Overview
This Privacy Policy explains what information the Garage OBD iOS app (the “App”) and the garageobd.com website (the “Website”) process, where that information is stored, when it leaves your device and the choices you have.
In this policy, “we” and “us” refer to the developer of Garage OBD, . Garage OBD is designed local-first: the vehicle data the App reads is processed on your iPhone, and it is shared with others only when you choose to export or share it. Recorded datalogs and diagnostic scans from real vehicles are also synced to your Garage OBD account so you can view them on the web.
Garage OBD is an independent product and is not affiliated with, sponsored by or endorsed by BMW AG.
Summary
- Vehicle data, diagnostic data, datalogs and reports are stored locally on your iPhone.
- To use the App you create a Garage OBD account (name, email, phone number and password). Datalogs from real vehicles, imported logs, real diagnostic scans, the engine software identification, and coding backups and history — including the VIN — are synced to our servers so you can see them at garageobd.com/app. Simulated data is never uploaded.
- You can download everything we hold about your account, or delete your account and all synced data, at any time from the App or from garageobd.com/app.
- The App communicates with your Wi-Fi OBD-II adapter over the local network, or with a Bluetooth OBD-II adapter over Bluetooth. iOS asks for your permission first.
- Exports such as CSV logs and diagnostic reports leave your device only when you share them.
- If you contact support, we receive the information you send us.
- We do not sell your personal information.
Confirm every statement in this summary against the final App source code, its third-party SDKs and its App Store privacy “nutrition label” before launch.
Vehicle data
When the App is connected to your vehicle through an OBD-II adapter, it reads data published by the vehicle’s control modules. Depending on your vehicle and adapter, this can include engine speed, boost pressure, temperatures, throttle position, lambda, fuel pressure, ignition timing, gear, transmission data and similar operating parameters.
Live values are processed on your device to display gauges and readouts. They are retained only if you record a datalog or create a report.
Diagnostic data
When you run a diagnostic scan, the App requests information from the vehicle’s control modules, such as which modules respond, stored and current fault codes, fault status and related descriptive information. Scan results are stored on your device so you can review them later.
When you connect, the App also reads the engine module’s software identification (software and coding versions and part numbers). It is stored in your Garage and synced to your account with the car’s VIN.
If you use the experimental coding feature, the App stores a backup of the coding of the module you change (the values read before the change, with the module, software version and VIN) and a history of what was applied or restored. These are stored on your device and synced to your account so that you can restore a backup from another device.
Vehicle Identification Number (VIN)
The App may read your vehicle’s VIN to identify the vehicle and its configuration, and may include it in saved scans and diagnostic reports. The VIN is also sent with synced datalogs and scans, so that the web dashboard can group them by vehicle (see Your account and cloud sync). In some jurisdictions a VIN can be considered personal information because it can be linked to a registered owner. The VIN is stored locally and is included in an export or report only as shown before you share it.
Confirm whether the App reads the VIN, where it is stored and whether it appears in CSV exports and/or reports.
Datalogs and CSV export
When you record a tuner log, the selected channels are sampled and saved on your device with a timestamp. You can export a log as a CSV file. Creating the CSV happens on your device; the file is only sent somewhere when you choose a destination.
Diagnostic reports
You can create a report from a diagnostic scan. Reports can contain vehicle details (which may include the VIN), the modules scanned, fault codes, descriptions, statuses and the date of the scan. Reports are created and stored on your device.
Local storage
Datalogs, diagnostic results, reports and App settings are stored in the App’s storage on your iPhone. They remain there until you delete them in the App or remove the App.
If you use iCloud Backup or back up your iPhone to a computer, iOS may include the App’s data in those backups. Backups are handled by Apple or by your computer under your own settings, not by us.
Your account and cloud sync
Garage OBD requires an account. When you create one — in the App or at garageobd.com/app — we store your name, email address, phone number (with its country) and a password hash (we never store the password itself). Your email is used to sign in, to send one-time sign-in and password-reset codes, and to contact you about your account.
For each signed-in device or browser we keep a session: the device name you provide or the browser type, App version, creation date, last use and the IP address of the last request. Sessions do not expire on their own; you can see and end them in Account › Active sessions. We also keep short-lived records of sign-in and code attempts (email address hashed, IP address) to protect accounts against abuse.
What is synced. When your iPhone has an internet connection, the App uploads the tuner logs recorded from a real vehicle, the logs you import, and your real diagnostic scans. A synced log contains its CSV data (the recorded channels) and its metadata (name, date, duration, channels, vehicle platform/engine and VIN). A synced scan contains the technical report (modules, fault codes, statuses, descriptions, vehicle platform and VIN) and any automatic translations of the fault descriptions. The engine software identification (module software, bootloader, coding and hardware identifiers, read-only) and, if you use coding, each coding backup (module, software version, the coding bytes read before a change, VIN) and the history of changes are synced as well. Coding backups cannot be edited or deleted from the App once synced; they are removed when you delete your account. The car nickname you set in the App is synced too. Logs and scans from the App’s simulator are never uploaded, and live values that you do not record are never uploaded.
