Garage — Privacy Notice
Effective: [date]
1. Who is responsible. [Operator], [registered address, Kuwait], runs Garage (app.digithope.com). Questions about your data: [contact e-mail].
2. What we collect and why.
| What | When | Why |
|---|---|---|
| E-mail, password (hashed), name (optional) | Sign-up | Your account and sign-in |
| Your language choice | A cookie | Show the app in Arabic or English |
| Phone number | If you share it for a booking | So the garage can reach you about that booking only |
| Car make, model, year, plate | Saved cars, bookings | So the garage knows the car; the plate is shown to the garage you booked |
| Bookings, work-order updates, invoices, messages with the garage | While you use the Service | The repair itself and your history |
| Reviews and replies | If you write one | Shown publicly on the garage's page with your first name |
| Your approximate location | Only when you tap "near me" and your phone asks you | Sort garages by distance. It is used for that page and not stored |
| Garage photos, addresses, prices, opening hours, team members | Garage accounts | The public listing |
| Parts, orders, stock | Garage and supplier accounts | Parts ordering between businesses |
| Technical logs (page, time, error code) | Automatically | Keep the Service working. No message text is logged |
We do not collect payment card details. We do not use advertising trackers.
3. Who sees what.
- A garage sees the bookings made with it: your name, phone if you shared it, your car, and the messages on that booking. It does not see your other bookings.
- A supplier sees orders from garages, not customer data.
- Other customers see reviews (first name and text) and nothing else about you.
- We (the operator) can access data to run and support the Service.
4. Services we rely on. Your data is stored with Supabase (database, sign-in and photo storage; servers outside Kuwait) and the app is served by Vercel with Cloudflare in front. Maps come from OpenStreetMap tiles: when you open the map, your browser requests map images from OpenStreetMap, which sees your IP address. [If kept: Cloudflare Web Analytics counts page views without cookies; it sees your IP address and browser type.] "Directions" and "WhatsApp" buttons open Google Maps or WhatsApp on your phone; from that moment their privacy terms apply. We do not sell data and do not share it with anyone else.
5. Data outside Kuwait. Because the providers above host outside Kuwait, your data is stored and processed abroad under their security terms. We choose providers that encrypt data in transit and at rest.
6. How long we keep it.
- Your account and saved cars: until you delete the account.
- Bookings, work orders and invoices: [owner/lawyer: X years] after the job, because the garage's invoices are business records under Kuwaiti law, even if you delete your account (your name on them is kept; your login is removed).
- Reviews: while the garage is listed, unless you delete them.
- Technical logs: [owner: N days, matches Vercel log retention].
- Backups: [owner: retention of rec's daily backup].
7. Your rights. You can see and change your name, e-mail, cars and phone in "My account", delete saved cars, delete a review, and delete your account. You can ask us at [contact e-mail] for a copy of your data, to correct it, or to delete what we are not required to keep. We answer within 30 days.
8. Cookies. We use only the cookies needed to keep you signed in and to remember your language. No advertising or cross-site tracking cookies.
9. Children. The Service is for adults. We do not knowingly keep an account for anyone under 18 without a guardian.
10. Security. Sign-in is by e-mail and password, connections are encrypted (HTTPS), and access rules are enforced in the database so a garage can only read its own bookings. If a breach affects your data we will tell you and the authorities as the law requires.
11. Changes. We will show a notice in the app before material changes take effect.