Privacy Policy

Last updated: 2026-04-30

Dream Car Tracker ("the app", "we", "us") helps you track savings progress toward a dream car. This policy explains what data we collect, how we use it, and your rights.

What we collect

Account information

• Email address (used to sign in and contact you about your account)
• Display name + username (visible to other users on your posts and profile)
• Optional profile avatar
• Authentication identifier (assigned when you sign up via Apple Sign-In or email)

Content you create

• Dream car selection, target price, and savings goal
• Deposit history (amounts and dates you log)
• Posts, comments, polls, reactions, and follows you make in the social feed
• Reports you file on other users' content

Optional, consent-gated information

When you opt into dealer or financing offers in Settings, we additionally use:

• Your ZIP code (to match offers from local dealers)
• Your self-reported credit tier (excellent / good / fair / poor — only used to filter financing offers; we do not pull your actual credit report)
• Your target price (to surface offers in your range)

These three fields are only collected when consent is enabled. Toggle either consent off in Settings at any time and these fields stop being collected.

Device + technical data

• Device type, OS version, app version (for diagnostics)
• Push notification token (only if you enable notifications)
• Time zone (used to time daily / weekly notifications appropriately)
• Crash and error logs (anonymized where possible)

What we do NOT collect

• We do not pull your credit report, bank balances, or any third-party financial data.
• We do not sell your personal information to third parties.
• We do not use third-party advertising tracking or IDFA.
• We do not access your contacts, photos, microphone, or location beyond the ZIP you self-enter.

How we use your data

• To run your account and let you sign in
• To compute savings progress and show your dashboard
• To deliver the social feed (posts, comments, follows)
• To send push notifications you've opted into
• To match dealer / financing offers — only if you've opted in
• To enforce our content policies (review reports of inappropriate content)
• To diagnose crashes and improve reliability

Who we share data with

We share data only with service providers strictly necessary to operate the app:

• Supabase — hosts our database, authentication, and file storage. Data is encrypted at rest and in transit.
• Apple Push Notification Service and Expo Push — to deliver notifications to your device.
• Apple App Store — for sign-in via Apple ID, if you choose that option.

When you opt into dealer / financing offers, the matched dealer or financing partner sees aggregated information needed to fulfill the offer (e.g., your dream car make / model, your general region) but never your raw email, password, or authentication tokens.

How long we keep your data

We retain your data while your account is active. When you delete your account (Settings → Delete Account), we permanently delete:

• Your authentication record
• Your profile, posts, comments, reactions, polls, and follows
• Your savings goal, deposit history, and car selection
• Your consent preferences and dealer-matching data
• Your push notification tokens

Some operational logs (crash reports, anti-abuse data, aggregated analytics) may persist in anonymized form for up to 14 days after deletion.

Your rights

• Access: view all of your account data inside the app at any time.
• Correction: update your profile, goal, deposits, and consents in Settings.
• Deletion: delete your account at any time in Settings → Delete Account. This is irreversible.
• Opt-out: disable dealer offers, financing offers, and any push notification category in Settings.
• Block: block another user from any post, comment, or profile menu.

Children

Dream Car Tracker is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Security

We use HTTPS for all network requests, encrypt sensitive credentials at rest in your device's secure keychain, and rely on Supabase's infrastructure-level encryption for server-side data. No system is perfectly secure; we will notify you of any breach affecting your data per applicable law.

Changes to this policy

We may update this policy when we add features or change how data is processed. Material changes will be notified in-app before they take effect. The "Last updated" date above always reflects the current revision.

Contact

Questions, requests, or concerns: support@dreamcartracker.com.