Why. Synced data is used only to show it back to you in the web dashboard (garage, log charts, scans) and to keep your devices in sync. It is not shared with other users, sold or used for advertising.
Download and delete. In Account you can download a ZIP file with your account data, synced logs (CSV + metadata) and scans (JSON). Deleting a log or scan in the App deletes the synced copy. Deleting your account permanently erases your account, sessions, vehicles, logs, scans, software identifications and coding backups and history from our servers; data stored on your iPhone stays there until you delete it.
Review this section, the App Store privacy label (contact info, identifiers, other data — VIN, vehicle data) and the retention period of server logs and backups before launch.
Network and Bluetooth permissions, adapter communication
The App communicates with Wi-Fi OBD-II adapters over your local network. iOS shows a Local Network permission prompt the first time this is needed. This permission is used to find and talk to your adapter; the App cannot connect to a Wi-Fi adapter without it.
Communication between your iPhone and the adapter takes place on the adapter’s local Wi-Fi network. While your iPhone is joined to an adapter’s network, it may not have internet access over Wi-Fi.
To use a Bluetooth OBD-II adapter, iOS asks for Bluetooth permission the first time. It is used only to find and talk to your adapter.
The adapter itself is third-party hardware. Its manufacturer’s own privacy practices, if any, apply to the device.
Confirm whether the App makes any internet requests (for example, to download fault-code descriptions, check for updates or load remote configuration). If so, describe each one here.
Analytics
If you have chosen to share analytics with app developers in your iPhone’s settings (Settings › Privacy & Security › Analytics & Improvements), Apple may provide us with aggregated usage information about the App. Apple’s privacy policy governs that collection.
State whether the App includes any third-party analytics SDK. If it does, name it, describe the data it collects and link to its privacy policy. If it does not, say so only after the final build has been reviewed.
Crash reporting
If you have chosen to share analytics with app developers, Apple may provide us with crash logs and diagnostic information when the App crashes. These reports help us find and fix problems and are provided under Apple’s policies.
State whether the App includes a third-party crash-reporting SDK and, if so, which data it collects.
Third-party services
The following third parties may be involved when you use Garage OBD or the Website:
- Apple — App Store distribution, purchases, optional analytics and crash reports, and iCloud backups.
- Your OBD-II adapter’s manufacturer — the hardware you connect to your vehicle.
- DigitalOcean — hosts the database that stores your account and synced logs and scans.
- Brevo — sends the sign-in and password-reset code emails; it receives your email address, name and the email content.
- Cloudflare — sits in front of garageobd.com (including the App’s sync API) and processes request information such as IP address.
- Website hosting provider — serves the Website and may log technical request information such as IP address, browser type and the pages requested.
- Google Fonts — the Website loads typefaces from Google, which receives your IP address and browser information when fonts are requested.
- jsDelivr — the Website loads a charting library from this content delivery network on the home page.
Name the hosting provider and add any SDK or service used by the App.
Support communications
If you contact us, we receive your email address, the contents of your message and anything you attach, such as logs, reports or screenshots. We use this information only to respond to you and to improve Garage OBD.
Retention
We keep your account and synced data for as long as your account exists. Live vehicle data that you do not record, and files you only export or share, are not kept on our side.
- Account and synced logs/scans: until you delete them or delete your account; deletion from our database is immediate.
- Sign-in codes: valid for 10 minutes and removed within a day; attempt records used for rate limiting are removed within a day.
- On your device: data stays until you delete it in the App or remove the App.
- Support emails: kept only for as long as needed to handle your request and any follow-up.
- Website logs: kept by the hosting provider according to its own retention settings.
Security
Synced data travels over HTTPS. Passwords are stored only as salted hashes, session tokens are stored only as hashes, and access to the database is encrypted (TLS).
Data stored by the App is protected by the security features of iOS, including device encryption when your iPhone is protected with a passcode. No method of storage or transmission is completely secure. Files you export are outside the App’s control — protect them as you would any other file containing information about your vehicle.
Your privacy choices
- Local network and Bluetooth access: you can allow or revoke them at any time in Settings › Privacy & Security › Local Network and Bluetooth.
- Delete data: delete logs, scans and reports in the App, or remove the App to delete all of its local data.
- Your account: edit your name and phone, change your password, end sessions, download your data (ZIP) or delete your account and all synced data in Account, in the App or at garageobd.com/app.
- Analytics: turn developer analytics sharing on or off in Settings › Privacy & Security › Analytics & Improvements.
- Sharing: nothing is exported unless you choose to share it.
Depending on where you live, you may have rights to access, correct, delete or obtain a copy of personal information we hold about you, and to object to or restrict certain processing. To make a request, contact us using the details below. You can download or delete your account data yourself at any time in Account; data that was never synced stays only on your device and you can manage it directly in the App.
Children
Garage OBD is intended for vehicle owners and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy when the App or the Website changes. We will post the updated version on this page with a new effective date and, where required, notify you in the App.
Contact
Questions or requests about privacy:
- Email: [email protected]
- Company:
- Mailing address: