Privacy Policy

App: Mine Garage®
Last updated: Oct 8, 2026

This Privacy Policy explains how Mine Garage® ("Mine Garage®", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you use our mobile application, website, and related services (collectively, the "Service").

Mine Garage® is a vehicle management app that lets users organize vehicle information, maintenance history, fuel logs, reminders, documents, expenses and income, trips, fleet checklists, statistics, subscriptions, troubleshooting discussions, workshop recommendations, shared vehicle access, data import and export, OBD-II diagnostics, an AI assistant, and optional translation or location-assisted features.

1. Controller and Contact

Controller: DANSP LAB DESENVOLVIMENTO E CONSULTORIA DE SOFTWARE LTDA
Product name: Mine Garage®
Email: minegarage@dansplab.com

If you have questions about this Privacy Policy or want to exercise your data protection rights, contact us at minegarage@dansplab.com.

2. Personal Data We Collect

Depending on how you use the Service, we may collect the following categories of data:

  • Account and identity data: name, email address, profile photo, login provider, unique account ID, username, locale, and account timestamps.
  • Authentication data: information received from the sign-in provider you choose, such as Google Sign-In or Sign in with Apple.
  • Vehicle data: vehicle name, plate number, make, model, year, color, odometer, VIN, vehicle specifications decoded from the VIN, condition-of-use settings, vehicle image, and related vehicle records you submit.
  • Maintenance and file data: maintenance titles, notes, dates, parts, services, costs, odometer readings, categories, attachments, photos, receipts, and documents that you upload.
  • Fuel and cost data: fueling date and time, quantity, total price, price per unit, fuel type, gas station brand, optional location text, station search text, place suggestions, geocoded address results, and mileage updates.
  • Expense and income data: purchase, financing, tax, insurance, parking, tolls, and other ownership costs, and income earned with the vehicle, with their amounts, dates, odometer readings, driver, notes, and attachments.
  • Trip data: date and time, distance, start and end odometer, personal or business purpose, the origin and destination you name, notes, the driver on a shared vehicle, whether the trip was recorded live with GPS, and whether the GPS signal was interrupted.
  • Vehicle document data: document type (such as insurance, registration or licensing, road tax, inspection, emissions test, driver's licence, or warranty), title, document number, issue and expiry dates, reminder settings, notes, and attachments.
  • Fleet checklist data: checklist items and answers, odometer, the driver and the user who carried out the check, date, and edit history.
  • Workshop recommendation and review data: workshops you recommend and their location, and the ratings and comments you publish about them.
  • Import data: the spreadsheet or export files you choose to import (CSV, TSV, TXT, or XLSX), the records created from them, and an import history with the file name, date, record count, column headings, how each column was matched, the date pattern found, and whether you corrected the matching.
  • OBD-II diagnostic data: the name and identifier of your OBD-II adapter or the Wi-Fi address you enter, and what the vehicle reports through it: VIN, diagnostic trouble codes, emission-monitor readiness, distance and time since codes were cleared, and live readings such as engine speed, road speed, temperatures, fuel level, and battery voltage.
  • AI assistant data: the questions you ask AI Garage, its answers and the sources it cites, and the vehicle context sent with each question (see section 11).
  • Shared vehicle, invite, and transfer data: invite sender and recipient identifiers, sender name, sender email, invite status, vehicle-sharing relationships, and ownership transfer records.
  • Troubleshooting and community data: posts, replies, likes, vehicle make/model references, translated display output, and related profile-linked activity.
  • Notification data: push-notification preferences, Firebase Cloud Messaging token(s), and locale used to send notifications.
  • Preferences and synced settings data: theme mode, language, currency symbol, distance and volume units, date format, onboarding/tutorial flags, maintenance registration count, first-fuel and review-request timing, and certain settings that may be synchronized to your account profile.
  • Subscription and purchase data: subscription plan status, app store product identifiers, product pricing display, and purchase or restore status information needed to enable premium features. Payment information is handled by Apple or Google, not stored directly by us.
  • Diagnostics, configuration, and security-related data: crash reports, app integrity signals, technical logs, feature-flag or remote-configuration state, and other data used to secure, operate, and troubleshoot the Service.
  • Advertising-related data: limited data used by ad providers, including ad requests, ad responses, ad interactions, and rewarded-ad events when ads are enabled or when you choose to watch an ad to unlock a feature.
  • Analytics and session data: usage events, screen interactions, and similar analytics or session-insight data collected through tools such as Firebase Analytics or Microsoft Clarity, when enabled.
  • Translation and export/share data: text you choose to identify or translate in troubleshooting features, language-model downloads needed for on-device translation, and export/share actions you initiate for reports or files.

3. Data Collected from Optional Permissions

Some features require optional permissions that you can allow or deny:

  • Notifications: if you enable notifications, we may request permission and store a push token to send maintenance, mileage, or community notifications.
  • Photos, camera, and files: if you choose to add vehicle images or maintenance attachments, the app may access your camera, photo library, or files selected by you.
  • Location: if you use the current-location option in fuel logging, the app may access your device location to help fill in a fueling address or search station/address information using Google location services. This feature is optional and is only used when you request it. If you use the nearby-workshops map, the app uses your location to show workshops close to you.
  • Location while recording a trip: if you start recording a trip with GPS, the app uses your location, including while the screen is off or you are in another app, until you stop the recording. A persistent notification shows while this happens. The GPS positions stay on your device and are used only to measure the distance; only the trip details listed above are saved to your account.
  • Bluetooth and local network: used only to find and connect to an OBD-II adapter you choose.
  • Alarms and background activity: used to deliver maintenance and document reminders at the scheduled time, including after the device restarts.

4. How We Collect Data

We collect personal data:

  • directly from you when you create an account or enter information into the app;
  • from authentication providers such as Google or Apple when you sign in;
  • from your device when you enable permissions such as notifications, camera, photos, files, or location, or when you use local device storage and in-app settings;
  • from app stores when required to query products, validate purchases, or restore subscriptions;
  • from service providers that help us host, secure, analyze, support, geocode, monetize, and operate the Service; and
  • from account-synced configuration stored in services such as Firestore when your preferences are synchronized across devices.

5. How We Use Personal Data

We use personal data to:

  • create and manage your account;
  • authenticate you and maintain sign-in sessions;
  • store and display vehicle, maintenance, fuel, statistics, and shared-access data;
  • upload and serve attachments and images;
  • send reminders and push notifications;
  • support shared vehicles, invites, and ownership transfers;
  • operate troubleshooting posts, replies, likes, optional translations, and related notifications;
  • enable, verify, restore, and enforce premium subscription access and feature entitlements;
  • support exports, report generation, and sharing actions that you choose to initiate;
  • remember and synchronize your preferences and app settings;
  • provide optional location-assisted station/address lookup and geocoding in fuel features;
  • record trips, measure their distance, and produce mileage reports;
  • track document expiry dates and send the reminders you set up;
  • read OBD-II diagnostics from the vehicle when you connect an adapter;
  • answer your AI Garage questions and, if you opt in, identify spreadsheet columns during an import;
  • decode a VIN into vehicle specifications, and suggest a maintenance plan and nearby workshops;
  • import records from files you choose and export your account data;
  • show vehicle information on Apple CarPlay, Android Auto, and home-screen widgets when you use them;
  • validate purchases and subscriptions with Apple and Google;
  • measure usage, ad interactions, session behavior, performance, and product reliability;
  • detect, prevent, and investigate abuse, fraud, and technical issues; and
  • comply with legal obligations and respond to lawful requests.

6. Legal Bases for Processing (Brazil / LGPD)

If the Brazilian General Data Protection Law ("LGPD") applies, we may process personal data under one or more of the following legal bases, depending on the context:

  • Performance of a contract or pre-contractual measures: to provide the account, vehicle management, sharing, premium, and related app functionality you request.
  • Consent: for optional permissions and specific processing that depends on your authorization, such as notifications, camera/photo access, file access, and current-location use.
  • Legitimate interests: to secure, maintain, improve, and support the Service, provided your rights and freedoms are respected.
  • Legal or regulatory obligation and regular exercise of rights: when necessary to comply with law, enforce rights, or respond to disputes or lawful requests.

7. Sharing of Personal Data

We do not sell your personal data. We may share data in the following situations:

  • With service providers: such as Firebase/Google services, cloud storage, push notification, crash reporting, analytics, session insights, app integrity, maps/geocoding, translation-related services, generative AI (Google Gemini through Firebase AI Logic), VIN decoding, server functions, advertising, and app store billing services that help us operate the app.
  • With other users: when you share a vehicle, send an invite, transfer a vehicle, or publish troubleshooting/community content or workshop recommendations and reviews that are visible to other users. On a shared vehicle, the users it is shared with can see its records, including trips, checklists, expenses, income, and documents, and the driver names recorded in them.
  • With sharing targets you choose: when you export a report or share a file through your device OS or another app selected by you.
  • With payment platforms: when required for subscription management through Apple App Store or Google Play.
  • For legal reasons: if required by law, court order, governmental request, or to protect rights, security, users, or the Service.
  • In a business transaction: if the Service or business is reorganized, sold, or transferred, subject to applicable law.

8. Public or Shared Content

Please be careful with information you choose to share. Vehicle-sharing features make relevant vehicle data available to invited or authorized users. Troubleshooting posts, replies, and engagement features may be visible to other users of the Service.

Do not post sensitive information, private third-party information, or documents you do not want others to access through shared or community features.

