Privacy Policy

01

Who is responsible

William John M Clarke is the current App Store seller and data controller for GarageOS. References to “GarageOS”, “we”, “us” or “our” in this policy mean William John M Clarke in relation to the GarageOS iOS app, its widgets and Live Activities, its connected organiser service and the GarageOS pages on this website.

Privacy questions and requests can be sent to willclarke@timeclarke.co.uk.

02

Information we handle

Information kept on your device

GarageOS is local-first. Depending on the features you use, it may store a local driver-login name and email, local sign-in verification data, vehicle profiles and notes, route and checklist progress, selected events, editable event contacts, feedback, route reports, trip memories, debriefs, photo references, fuel records, and locally created communication or convoy-location entries.

This information normally remains in app storage on your iPhone and is not automatically uploaded to us. If you choose Export Local Data, iOS shows a share sheet and you decide where the export is sent.

Server-backed organiser accounts

The organiser account is separate from the local driver login. If you create or use one, the GarageOS service processes the organiser and owner display names, contact email, salted password-verification data, account and session identifiers, and the events, access codes and participant details you deliberately manage through the organiser workspace. Your plain-text password is not stored.

Optional connected event features

When a build is configured to use the GarageOS event service, the app may send an event identifier and access code to unlock a protected event. If you use preset event communications, the service may receive the selected message, event, sender display name, intended recipient and time. Organisers may also provide private route, document and contact information through that service.

Location

Precise location is requested only after you choose Start Live Sharing in Live Convoy Map and confirm the consent notice. While that map remains open, GarageOS may process updated coordinates, accuracy, event, display name, role, location type, optional note and time so authorised participants can see the live position. Leaving the map or choosing Stop Live Sharing ends the session and requests immediate removal; inactive positions also expire automatically. GarageOS does not enable background location tracking.

GarageOS Pro

Apple processes purchases, renewals, billing and refunds. GarageOS receives Apple-verified information needed to determine entitlement, such as the product, transaction state and expiry. We do not receive or store your payment-card details, Apple Account password or StoreKit access tokens.

Widgets and Live Activities

The main app may share a minimal status snapshot with its extension through the GarageOS App Group. This can include a vehicle registration, make and model, non-sensitive workshop status, relevant service or booking dates, expected completion, last update and Pro validity. Access tokens, customer names, addresses, telephone numbers and payment information are excluded.

Website delivery

Our hosting provider may process basic request information such as an IP address, browser details and security logs to deliver and protect these pages. We do not add advertising trackers or third-party analytics to the GarageOS app or these legal pages.

03

Why we use information

• Provide the app, local driver login, organiser account and features you request.
• Deliver organiser email verification, password-reset and other account-security messages when transactional email is configured.
• Unlock and operate protected organiser events.
• Show a location update when you expressly choose to share it.
• Verify GarageOS Pro access and restore purchases.
• Protect the service, investigate faults and respond to support.
• Meet legal, accounting and consumer-protection obligations.

Under applicable data-protection and privacy law, including UK GDPR and EU/EEA law where it applies, these uses rely as appropriate on performing our agreement with you, your consent for optional precise location sharing, our legitimate interests in operating and securing GarageOS, and compliance with legal obligations. You can stop a location-sharing session at any time.

04

Sharing and external services

We do not sell your personal information.

• Apple: App Store distribution, StoreKit purchases, subscription management, Apple Maps handoff and iOS system features.
• Event organisers and authorised participants: only where needed for a protected event, preset communication or an opt-in convoy-location update.
• Hosting and service providers: where necessary to host protected event services and these web pages, subject to appropriate contractual and security controls.
• Transactional email: when account-security email is enabled, the configured delivery provider may process an organiser email address and message content to deliver verification and password-reset messages. The current integration is designed for Resend and requires production configuration before live use.
• Services you open: Google Maps, Messages, WhatsApp, phone, social or dealer links only after you choose the relevant action. Their own privacy terms then apply.
• Legal and safety: where disclosure is required by law or reasonably necessary to protect people, rights or systems.

Some providers may process information outside the United Kingdom. Where we choose a processor, we use the protections required by applicable data-protection law. Services you open independently are governed by that provider’s arrangements.

05

Retention and security

Local information remains on your device until you remove it through an available app control or uninstall GarageOS. Reset Local Account removes the saved local login but intentionally leaves route, vehicle and trip records in place. A non-personal marker recording whether the device has used its one-time free trip may remain so that deleting a trip, resetting the local login or reinstalling the app does not create another free allowance. Apple retains purchase records under its own policies.

Connected organiser and event information is kept only for as long as reasonably needed to run the account or event, provide support, protect the service and meet legal obligations. An organiser can use the in-app delete-account control to delete the organiser account and its service data. Limited security, legal or transaction records may be retained where the law requires or permits it.

We use proportionate technical and organisational measures to protect information. No storage or transmission system can be guaranteed completely secure, so never send passwords, payment-card details or event access codes in a support email.

06

Your choices and rights

• Decline or revoke location access in iOS Settings.
• Stop sharing location and avoid optional connected features.
• Export local data using the in-app share action where available.
• Reset the local driver login or uninstall the app to remove most device data; the non-personal free-trip marker may remain as explained above.
• Delete a server-backed organiser account using the in-app organiser account control.
• Use organiser email verification and password reset when production transactional-email delivery is configured; contact GarageOS Support while it is unavailable.
• Manage or cancel GarageOS Pro through your Apple Account.
• Ask for access, correction, deletion, restriction, portability or objection where applicable data-protection or privacy law provides those rights, including EU/EEA rights where applicable.
• Withdraw consent without affecting earlier lawful processing.

We may need enough information to verify a request. Mandatory privacy rights under the law where you live remain unaffected. You can also complain to the UK Information Commissioner’s Office or, where applicable, the supervisory authority available where you live, although we would appreciate the opportunity to address your concern first.

07

Children

GarageOS is designed for vehicle owners, drivers, passengers and organised-event participants. It is not designed to collect children’s information. A parent or guardian who believes a child has provided information through a connected event should contact us so we can investigate and take appropriate action.

08

Changes to this policy

We may update this policy when GarageOS, its connected services or applicable law changes. The date at the top identifies the current version. Material changes will be presented through an appropriate app or website notice where reasonably possible.

09

Contact us

Email willclarke@timeclarke.co.uk with the subject “GarageOS privacy request”. Please do not include a password, full event access code or payment information.