Privacy Policy

Last updated: August 20, 2026 · Effective date: August 20, 2026

Plain-English summary: We collect and use information needed to provide, secure, support, and improve CrankySoftware services, including CrankyGarage. We do not sell your personal information or use it for cross-context behavioral advertising.

This Privacy Policy explains how CrankySoftware LLC ("CrankySoftware," "we," "us," or "our") collects, uses, discloses, retains, and protects information when you use our websites, mobile or desktop applications, APIs, and related services, including CrankyGarage (collectively, the "Services").

1) Who we are

CrankySoftware LLC is a limited liability company based in Seattle, Washington, United States.

• Privacy contact: privacy@crankysoftware.com
• Controller: CrankySoftware LLC generally acts as the controller of personal information collected through the Services.

2) Information we collect

The information we collect depends on the Services and features you use.

2.1 Account and profile information

When you create or use an account, we may process information such as:

• Name or display name
• Email address
• Preferred language and locale
• Account identifiers
• Authentication provider identifiers and claims
• Account preferences and settings

If you sign in through a third-party identity provider such as Google, Microsoft, Apple, or another supported provider, we receive only the information that provider makes available to us based on your account settings and permissions.

2.2 Vehicle information

CrankyGarage allows you to create and maintain records relating to vehicles. This may include:

• Vehicle Identification Numbers (VINs)
• Make, model, year, trim, engine, and vehicle specifications
• Odometer and mileage information
• Tire specifications and tire pressure measurements
• Maintenance and service records
• Parts, expenses, and related costs
• Diagnostic trouble codes
• OBD2 or vehicle telemetry you choose to record
• Notes, tags, ratings, and other vehicle-related information

2.3 Documents, images, and other content

You may choose to upload or create content including:

• Vehicle photographs
• Receipts and service records
• Manuals and PDF documents
• Images and videos
• Notes and other vehicle-related files or user-generated content

You are responsible for ensuring that you have the right to upload any content you submit to the Services.

2.4 Device and application information

We may automatically collect technical information necessary to operate, secure, and improve the Services, including:

• Device type and model
• Operating system and application version
• Browser type, language, and time zone
• IP address and request timestamps
• Application errors and crash information
• Performance and diagnostic telemetry
• Security and authentication events

2.5 Usage information

We may collect information about how the Services are used, such as features accessed, screens or pages viewed, general interaction information, approximate geographic region derived from an IP address, referral information, and service-performance information. We use this information primarily to operate, troubleshoot, secure, and improve the Services.

2.6 Connected devices and peripherals

If you choose to connect supported devices such as OBD2 adapters, TPMS devices, Bluetooth peripherals, or similar equipment, the Services may process data received from those devices. We generally store only information you choose to record or that a feature you enable is designed to save.

2.7 Purchases and subscriptions

When purchases or subscriptions are offered through an application store or payment provider, we may receive transaction information such as:

• Product or subscription purchased
• Subscription status
• Transaction or order identifier
• Renewal or expiration status
• Payment platform

Full payment-card numbers are processed by the applicable payment provider and are not stored by CrankySoftware.

2.8 Support and communications

If you contact us, we may collect your email address, messages, attachments, and related communication records.

3) How we use information

We use personal information to:

• Create, authenticate, and manage accounts
• Provide CrankyGarage and other Services
• Store and synchronize vehicle information
• Process VIN information
• Maintain service, maintenance, tire, odometer, and telemetry histories
• Store documents and media you upload
• Provide search, knowledge-base, and optional AI-assisted features
• Manage subscriptions and entitlements
• Respond to support requests
• Send account, security, and service communications
• Maintain application security
• Detect fraud, automated activity, abuse, and unauthorized access
• Diagnose crashes and technical problems
• Improve reliability, usability, and performance
• Comply with legal obligations
• Protect our rights, users, and Services

Where GDPR, UK GDPR, or similar laws apply, our legal bases may include performance of a contract, legitimate interests, compliance with legal obligations, and consent where consent is required.

4) Cloudflare Turnstile and bot protection

We use Cloudflare Turnstile, provided by Cloudflare, Inc., to help protect forms, authentication flows, account-management functions, and other portions of our Services from automated abuse, bots, fraud, and malicious activity.