If you export reports or share files, the exported content may become available to the apps, services, recipients, or storage locations you choose. Those third parties handle the shared content under their own terms and privacy practices.

Home-screen widgets, notifications, and the Apple CarPlay or Android Auto display can show vehicle information to anyone who can see your device or the car's screen.

9. Advertising

The app may display ads through Google Mobile Ads when advertising is enabled. We may also offer rewarded ads if you choose to watch a short video to unlock a feature. Ad providers may process device or app-related information in accordance with their own privacy notices and platform rules.

10. Microsoft Clarity

We use Microsoft Clarity, when enabled, to understand how people use and interact with our app, website, and related web pages. Clarity may collect usage and interaction data through first-party and third-party cookies, session replay, heatmaps, behavioral metrics, and similar tracking technologies, including clicks or taps, scrolling, page or screen interactions, device and browser information, and other technical usage signals.

We use this information to improve usability, diagnose technical problems, understand feature performance, support product optimization, help prevent fraud or misuse, and measure the effectiveness of our communications or advertising where applicable. Sensitive data is masked or hidden in Clarity, and we configure Clarity so that we only review usability and interaction behavior. We do not intentionally use Clarity to collect or view passwords, payment card numbers, document contents, private notes, or other sensitive personal content.

Microsoft may process Clarity data according to its own privacy practices. For more information about how Microsoft collects and uses data, visit the Microsoft Privacy Statement.

11. AI Features

AI Garage is an optional premium assistant that answers questions about your vehicles. When you send a question, the app sends it to Google's Gemini models through Firebase AI Logic together with context from the vehicles you can access, which may include vehicle details such as plate number and VIN, your maintenance, fuel, expense, income, and document records, sharing information, and your app preferences. Gemini may use Google Search to ground its answer. Your conversation history is stored on your device, and a monthly usage count is kept to apply the free-plan limit.

The spreadsheet importer can ask AI to identify columns it does not recognize. This is opt-in per account, and only the column headings and up to 5 sample rows, with each value truncated, are sent; the file itself is never sent.

Google processes these requests under the terms that apply to Firebase AI Logic and the Gemini API. Do not include information in your questions that you do not want processed this way. AI answers can be wrong: see our Terms of Use.

12. Trips, OBD-II Diagnostics, and Car Displays

Trip recording, OBD-II diagnostics, Apple CarPlay, and Android Auto are optional. OBD-II readings are processed on your device: the VIN is saved to your vehicle only if you choose to, and the other readings are not stored on our servers. Apple CarPlay and Android Auto show information the app already holds, such as your vehicle and odometer, on the car's display.

13. International Data Transfers

Our service providers may process or store personal data in Brazil or other countries. When international transfers occur, we rely on appropriate safeguards and applicable legal bases under relevant data protection law. Section 20 describes the safeguards used for users in the European Economic Area, the United Kingdom, and Switzerland.

14. Data Storage and Retention

We store personal data for as long as necessary to provide the Service, maintain shared records, comply with legal obligations, resolve disputes, enforce our agreements, and support legitimate business operations.

Retention periods vary depending on the type of data. For example:

  • account and profile data may be kept while your account is active;
  • vehicle, maintenance, fuel, invite, and troubleshooting records may remain until deleted by you, by us according to our policies, or by valid request;
  • device-side preferences may remain on your device until cleared or uninstalled; and
  • certain records may be retained longer where required by law, security needs, backup procedures, or dispute handling.

15. Account Deletion and Data Deletion

You can delete individual records in the app at any time, and delete your account in the app under Profile. You may also request deletion of your account or personal data by emailing minegarage@dansplab.com.

For the steps and for what is deleted or kept, see Delete Your Mine Garage Account.

When you delete your account, your sign-in access is removed immediately and the data stored in your account is permanently deleted 30 days later. During those 30 days it is kept only so that an account deleted by mistake can be recovered on request. Community posts, and records you made on vehicles that belong to other users, remain without any link to you.

We will evaluate and process deletion requests within a reasonable period and may retain certain information where legally permitted or required, including under Article 16 of the LGPD.

16. Your Rights

Depending on your location and applicable law, including the LGPD, you may have rights to the following (users in the European Economic Area, the United Kingdom, and Switzerland should also see section 20):

  • confirm whether we process your personal data;
  • access your personal data;
  • correct incomplete, inaccurate, or outdated data;
  • request anonymization, blocking, or deletion of unnecessary or unlawfully processed data;
  • request portability where applicable;
  • request deletion of data processed based on consent, when applicable;
  • obtain information about data sharing;
  • revoke consent for optional processing, where consent is the legal basis;
  • request review of decisions where required by law; and
  • lodge a complaint with the competent authority, including the ANPD in Brazil.

