Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

1.2 Profile Information

You may optionally provide:

• Display Name — A name or alias visible within your account.
• Avatar — A profile image URL.

1.3 Collection Data

When you use the App's collecting features, we store:

• Inventory Records — SKU identifiers, quantities, and timestamps for vehicles you add to your collection.
• Transaction History — Records of additions, removals, and quantity changes to your collection, including transaction type, quantity, date, and optional notes.
• Hunt List — SKU identifiers of vehicles you are actively seeking.

1.4 Scan Data

When you use the camera scanner feature:

• Scan History — The recognized text string, associated SKU, case label, and timestamp are stored in your account.
• Camera Images — Images captured by the scanner are processed entirely on your device using Google ML Kit's on-device text recognition. Raw camera images are never uploaded to our servers.

1.5 Device & Notification Data

To deliver push notifications, we collect:

• FCM Device Token — A unique Firebase Cloud Messaging token assigned to your device.
• Device Platform — Whether you are using Android or iOS.
• Last Seen Timestamp — When your device last communicated with our notification service.
• Notification Preferences — Your choices for Radar alerts, rare casting alerts, and portfolio milestone alerts, including portfolio value thresholds.

1.6 Market Alert Preferences

If you set up price alerts, we store:

• Target SKU, target price threshold, change percentage threshold, and active/inactive status.

1.7 Support Requests

Messages you submit through the in-app support feature, including your user ID, message content, and submission timestamp.

1.8 Automatically Collected Information

We may automatically collect:

• App usage analytics — Crash reports and performance diagnostics via Firebase.
• Connectivity status — Whether your device is online or offline (used to manage data sync).

2. How We Use Your Information

We use your information for the following purposes:

3. How We Share Your Information

We share data only in the following limited circumstances:

3.1 Third-Party Service Providers

We use the following services to operate the App:

3.2 Aggregated & Anonymized Data

We may share aggregated, de-identified data (e.g., community scan trends powering the Radar feature) that cannot reasonably be used to identify you.

3.3 Legal Requirements

We may disclose your information if required by law, legal process, or governmental request, or to protect the rights, safety, or property of WheelieDex, our users, or the public.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Storage & Security

4.1 Where Your Data Is Stored

Your data is stored on cloud servers managed by Supabase and synchronized to your device via PowerSync. Data at rest is encrypted in accordance with Supabase's security practices.

4.2 Offline-First Architecture

WheelieDex is designed as an offline-first application. A complete copy of your collection data and the vehicle catalog is stored locally on your device in an encrypted SQLite database. This local data enables full functionality without an internet connection and syncs automatically when connectivity is restored.

4.3 Security Measures

We implement industry-standard security practices, including:

• Encrypted data transmission (HTTPS/TLS).
• Row-Level Security (RLS) policies on our database to ensure users can only access their own data.
• Hashed and salted password storage (handled by Supabase Auth).
• Secure token-based authentication with OAuth 2.0 flows.
• Nonce-based verification for Apple Sign-In to prevent replay attacks.

While we take reasonable measures to protect your data, no system is 100% secure. We cannot guarantee absolute security.

5. Camera & On-Device Processing

The App requests camera access solely to scan diecast vehicle packaging using OCR (Optical Character Recognition). Important details:

• On-device processing only. Text recognition is performed locally using Google ML Kit. No camera images or video frames are transmitted to our servers or any third party.
• No photo storage. The App does not save or store camera images to your device's photo library unless you explicitly use a photo-capture feature.
• You control access. Camera access can be revoked at any time through your device's system settings. The scanner feature will be unavailable without camera permission.

6. Push Notifications

6.1 How Notifications Work

Push notifications are delivered via Firebase Cloud Messaging (FCM). When you grant notification permission, your device generates a unique FCM token that we store on our servers to deliver messages to your device.

6.2 Notification Categories

You can independently control the following notification types in the App's settings:

• Radar Alerts — Community sighting activity for vehicles on your hunt list.
• Rare Casting Alerts — Notifications when rare or high-demand castings are detected in community scan data.
• Portfolio Milestone Alerts — Notifications when your collection's estimated market value changes significantly.

6.3 Opting Out

You can disable any or all notification categories within the App, or revoke notification permissions entirely through your device's system settings. Disabling notifications does not affect other App functionality.

7. In-App Purchases & Subscriptions

7.1 Payment Data

All payment transactions are processed by Apple (App Store) or Google (Play Store). We do not collect, store, or have access to your payment card details, bank account information, or billing address.

7.2 RevenueCat

We use RevenueCat to manage subscription entitlements. RevenueCat receives an anonymous app user identifier and your purchase/entitlement status from the app stores. RevenueCat's privacy practices are governed by their privacy policy, available at revenuecat.com/privacy.

8. Market Data & Third-Party Content

8.1 Market Pricing Data

The App displays aggregated market pricing data sourced from publicly available eBay sold listings and Amazon product listings. This data is processed and stored on our servers — it is not collected from you.

8.2 No Financial Advice

Market valuations, portfolio analytics, investment scores, and price trends are provided for informational and entertainment purposes only. They do not constitute financial, investment, or trading advice. We do not guarantee the accuracy of any market data.

9. Your Rights & Choices

9.1 Access Your Data

You can view your collection data, profile information, scan history, and notification preferences at any time within the App.

9.2 Update Your Data

You can update your display name, avatar, notification preferences, and collection data directly within the App. You can update your password through the App's password reset flow.

9.3 Delete Your Account

You may request complete account deletion by contacting us at support@wheeliedex.com. Upon deletion:

• Your account and all associated data (profile, collection, transactions, scan history, hunt list, device tokens, notification preferences, market alerts, and support tickets) will be permanently removed from our servers.
• Your local device data will remain until you uninstall the App.
• Any active subscriptions must be cancelled separately through the App Store or Play Store.

9.4 Data Portability

You may request an export of your collection data in a machine-readable format by contacting us at support@wheeliedex.com.

9.5 California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information. We do not sell personal information.
• Not be discriminated against for exercising your rights.

9.6 European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. To exercise these rights, contact us at support@wheeliedex.com.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide you with the App's services. Specifically:

After account deletion, we may retain anonymized, aggregated data that cannot be used to identify you.

11. Children's Privacy

WheelieDex is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@wheeliedex.com, and we will promptly delete such information.

12. Cookies & Tracking

The WheelieDex mobile app does not use browser cookies. We do not use advertising trackers or third-party ad networks. Firebase may collect device identifiers for crash reporting and performance monitoring in accordance with Google's privacy practices.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and may notify you through the App or via push notification. Your continued use of the App after changes are posted constitutes acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at: