing of your personal data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at support@roadfolio.app.

Contact Us