To exercise these rights, contact minegarage@dansplab.com.

17. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. However, no system is completely secure, and we cannot guarantee absolute security.

18. Children's Privacy

Mine Garage® is not intended for children under 13, and where applicable we do not knowingly collect personal data from children in violation of law. If you believe a child provided personal data improperly, contact us so we can review the situation.

19. Third-Party Services

The Service may use third-party services such as Firebase Authentication, Firestore, Firebase Storage, Firebase Cloud Messaging, Firebase Crashlytics, Firebase Analytics, Firebase Remote Config, Firebase App Check, Firebase AI Logic (Google Gemini, with Google Search grounding), Cloud Functions for Firebase, Google Sign-In and the Google People API (profile photo), Sign in with Apple, Google Maps/Places/Geocoding services, Google ML Kit language identification and on-device translation, Google Mobile Ads, Microsoft Clarity, the NHTSA vPIC service (VIN decoding), CarQuery (vehicle make and model lists), Shorebird (app updates), Apple CarPlay, Android Auto, Apple App Store, Google Play, and device-level sharing or review services. Those third parties may process data according to their own privacy policies and terms.

20. Users in the European Economic Area, the United Kingdom, and Switzerland (GDPR)

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, or the Swiss Federal Act on Data Protection may apply to the processing of your personal data. This section applies to you in addition to the rest of this Privacy Policy and prevails where they differ.

Controller: DANSP LAB DESENVOLVIMENTO E CONSULTORIA DE SOFTWARE LTDA. Email: minegarage@dansplab.com.

Legal bases (Article 6(1) GDPR). We process personal data on the following bases:

  • Performance of a contract (Art. 6(1)(b)): creating and managing your account, signing you in, storing and synchronizing your vehicle, maintenance, fuel, expense, income, trip, document, checklist, and statistics records and attachments, vehicle sharing, invites and ownership transfers, troubleshooting posts, replies, and workshop reviews, the reminders you set up, imports and exports, OBD-II diagnostics, AI Garage answers, Apple CarPlay and Android Auto, and premium subscriptions.
  • Consent (Art. 6(1)(a)): push notifications; camera, photo, file, Bluetooth, and location access, including location while recording a trip; AI-assisted column matching in imports; and, where the law requires consent, analytics, Microsoft Clarity session insights, and personalized advertising. You can withdraw consent at any time in your device settings or by contacting us. Withdrawal does not affect processing carried out before it.
  • Legitimate interests (Art. 6(1)(f)): keeping the Service secure and available, preventing fraud and abuse, crash reporting and diagnostics, moderating community content, and measuring and improving the Service. Our interest is running a reliable and safe app. You may object to this processing at any time.
  • Legal obligation (Art. 6(1)(c)): keeping records and answering requests when the law requires it.

Is providing data required? Account data, such as your email address and sign-in identifier, is needed to create an account and use synchronized features. Everything else is optional: if you do not provide it, only the related feature is unavailable.

International transfers. Your data is processed in Brazil, where we are established, and by our service providers (mainly Google/Firebase and Microsoft) in the United States and other countries. Where the European Commission, or the UK or Swiss authorities, have recognized the destination or the recipient as providing adequate protection, such as under the EU-U.S. Data Privacy Framework for certified providers, we rely on that decision. Otherwise we rely on the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR) that those providers offer. You can ask us for information about these safeguards.

Retention. We keep account and app records while your account exists, and delete them or make them anonymous after you delete your account or ask us to, unless we must keep them longer to meet a legal obligation or to establish, exercise, or defend legal claims. Residual copies in backups, if any, are removed as those backups expire. Diagnostic, analytics, and advertising data follow the retention periods set by the respective providers.

Your rights. You have the right to access your data (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), to object to processing based on legitimate interests (Art. 21), and to withdraw your consent at any time. We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you (Art. 22). To exercise your rights, email minegarage@dansplab.com. We answer within one month, which may be extended by two further months for complex requests, as the GDPR allows.

Complaints. You have the right to lodge a complaint with a supervisory authority, in particular in the EEA member state where you live, work, or where the alleged infringement took place (see the list of EEA authorities). In the United Kingdom, this is the Information Commissioner's Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). We would appreciate the chance to address your concern first.

Children. Where processing is based on consent and you are below the age of digital consent in your country (between 13 and 16 in the EEA), your parent or guardian must give or authorize that consent.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the app, on our website, or by other appropriate means. The "Last updated" date at the top of this page shows when this version became effective.

This Privacy Policy is available in several languages. If the versions differ, the English version prevails, to the extent permitted by law.

22. Contact

If you have questions, requests, or complaints about privacy or data protection, contact:

DANSP LAB DESENVOLVIMENTO E CONSULTORIA DE SOFTWARE LTDA
Email: minegarage@dansplab.com