When Turnstile is used, Cloudflare may process technical security signals such as:

• IP address
• TLS and browser characteristics
• User-Agent information
• Turnstile sitekey
• The website or application origin associated with the request
• Other technical signals necessary to distinguish legitimate users from automated traffic

These signals are used for security and bot detection. CrankySoftware does not use Turnstile to identify you for advertising or to build an advertising profile.

Cloudflare acts as a processor when processing Turnstile information on our behalf to protect our Services. Cloudflare may separately process certain Turnstile signals as a controller to improve its bot-detection capabilities.

5) Cookies, local storage, and similar technologies

Our websites and applications may use cookies, local storage, secure device storage, SDKs, or similar technologies to:

• Maintain authentication sessions
• Remember preferences
• Protect accounts and forms
• Detect abuse
• Provide application functionality
• Measure performance and reliability

Some security technologies, including Cloudflare Turnstile, may use technologies that are strictly necessary to provide security and bot-detection functionality. Where required by applicable law, we will request consent before using non-essential cookies or similar technologies.

6) Authentication providers

You may be able to authenticate using supported third-party providers such as Microsoft, Google, Apple, or other identity providers. These providers process information according to their own privacy policies.

We use identity information they provide only as necessary to authenticate you, create or link your account, secure the Services, and provide requested functionality.

7) AI and document-processing features

Some CrankyGarage features may use automated systems or third-party processing services to analyze documents, generate summaries, create searchable representations of uploaded material, or answer questions relating to information you provide.

When you invoke these features, relevant portions of your content may be transmitted to service providers necessary to perform the requested operation.

We take reasonable steps to select providers with appropriate privacy and security protections and to limit their processing to providing the requested service.

AI-generated information may be incomplete or inaccurate and should not be treated as professional mechanical, engineering, legal, financial, or safety advice.

We do not use automated decision-making that produces legal or similarly significant effects about you without appropriate safeguards where required by law.

8) How we share information

We disclose information only when reasonably necessary to provide, secure, or operate the Services or where required by law. We do not sell your personal information.

Cloud infrastructure providers

Providers that host our applications, APIs, databases, files, backups, and related infrastructure.

Identity providers

Providers used to authenticate users and manage account identities.

Application stores and payment providers

Apple, Google, or other providers used to process purchases, subscriptions, and entitlements where applicable.

Security providers

Providers such as Cloudflare that help detect bots, abuse, fraud, attacks, or other malicious activity.

Diagnostics and monitoring providers

Services used for crash reporting, application monitoring, telemetry, security logging, and performance diagnostics.

AI and document-processing providers

Providers used when you request document analysis, search, summarization, or other AI-assisted functionality.

Email and communication providers

Providers used to deliver account verification, security, service, or support messages.

Professional advisors and authorities

We may disclose information to lawyers, accountants, auditors, insurers, regulators, courts, law enforcement, or other authorities where reasonably necessary or legally required.

Corporate transactions

Information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, subject to applicable legal requirements.

9) We do not sell personal information

CrankySoftware does not sell personal information. We also do not share personal information for cross-context behavioral advertising as those terms are defined by applicable California privacy law.

10) International data transfers

CrankySoftware is based in the United States and may use service providers located in the United States or other countries. As a result, information may be transferred to and processed in countries whose privacy laws differ from those where you live.

Where required, we use appropriate safeguards for international transfers, which may include contractual protections such as Standard Contractual Clauses.

11) Data retention

We retain information only for as long as reasonably necessary to provide the Services, satisfy legal obligations, resolve disputes, enforce agreements, and protect the Services.

• Account information: while your account remains active and for a limited period following account deletion.
• Vehicle records: until you delete the applicable records or your account.
• Uploaded documents and media: until deleted by you or your account is deleted, subject to temporary backup or processing copies.
• Derived document-processing data: deleted after the underlying information is removed according to our applicable cleanup processes.
• Transaction records: retained as necessary for accounting, tax, fraud prevention, and legal requirements.
• Diagnostic and security logs: normally retained for a limited period unless needed longer for security investigations, legal requirements, or dispute resolution.
• Backups: deleted according to our normal backup rotation and retention schedule.

Information that has been irreversibly anonymized or aggregated may be retained for longer periods because it no longer identifies an individual.

