Privacy Policy

Last updated: May 2026 · Effective immediately

1. What We Collect

2. What We Don't Collect

• We do not track which news articles you read.
• We do not track your precise GPS location. Meetup location search uses your device GPS locally to sort results — coordinates are never sent to our servers.
• We do not collect payment information. Subscriptions are handled entirely by Google Play / App Store.
• We do not sell, rent, or share your data with advertisers.
• We do not serve ads in TorQ-Haus.
• Crash reports contain only stack traces — no emails, names, or build data.

3. How We Use Your Data

• Profile & community — your username, display name, and photo are shown on your profile, in the feed, Q&A, and marketplace to other authenticated users.
• Push notifications — your FCM token is stored in a private, owner-only subcollection and used only to send you notifications you've opted into. It is never readable by other users.
• Build data — your cars, mods, and maintenance records are private by default. You choose what to share to the community feed.
• Leaderboards — only users with public profiles and usernames appear on leaderboards.
• Marketplace — your username and active car info are shown on listings you create. Contact details you provide (phone, email, Instagram) are shown to interested buyers. We don't store or intermediate these.

4. Profile Photos

Photos you upload are stored in Firebase Storage at a path only accessible to you and the app. Your photo URL is stored in your Firestore profile and displayed to other authenticated users. You can remove your photo at any time from Profile → tap your avatar. When you delete your account, your photo is permanently deleted.

5. Firebase & Google Services

TorQ-Haus is built on Google Firebase. Firebase processes data in accordance with Google's privacy policies. We use:

• Firebase Auth — authentication
• Firebase Firestore — database
• Firebase Storage — photos and files
• Firebase Cloud Messaging — push notifications
• Firebase Crashlytics — anonymous crash reporting
• Firebase App Check + Google Play Integrity — security attestation

Google's privacy policy: policies.google.com/privacy

6. AI Run Verification (Anthropic API)

When you use the AI verification scan feature to scan a Dragy screenshot or drag strip time slip, your image is sent to the Anthropic API for processing:

• The image is transmitted securely over HTTPS to Anthropic's API.
• Anthropic processes the image to extract performance data and does not store or train on your image.
• The extracted data (split times, trap speed, conditions, date) is stored in your run record in Firebase Firestore.
• The original verification photo is stored in Firebase Storage at users/{uid}/runs/{runId}/verification.jpg — accessible only to you.
• You can delete the verification photo by deleting the run.

Anthropic's privacy policy: anthropic.com/privacy

7. Performance Verification Photos

Verification photos (Dragy screenshots and time slips) you attach to runs are stored in Firebase Storage. They are visible only to you within the app — they are not shared publicly or shown to other users unless you explicitly share them. When you delete a run, the associated verification photo is permanently deleted.

8. Reports

When you submit a report on a post, Q&A question, answer, or listing, we collect: your user ID, the reported content ID, the reported user ID, report type, and timestamp. This data is stored in Firebase Firestore and is readable only by TorQ-Haus administrators. It is used solely for moderation purposes and is never shared publicly.

9. RevenueCat

Subscription management is handled by RevenueCat. RevenueCat receives your app user ID and subscription status. They do not receive your email or personal details. RevenueCat's privacy policy: revenuecat.com/privacy

10. News Aggregation

The news feed fetches publicly available RSS feeds from automotive media outlets every 6 hours. We do not track which articles you view. Article content is sourced from third-party publishers — TorQ-Haus does not own or store full article text, only headlines, summaries, and links.

11. Data Retention

• Your account data is kept as long as your account is active.
• When you delete your account, all your data is permanently deleted — cars, mods, maintenance, receipts, photos, verification photos, Q&A posts, marketplace listings, and activity feed posts.
• Crash reports are retained by Crashlytics per Google's standard retention policy (90 days).
• News articles older than 30 days are automatically removed from our database.
• Report records are retained for moderation purposes for up to 12 months.

12. Your Rights

• Access — your build data is visible in the app at all times.
• Delete — delete your account from Profile → scroll to bottom → Delete account. All data is permanently removed.
• Export — coming in a future update.
• Notification control — manage all notification preferences from Profile → Notification settings.
• Profile visibility — make your profile private from Profile → Edit build profile.

13. Children's Privacy

TorQ-Haus is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, contact us at hello@torqhaus.app.

14. Security

• All data is transmitted over HTTPS.
• Firebase Security Rules restrict access — users can only read/write their own data.
• FCM tokens are stored in a private subcollection readable only by the account owner.
• App Check verifies all requests come from the authentic TorQ-Haus app.
• No passwords are stored — authentication is via Google Sign-In.

15. Changes to This Policy

We may update this privacy policy. We'll notify you of significant changes via the app. The "last updated" date at the top always reflects the most recent version.

16. Contact

Privacy questions or data requests: hello@torqhaus.app

© 2026 TorQ-Haus · Terms · Privacy