Privacy Policy

Paddiq is a digital garage: you record vehicles, service history, parts, and receipts, and the app helps you understand them. This page explains exactly what that means for your data.

What we collect

Account information

Your email address, and a display name if you provide one. Email is used to sign you in, to send password resets, and to contact you about your account. Authentication is handled by Supabase; we never see or store your password.

Vehicle and ownership data

You choose what to enter. It can include:

• Vehicle details — year, make, model, trim, mileage, condition, and VIN if you choose to add one
• Purchase price, purchase date, and your own value estimates
• Service records, installed parts, and the costs attached to them
• Free-text notes you write

A VIN can identify a specific vehicle, and through it potentially its owner. Adding one is optional and you can remove it at any time.

Files you upload

Invoices, receipts, and vehicle photos. These are stored in Supabase Storage under a path scoped to your user ID and the vehicle, and access is restricted to your account.

AI requests

When you use a feature that calls AI — diagnosis, value estimates, job planning, troubleshooting reports, or seller reports — we store the question and the answer so the result stays on your vehicle's history. We also record usage metadata (which endpoint, approximate size, success or failure) to enforce rate limits and prevent abuse.

Server logs

Our host keeps standard request logs, which include IP address and browser user-agent. These exist to keep the service running and to investigate abuse and outages. They are not used to build a profile of you and are not combined with your garage data for any other purpose.

What we do not collect

• No location tracking, and no access to GPS or precise location
• No advertising identifiers, and no third-party ad or analytics SDKs
• No contacts, calendar, or microphone access
• No payment details — Paddiq does not currently take payments
• No biometric data, and none of the categories California treats as sensitive personal information beyond the account email you sign in with

Cookies and similar technologies

Paddiq sets only the cookies needed to keep you signed in and to keep your session secure. There are no advertising cookies, no analytics cookies, and no third-party trackers on any page, including the pages you can see before signing in.

Clearing these cookies signs you out; it does not otherwise affect the app.

Do Not Track

Some browsers can send a "Do Not Track" signal. There is no common industry standard for how to interpret one, and Paddiq does not track you across other websites or over time in the first place, so there is nothing for the signal to switch off. We do not respond differently to Do Not Track signals, because our behaviour is already what such a signal asks for.

Third-party tracking across sites

No third party collects personally identifiable information about your online activities across different websites or over time through Paddiq. The services we use are listed below, each is used only to run the product, and none of them place tracking technology on our pages for their own purposes.

Who your data is shared with

Only the processors needed to run the product. Each one is listed with what it actually receives:

• Supabase — authentication, database, and file storage. Holds your account, your garage data, and your uploads.
• Vercel — application hosting. Processes requests and keeps standard server logs.
• Groq — the AI provider, and only when live AI is enabled. Receives the relevant vehicle context for the request you made: vehicle details, and recent service records, parts, and invoice summaries. It does not receive your email, your name, or your files. It processes the request as our service provider, and we do not grant it permission to use your content to train models.

We do not sell your data, we do not share it with data brokers, and we do not use it to train AI models. We may disclose data if legally required to, or to protect the safety of a person or the integrity of the service.

How long we keep it

We keep what you enter for as long as your account is open, because the product is a history and a history you cannot see is not useful to you. We do not apply a fixed expiry to garage data.

• Garage data, files, and AI history — until you delete the item, or delete your account.
• Account record — until you delete your account.
• Usage metadata for rate limiting — retained only as long as it is useful for enforcing limits and investigating abuse.
• Server logs — retained on our host's standard schedule, which is short and measured in days, not years.
• Backups — deleted data may persist in backups for a short period before being overwritten.

Your choices

• Review and correct your information — your account details are in Settings, and every vehicle, record, part, and invoice can be opened and edited in the app. If something you cannot reach in the app is wrong, email us and we will correct it.
• Delete your account — Settings → Danger zone. This is immediate and cannot be undone.
• Delete individual items — any vehicle, record, part, or invoice can be deleted on its own.
• Get a copy of your data — the seller report gives you a printable summary of one vehicle's history. For a copy of everything on your account, email us and we will put it together for you by hand.
• Skip optional fields — VIN, photos, and notes are all optional. The app works without them.

Your California privacy rights

Paddiq is operated from California and these terms are governed by California law, so this section sets out what California residents are entitled to here.

Categories of personal information

Using the categories California uses, in the twelve months before the date at the top of this page we collect:

• Identifiers — email address, display name, an internal account ID, and IP address in server logs.
• Commercial information — what you spent on your own vehicle: purchase price, service costs, parts costs, and the receipts you upload. This is your record of your own spending, not a purchase history with us.
• Internet or network activity — which app features you used, held as the usage metadata described above.
• Other information you provide — vehicle details, VIN if you add one, notes, photos, and the AI questions you ask.

We do not collect geolocation, biometric information, professional or employment information, education records, or inferences drawn to create a profile about you.

Sources, and why we collect it

Almost all of it comes directly from you, by typing it into the app or uploading a file. The rest is generated by using the service — the account ID, the usage metadata, and server logs. We use it to operate the product you asked for, to keep your account secure, to enforce usage limits, and to fix things when they break. We do not use it for advertising, profiling, or automated decisions that have a legal effect on you.

We do not sell or share your personal information

Paddiq has never sold personal information, and does not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the twelve months before the date at the top of this page, and we do not sell or share the personal information of anyone under 16. Because we do not do it, there is no "Do Not Sell or Share My Personal Information" opt-out to offer you.

We also do not disclose personal information to third parties for their own direct marketing purposes, so there is nothing to request under California's "Shine the Light" law.

Rights you can exercise

• Know what we have collected about you and why.
• Access a copy of it.
• Correct anything inaccurate.
• Delete it.
• Not be discriminated against for exercising any of these. Paddiq works the same either way, and there is no paid tier you lose by asking.

Delete and correct are available immediately in the app, which is the fastest route. For anything else, email us from the address on your account, or use the contact address below. We will verify that the request really comes from you — for an email-based account that normally means replying from the account address — and respond within 45 days. If a request is genuinely complex we may take up to another 45 days, and we will tell you before we do.

You can use an authorised agent to make a request on your behalf. We will ask for written proof that you authorised them, and we may still ask you to confirm it directly.

Paddiq is a small independent product and currently falls below the revenue and volume thresholds that make the California Consumer Privacy Act mandatory for a business. We are describing what we will do for you regardless, not claiming a legal status we do not have.

Security

Data is encrypted in transit. Every user-owned table is protected by row-level security so one account cannot read another's data, and file access is scoped per user. No system is perfectly secure, but we do not cut corners on this. If a breach affecting your personal information occurs, we will notify you as California law requires.

Children and teenagers

Paddiq is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us information, email us and we will delete it.

If you are a registered user under 18 and live in California, you may ask us to remove content you posted to Paddiq. Most of it you can delete yourself in the app; for anything you cannot reach, email us and we will remove it. Removal may not be complete or comprehensive in every case — for example, copies may remain in backups for a short period.

Where your data is processed

Paddiq is operated from the United States, and the services listed above process and store data in the United States. If you use Paddiq from outside the US, you are sending your information to the US, where privacy law differs from your own.

Changes

If this policy changes materially we will update the date at the top and, where the change is significant, tell you in the app before the change takes effect. The date at the top is the effective date of the current version.

Contact

Questions, or a privacy request: prabhjeevsohi@gmail.com.