This Privacy Policy explains what information Dhruvo Garage collects, how we use it, and how we protect it. By using Dhruvo Garage, you agree to the practices described in this policy. If you do not agree, do not use Dhruvo Garage.
We do not sell, rent, trade, or otherwise share your personal information with third parties for marketing, advertising, or commercial purposes. Period.
Account Information: When you create an account, we collect your name and email address. We do not store your password — authentication is handled by Firebase Authentication, which manages secure credential hashing and session tokens on Google's infrastructure.
Vehicle Data: Information you enter about your vehicles, including make, model, year, mileage, purchase date, service records, service costs, incidents, modifications, and related notes. You may optionally provide a Vehicle Identification Number (VIN) to enable enhanced vehicle lookup and recall tracking. All vehicle data is stored in your personal account and is not shared with third parties.
Service Provider Data: You may optionally save shop and mechanic information including business name, address, phone number, and notes. This data is stored in your account for your personal reference only and is not shared with, verified by, or transmitted to those providers.
Uploaded Images: You may optionally upload photos of vehicles, service records, receipts, or related documents. These images are stored securely in Firebase Storage under your account and are not reviewed, analyzed, or shared by us.
Derived Data: Dhruvo Garage calculates a Garage Score based on the vehicle and service data you provide. This score is computed for display purposes within your account only and is not shared or transmitted externally.
Technical and Infrastructure Data: As part of standard web infrastructure, our hosting provider (Netlify) and authentication provider (Firebase/Google) automatically collect technical data including IP addresses, browser type, device information, and access timestamps. This data is collected by those third-party providers subject to their own privacy policies. We do not directly access or control this data.
We use the information you provide solely to operate Dhruvo Garage — to store your vehicle records, display your service history, power recall lookups, and personalize your experience. Specifically, we use your information to:
We do not use your data for targeted advertising, behavioral profiling, or any purpose unrelated to providing Dhruvo Garage to you.
Dhruvo Garage is intended for use within the United States. By using Dhruvo Garage, you represent that your use complies with all applicable U.S. federal and state laws. We do not currently direct our services toward users outside the United States and make no representation that Dhruvo Garage is appropriate or legally compliant for use in other jurisdictions. If you access Dhruvo Garage from outside the United States, you do so at your own initiative and are responsible for compliance with local laws.
Dhruvo Garage uses the following third-party services. Each is subject to its own privacy policy:
Firebase (Google): Used for user authentication and cloud data storage (Firestore and Firebase Storage). Firebase collects technical data including IP addresses as part of its standard infrastructure. Subject to Google's Privacy Policy.
Netlify: Used for website hosting, content delivery, and serverless function execution. Netlify may log IP addresses and request metadata. Subject to Netlify's Privacy Policy.
NHTSA API (U.S. Government): Used to retrieve vehicle recall and safety rating data from the National Highway Traffic Safety Administration. Requests to NHTSA are made from our server — your IP address and personal information are not transmitted to NHTSA. Only the vehicle make, model, and year or VIN are included in these requests, solely to retrieve publicly available recall data.
Dhruvo Garage is designed exclusively for vehicle maintenance tracking. You are expressly prohibited from storing sensitive personal information in the app, including but not limited to:
We are not responsible for any consequences arising from a user's decision to store information outside the intended purpose of this application. By creating an account, you agree to use Dhruvo Garage solely for vehicle-related record keeping.
Your data is stored in Firebase Firestore and Firebase Storage, cloud infrastructure provided by Google. We protect your information using a layered security approach:
Firebase Authentication: All accounts are protected by Firebase's authentication system, which handles secure password hashing, session management, and brute-force protection at the server level.
Firestore Security Rules: Database access is enforced server-side so that each user can only read or modify their own data. These rules are applied at the database level and cannot be bypassed by any client-side code.
Rate Limiting: Authentication actions (sign-in, registration, password reset) enforce client-side rate limits. Firebase also enforces independent IP-based rate limiting at its infrastructure level.
Backend API Proxying: Third-party data lookups (vehicle recalls, safety ratings, VIN decoding) are routed through our own servers, not called directly from your browser. This prevents your IP address from being exposed to those external services and adds a server-side rate-limiting layer against abuse.
HTTPS / TLS Encryption: All data transmitted between your browser and our servers is encrypted in transit.
Input Validation and Sanitization: All user-submitted data and API query parameters are validated and sanitized server-side to prevent injection attacks.
Despite these measures, no method of internet transmission or cloud storage is 100% secure. We cannot guarantee absolute security of your data.
In the event of a security breach that we reasonably believe has compromised your personal information, we will notify affected users by email at the address associated with your account within a reasonable time as required by applicable law. The notification will describe the nature of the breach, the data potentially affected, and the steps we are taking in response.
You can export a summary of your vehicle data at any time using the Dhruvo Report feature within Dhruvo Garage. This generates a printable report containing your vehicle records, service history, and related notes.
Dhruvo Garage does not currently send push notifications. If push notifications are introduced in a future update, you will be given the opportunity to opt in before any are sent, and this policy will be updated accordingly.
Dhruvo Garage uses browser cookies and local storage to maintain your authenticated session and store rate-limit state for authentication actions. These are functional in nature and are required for the app to operate correctly. We do not use tracking cookies, advertising cookies, or third-party analytics services (such as Google Analytics). No cookie consent banner is displayed because we use only strictly necessary session-management storage.
You have the following rights regarding your data:
To exercise any of these rights, you may also contact us at contact@dhruvomotors.com. We will respond within 30 days.
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following additional rights:
To exercise your California privacy rights, contact us at contact@dhruvomotors.com with the subject line "California Privacy Request." We will verify your identity before processing your request and will respond within 45 days as required by law.
Dhruvo Garage is not intended for use by children under the age of 13. We do not knowingly collect personal information from anyone under 13. If we become aware that a user is under 13, we will promptly delete their account and all associated data. If you believe a child under 13 has created an account, please contact us at contact@dhruvomotors.com.
Your data is retained in your account for as long as you maintain an active account. You may delete your account and all associated data at any time using one of the following methods:
In-app deletion: Go to Account Settings within Dhruvo Garage and select "Delete Account." Your account is deactivated immediately and your data is permanently deleted within 30 days.
By email: Contact us at contact@dhruvomotors.com with a deletion request from your registered email address. We will process your request and delete your data within 30 days.
Deletion is permanent and cannot be undone. Please note that Firebase infrastructure may retain residual data in encrypted backups or system logs for a brief period after deletion is processed. This residual data is inaccessible to us and to you and is purged on Google's standard rotation schedule.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will post any changes on this page with an updated "Last updated" date. For material changes, we will send a notice to the email address associated with your account at least 14 days before the changes take effect. Continued use of Dhruvo Garage after the effective date of a change constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop using Dhruvo Garage and may delete your account.
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern, please contact us at: contact@dhruvomotors.com
© 2026 Dhruvo. All rights reserved. · Terms of Service