Privacy Policy

DriveBunch is run by Diogo Soares, in Portugal. For anything in this policy, write to support@drivebunch.com.

Your email address — to create your account, to send you a sign-in code and to let you reset your password. It is the only thing we require.

Your name, city and country — all optional, all editable, all skippable. We ask so the app can greet you and so a future social feature has something to show.

Your profile photo — optional. Stored privately; the app generates a temporary link each time it shows it to you.

Your garage — the cars you log, the rating you give each one, the date, any note you write, and any photos you attach. This is the point of the app.

Requests for missing cars — if you log a car we do not have, the text you typed is kept so the car can be added.

Your time zone — read from your device, not your location, so any time-based feature (like a notification) can reach you at a reasonable hour instead of ours.

Your push notification token — only if you turn notifications on. An opaque code Apple issues for your device so we can address a notification to it; it tells us nothing else about you. We use it for exactly two things — telling you when a car you logged has been identified, and when we need your help picking the right one — and delete it the moment you sign out or Apple tells us it no longer works.

Technical records — our hosting and database providers keep short-lived server logs that include IP addresses, which is ordinary for any website and is how abuse and outages get diagnosed.

No analytics. No advertising. No tracking pixels, no third-party scripts, no advertising identifiers, no profiling.

No cookies. Not one. Staying signed in is handled by storage inside your own browser, not by a cookie sent to us.

No location. We never ask for it. Photos you upload are re-encoded in your browser before they are sent, which strips the embedded camera data — including GPS coordinates. The copy we receive has none.

No use of your push token beyond that. It is never used for tracking, advertising or analytics, and nothing correlates it across apps.

We do not sell, rent or share your data with anyone for their own purposes, and we never will.

Your account, your garage and your photos are processed to provide the service you asked for — the legal basis is performance of a contract.

Server logs and abuse prevention rest on our legitimate interest in keeping the service working and not being attacked.

A few suppliers process data on our behalf, and none of them may use it for anything else:

Supabase — the database, sign-in and file storage. Your data is held in the European Union.

Vercel — hosting for the website itself.

Resend — sends the sign-in and password emails. It handles your email address and nothing else.

And if you email us — to ask a question or to have your account deleted — that message is handled by our email provider, Microsoft, and kept only as long as it takes to deal with what you wrote.

For as long as your account exists. When you delete your account, everything goes at once — profile, garage, notes, photos, avatar — with no backup copy kept and nothing recoverable afterwards.

Guest accounts that were never given an email and have no cars are cleared out periodically.

Under the GDPR you can ask for a copy of your data, correct it, delete it, take it elsewhere, restrict what we do with it, or object to processing based on legitimate interest. Most of it you can do yourself in the app; for the rest, email us and we will answer within one month.

If you think we have handled your data badly you can complain to the Portuguese supervisory authority, the CNPD, or to the authority where you live.

Open your profile in the app and tap Delete account. It happens immediately and cannot be undone. Full instructions are on the delete account page.

DriveBunch is not intended for children under 16, and we do not knowingly collect anything from them. If you believe a child has created an account, tell us and we will remove it.

If this policy changes in a way that matters, we will say so in the app before the change takes effect. The date at the top always reflects the current version.