Legal document · GarageRank
This policy explains what data the GarageRank app collects, what it is for and what rights you have over it. GarageRank is a cataloguing and community app for collectors of diecast model cars.
By creating an account and using the app, you agree to what is described here.
We collect only what the app needs to work:
| Data | Purpose |
|---|---|
| Email and password | Create and access your account. The password is managed by Supabase Auth — we never have access to it in plain text. |
| Username and avatar colour | Show your profile to you and to other users (leaderboard, feed). |
| Collection items (name, rarity, scanned barcode) | Build your personal garage inside the app. |
| Photos you upload of your cars | Show them on the item card and, if published, in the community feed. |
| Photo used in "Identify with AI" | Sent to the AI provider (see §4) only at the moment of use, to suggest the car model. |
| Subscription status | Know whether your account is Premium (managed by RevenueCat, see §4). |
| Wishlist and items offered for trade | Show what you are looking for and what you offer, and connect people with matching interests. |
| Who you follow, clubs you belong to and likes | Build your feed and the club pages. |
| Direct messages exchanged with other users | Deliver the conversation to both sides. They are not used for any other purpose. |
| Blocks and reports | Enforce the block and review reported content. A report stores who reported, the target and the reason. |
| Active-day streak, score and badges | Calculate leaderboards and achievements. |
| Device notification identifier (push token) | Send app notifications — a new message, activity on your content. It identifies the device, not you; it disappears when the account is deleted. |
We do not collect payment data directly — that is handled by the app store (Google Play / App Store) and by RevenueCat.
We do not use your data for advertising and we do not sell it to third parties.
We use the following service providers (data processors), each with only what its function requires:
Your data is stored on Supabase servers, protected by Row Level Security — by default each user can only read or change their own collection items. We keep your data for as long as your account exists.
Under Brazil's General Data Protection Law (LGPD), you may at any time:
To exercise any of these rights, contact us at the email in §10.
How to request it: send an email to contato@tessaroapps.com with the subject "Delete my GarageRank account", from the email registered in the app. We confirm the request within 30 days.
What is erased: login account, profile (username, avatar colour), the entire car collection, uploaded photos and likes given/received.
What may be retained: database backups may retain the data for up to a further 30 days after the deletion is confirmed, before being permanently erased. We retain no data beyond that backup window.
Partial deletion: you do not have to delete the whole account to erase specific data — any car, photo or like can be removed directly inside the app, at any time, with no email request needed.
GarageRank is not directed at children under 13 and does not knowingly collect data from children in that age range.
We may update this document as the app changes. The date at the top of the page always reflects the most recent version.
Privacy questions or requests concerning your data: contato@tessaroapps.com