Privacy Policy
Dipstick is a personal car-maintenance log. You keep service records, invoices and schedules for your cars, and you can share a car with the people you choose. It is run by an individual developer, not a company. This policy explains what information the app handles and how.
Information we collect
- Account information. Your email address. If you sign in with Google, we also receive your name, email address and profile picture from your Google account. We don't receive your Google password or anything else in your Google account.
- Information you enter. Vehicle details (such as year, make, model and VIN), service records, mileage readings, costs, notes and settings.
- Files you upload. Invoices, repair orders, inspection reports and photos you add to a car.
- Sharing information. The email addresses of people you invite to a car, and their roles.
- Usage counts. How many documents you've had read automatically each month, so we can apply the monthly limit.
- Technical data. Your browser stores your sign-in session and a few display preferences. Our hosting providers keep standard server logs (such as IP address and request time) for security and reliability.
How we use it
Only to run the app: to sign you in, store and show your records, let the people you share a car with see it, and read documents when you ask. We do not sell your information, show ads, or use your information for marketing.
Who can see your information
- You, and the people you share a car with. Owners can see and change everything, editors can add and change records and files, and viewers can only read.
- The operator may access the database to keep the service running, fix problems, or respond to your requests.
- Service providers that run parts of the app, listed below. They handle your information on our behalf.
- We may disclose information if required by law.
Service providers
- Supabase stores the database and uploaded files and handles sign-in. Servers are in the United States.
- Cloudflare hosts the website.
- Google provides "Sign in with Google" if you choose it.
- Document reading. When you use Fill from this or Import, the document's text or images are sent to an AI service to pull out the service details. This is currently Google Gemini and may be Anthropic Claude. While the app uses Gemini's free tier, Google may use the content sent to it to improve its products. If you don't want that for a document, enter its details by hand instead. Documents are sent only when you ask for them to be read.
Google user data
If you choose "Continue with Google", Dipstick asks Google only for the basic sign-in permissions (openid, email and profile). It does not ask for access to your Gmail, Drive, Calendar, contacts or any other Google data.
- What we receive: your name, email address and profile picture.
- How we use it: to create and sign in to your account, and to show your name or email to the people you share a car with. Nothing else.
- How we store it: in your account record at Supabase, our sign-in and database provider, encrypted in transit.
- Who we share it with: no one, except the people you share a car with (who see your name or email) and the service providers above that run the app. It is never sold, used for ads, or sent to the AI document-reading service.
- Keeping and deleting it: it's kept while you have an account and deleted when you ask us to delete your account. You can also remove Dipstick's access at any time from your Google Account's Third-party apps & services page.
Dipstick's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Keeping and deleting your information
- Your information is kept until you delete it.
- Deleting a car removes its records and files for everyone it was shared with. Leaving a shared car removes your access.
- To delete your account and everything you own, email the address below. We'll do it within 30 days.
- Server logs and backups kept by our providers are deleted on their normal schedules.
Security
Information is encrypted in transit (HTTPS). Access rules in the database make sure each person sees only the cars they belong to, and uploaded files are private and served through short-lived links. No system is perfectly secure, so please don't upload anything you'd be harmed by losing.
Children
Dipstick isn't directed to children under 13, and we don't knowingly collect their information.
Changes
If this policy changes, we'll update it here and change the effective date above.
Contact
Questions or deletion requests: help@dipstick.fyi