Privacy Policy

This Privacy Policy describes how the Toolbox Vault mobile application (“Toolbox Vault,” “we,” “us,” or “our”) collects, uses, stores, and protects your information when you use our mobile application (the “App”) on iOS and Android devices. By installing or using the App, you agree to this Policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address and password (passwords are stored using one-way bcrypt hashing — we never see your plaintext password).
• Tool & Inventory Data: Names, photos, model numbers, purchase dates, prices, locations, dealers, warranty info, receipts, and any content you choose to enter.
• Dealer & Contact Info: Dealer business names, agent names, phone numbers, and email addresses you choose to add.
• Borrower Info: Names and phone numbers of people you check tools out to — typed manually or imported from your device's Contacts with your explicit permission.
• Photos & Receipts: Images you upload from the camera or photo library.
• Subscription Info: Subscription tier, purchase date, renewal status (processed by Apple App Store or Google Play — we never see your payment card details).
• Feedback & Support: Any feedback or bug reports you submit through the in-app form.

1.2 Information Collected Automatically

• Diagnostics: Anonymous crash logs and performance data used to fix bugs. No personal content is included.
• Aggregate Usage: Counts of which features are used, not tied to your identity.

1.3 Information We Do Not Collect

• Location data of any kind.
• Microphone audio.
• Health, fitness, or medical data.
• Browsing history outside the App.
• Payment card or banking information (handled solely by Apple/Google).

2. How We Use Your Information

We use the data we collect to:

• Provide, maintain, and improve the App's core functionality.
• Sync your inventory data securely across your devices.
• Process and verify your subscription.
• Respond to support requests and feedback.
• Detect, prevent, and fix technical or security issues.
• Comply with legal obligations.

We do not sell your personal information. We do not use your data for targeted advertising. We do not share your data with data brokers.

3. Data Linked to Your Identity (Apple App Privacy)

For Apple App Store privacy nutrition labels, the following data is collected and linked to your identity (your account):

• Email address (account creation)
• User content (your tool inventory, photos, receipts, dealers, borrowers, notes)
• Identifiers (an internal user ID and a RevenueCat anonymous identifier)
• Purchase history (subscription status only)
• Diagnostics (crash logs)

None of this is used for tracking, advertising, or shared with third-party marketers.

4. Information Sharing & Third Parties

We share information only with these limited service providers, each contractually bound to confidentiality:

We may also disclose information if required by a valid court order, subpoena, or law enforcement request.

5. Data Storage, Security & Retention

• All data in transit is encrypted with industry-standard TLS/HTTPS.
• Passwords are stored using one-way bcrypt hashing.
• Photos and receipts are stored on secure servers with restricted access.
• We retain your data only for as long as your account is active.
• When you delete your account, all your data is permanently removed from our servers within 30 days (some encrypted backups may persist up to 90 days before they cycle out).

6. Your Rights & Choices

You can, at any time:

• Access your data — it is visible in-app at all times.
• Correct any data directly in the App.
• Export all your data via More → Import / Export → Export CSV.
• Delete your entire account (and all associated data) via More → Account → Delete Account. This is irreversible.
• Revoke any permission (Camera, Photos, Contacts, Face ID, Notifications) in your device's Settings.
• Cancel your subscription in your Apple ID or Google Play account settings.

6.1 EU / UK Residents (GDPR)

You have the right to access, rectify, port, and erase your personal data, restrict or object to its processing, and lodge a complaint with your local supervisory authority. Contact us using the email below to exercise these rights.

6.2 California Residents (CCPA / CPRA)

You have the right to know what categories of personal information we collect, to delete personal information, to correct inaccurate information, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share your personal information.

6.3 Other US States

If you reside in a US state with a comprehensive privacy law (e.g., VA, CO, CT, UT, TX), you have substantially similar rights and can exercise them by contacting us using the email below.

7. Children's Privacy

Toolbox Vault is rated 4+ but is not intended for use by children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us at the email below and we will delete it.

8. Permissions Requested by the App

You may decline any of these and continue using the App.

9. Subscription Auto-Renewal

• Payment is charged to your Apple ID or Google Play account at purchase confirmation.
• Subscriptions auto-renew at the same price each period unless canceled at least 24 hours before the end of the current period.
• Your account will be charged for renewal within 24 hours prior to the end of the current period.
• You can manage and cancel subscriptions in your Apple ID or Google Play account settings.

10. International Transfers

Our servers may be located in the United States. By using the App you consent to your information being transferred to and processed in the United States, subject to safeguards equivalent to those in your home jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at this URL and inside the App. Material changes will be highlighted via an in-app banner at next launch.

12. Contact Us

For questions, concerns, or to exercise any of your privacy rights:

Email: MechanicVault@gmail.com
We aim to respond within 5 business days.