12) Account deletion

You may request deletion of your CrankyGarage account through supported account-management features in the application or by contacting us.

For security, we may require you to verify an account-deletion request before processing it.

Deleting your account generally results in deletion or anonymization of personal information associated with the account, subject to:

• Legal retention requirements
• Fraud and security records
• Financial and transaction records
• Backup retention periods
• Information necessary to establish, exercise, or defend legal claims

Deletion cannot always be reversed once completed.

13) Security

We use reasonable administrative, organizational, and technical safeguards appropriate to the information we process. Measures may include:

• Encryption of information in transit
• Encryption of hosted data where appropriate
• Authentication and authorization controls
• Least-privilege access
• Security logging
• Credential and secret management
• Dependency and vulnerability management
• Monitoring and incident-response procedures

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

14) Your privacy rights

Depending on where you live, you may have rights concerning your personal information, including rights to:

• Access information we hold about you
• Correct inaccurate information
• Request deletion
• Obtain a portable copy of certain information
• Restrict certain processing
• Object to certain processing
• Withdraw consent where processing relies on consent
• Appeal certain privacy decisions where applicable

You can exercise available rights using supported in-app functionality or by contacting privacy@crankysoftware.com. We may need to verify your identity before processing certain requests.

We will not discriminate against you for exercising applicable privacy rights.

15) California privacy notice

If California privacy law applies to our processing of your personal information, California residents may have rights that include access, correction, deletion, and information regarding categories of personal information collected and disclosed.

CrankySoftware does not sell personal information or share personal information for cross-context behavioral advertising.

An authorized agent may submit a request where permitted by law, subject to appropriate authorization and verification requirements.

16) EEA, United Kingdom, and Switzerland

Where applicable European privacy law applies:

• CrankySoftware LLC generally acts as controller for personal information collected through the Services.
• Our lawful bases for processing may include contract, legitimate interests, legal obligations, and consent.
• You may have rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent.
• You may lodge a complaint with your applicable data-protection supervisory authority.

We encourage you to contact us first so that we can attempt to address your concern.

17) Other jurisdictions

Residents of jurisdictions including Canada, Brazil, Australia, and other regions may have additional rights under local privacy laws. We will honor applicable privacy rights where required by law.

18) Children's privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. Higher minimum ages may apply in some jurisdictions.

If you believe a child has provided personal information to us contrary to applicable law, contact us so that we can investigate and, where appropriate, delete it.

19) Device permissions

Depending on the features you use, CrankyGarage may request device permissions including:

Camera, photos, and files

Used to capture, select, upload, save, or manage vehicle-related photos and documents.

Bluetooth

Used when you choose to communicate with supported OBD2, TPMS, or other Bluetooth peripherals.

Location

Certain optional features may use location when expressly enabled.

Notifications

Used to provide reminders, status messages, or other notifications you enable.

You can manage permissions through your operating system. Disabling a permission may prevent the associated feature from working.

20) VIN processing

When you submit a VIN, we may send it to a vehicle-data provider or service necessary to decode or obtain information about the vehicle. Decoded information may then become part of your CrankyGarage vehicle record.

Do not submit a VIN unless you are authorized to create or maintain the associated vehicle record.

21) Third-party services

Our Services currently use or may integrate with categories of third-party services including:

• Microsoft Azure for cloud hosting and infrastructure
• Microsoft identity services for authentication
• Google authentication services where Google sign-in is enabled
• Apple authentication services where Sign in with Apple is enabled
• Apple App Store and Google Play services where applicable
• Cloudflare Turnstile for bot detection and abuse prevention
• Application-monitoring and diagnostic providers
• Email-delivery providers
• AI or document-processing providers when you invoke applicable features

Third-party services have their own privacy practices. This Privacy Policy applies to CrankySoftware's processing of information and does not replace third-party privacy policies.

22) Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technology, business practices, or legal obligations.

When we make changes, we will update the "Last updated" date. If a change materially affects your rights or how we process personal information, we may provide additional notice through the Services, by email, or through another appropriate method.

23) Contact us

Questions or requests concerning privacy may be sent to:

CrankySoftware LLC
Seattle, Washington, USA
privacy@crankysoftware.com