A clear record of every mile.

mGarage Privacy Policy

Last updated: November 5, 2026

mGarage is operated by MCODE, Croatia. Contact: hello@mcode.hr.

Your local garage

You choose the vehicle details, odometer readings, fuel, expenses, services, trips, incidents, notes and attachments you enter. These records and files are kept in the app's storage on your device. You do not need an account for the local journal. Search and vehicle calculations run on the device.

The app stores a separate start time and last-observed time for its seven-day preview. The preview starts automatically on first launch, needs no payment method and does not create a subscription or charge. This small record is separate from garage backups and is not uploaded to our cloud-backup service. Device secure-storage behavior can preserve it independently of ordinary app files.

Optional cloud accounts and backups

If you choose an account, Google Firebase processes your email address, authentication credentials and account identifier to sign you in. We do not receive your password in our support mailbox or put it in backup files. Firebase also processes connection information, including IP addresses and user-agent information, for account authentication, security and abuse prevention.

Cloud backup is a manual action. A saved snapshot contains your structured vehicle profiles, journal entries and reminders, including any amounts, notes, VIN/registration details and locations you entered. It does not contain vehicle-photo or receipt attachment bytes. Up to ten snapshots, each limited to 700 KB, are stored for your account; a further save replaces an older slot. Snapshot storage is in Google's US-central1 region. Firebase Authentication runs in the United States; supporting provider services may process information in other locations.

Account access is restricted by authenticated owner rules. Connections use encryption in transit; the cloud service encrypts stored data. These backups are not end-to-end encrypted. Google provides Firebase under its applicable service and data-processing terms: Firebase privacy information.

Photos, camera, location and notifications

Selected photos, camera images and files become local attachments only when you choose to add them. Complete file backups can contain these attachment bytes; cloud record snapshots exclude them. On Android 24–28, the camera flow may request capped legacy storage permission; newer Android versions use scoped/system selection without that legacy grant.

Location is requested only for Add location on a record. There is no background location tracking or automatic trip detection. Coordinates stay in the record and are included if you later choose to upload that record in a cloud snapshot. Optional service notifications are scheduled locally. Mileage-based status uses your recorded odometer, not live vehicle telemetry.

If you choose Open map, mGarage includes the saved coordinates in a link opened in Google Maps. Google's privacy practices apply to that destination.

Purchases

Apple or Google handles store payments. We do not receive payment-card details. RevenueCat processes subscription purchases, store receipts, entitlement status and an app user identifier to deliver access and provide subscription reporting/analytics. If you sign into a cloud account, that account identifier is used to link your purchase access; otherwise RevenueCat uses its anonymous app identifier. Purchase information can therefore be linked to your account. We do not configure advertising-identifier integrations or cross-app advertising tracking.

RevenueCat also derives your country from the IP address of your connection for subscription analytics and customer reporting, including when you have not purchased a subscription. RevenueCat states that it retains the country and discards the IP address after determining the country. This country-level processing does not require device location permission and does not use the precise coordinates saved in your garage.

For more about that processor, see RevenueCat's privacy policy. Buying a subscription is separate from the app preview and requires your store confirmation.

Exports, sharing and support

When you choose a file or share destination, the selected export is sent to the destination you choose. That destination's privacy practices apply. Photos/receipts in a full backup, PDF or shared attachment may contain information you entered; review files before sharing them.

If you contact hello@mcode.hr, we process the information you provide to respond. Do not send passwords, payment-card details or a complete private garage unless it is needed and you choose to share it. We do not install an advertising SDK, sell user records, or use journal content to train an AI service.

Retention, deletion and your choices

Local records remain until you remove them or remove the app's local storage. Records moved to Recently deleted remain recoverable. Previous local/recovery copies and exported files may also contain earlier records. Keep the backups you need and manage copies in destinations you control.

You can delete individual cloud snapshots. Settings → Cloud backups → Delete cloud account removes that account's snapshots and Firebase login after confirmation and password verification. Local garage files and exports remain. Cloud account deletion does not cancel Apple/Google subscriptions or erase all store transaction records. For an account or RevenueCat-data deletion request, use our deletion page or email hello@mcode.hr; we may need to verify ownership before acting. Google documents up to 180 days to remove authentication details from active and backup systems after deletion is initiated, with authentication IP logs kept for several weeks. Transaction/security information may also remain where a provider must retain it under its terms or applicable law.

Depending on your location, you may have rights to access, correct, erase, restrict or obtain a copy of your personal information, object to certain processing, and complain to your data-protection authority. Contact us to exercise applicable rights. We process requested accounts, backups and purchase access to provide the service; necessary security and support processing also protects the service. Optional device permissions can be withdrawn in system settings. Withdrawal does not remove records already saved or exported.

Changes and contact

We will update this page when these practices materially change. The app is a vehicle record-keeping tool intended for users aged 13 and over and is not directed at children under 13. Questions: MCODE, Croatia, hello@mcode.hr.

This website

These public support and policy pages use Firebase Hosting. Google processes request IP addresses for delivery, abuse prevention and usage analysis, retaining IP data for a few months. We do not add advertising, analytics scripts or account forms to these pages. See Firebase privacy information.

For information MCODE receives directly in support requests, retention depends on resolving the request, related disputes and applicable legal obligations. You may contact us about the information we hold. Data-protection concerns can also be raised with the Croatian Personal Data Protection Agency (AZOP).