Privacy Policy

01Information we collect

Information you provide

• Account information: your email address, a password (stored only as a cryptographic hash, which we cannot reverse) and your username.
• Profile information: any details you choose to add, such as a display name, biography, location and profile photo.
• Garage information: the vehicles you add (year, make and model), including ones you used to own if you choose to list them, the details you choose to give about them (such as mileage, colour, gearbox, and when you bought or sold it), the modifications you list, and when and how they were fitted.
• What you spent (optional, private): if you record what a part cost, only you can see it. It is stored separately from your public build and is never shown to other members, advertisers or anyone else.
• Mileage readings (private): every mileage you log for a vehicle, with its date, so your ride keeps a history rather than one number that gets overwritten. Only you can see the readings; the vehicle’s page shows the latest one, as it did before.
• Service log (private by default): the service you record on a vehicle — what was done, when, at what mileage, who did it, a note, and how often you’d like to be reminded. Only you can see it, unless you turn on “Show service history” for that vehicle, which shows those records (never what they cost, never a receipt) on the vehicle’s page and on a Swap Meet listing for it.
• Service costs and receipts (private): what a service cost, and any receipt or invoice photos you attach. Only you can see them, always. Receipts are kept in a private folder and, like every photo, are stripped of embedded location data on your device before upload.
• Reminders: which reminders you have put away with “Not now”, and until when, so that choice is remembered. Reminders appear inside the app; we send no reminder emails.
• Planned modifications: public by default, like the rest of your garage. You can hide them from everyone else in your account settings.
• A private build (optional): each vehicle has a “Keep this build private” switch. With it on, the parts list for that vehicle is visible only to you — on its page, in link previews and anywhere else it would otherwise appear — and that vehicle stops matching searches for the parts it hides. The vehicle itself, its photos and its details stay visible, and it can still be found by year, make and model.
• Content: photographs, captions, hashtags, the meet a photo was taken at (if you tag one), comments, likes, follows, Swap Meet listings (including price and location), clubs you start or join, threads and replies you post on boards, events you post and RSVPs (including which of your cars you’re bringing, if you pick one).
• Messages you exchange with other members.
• Notifications: when a member gives your post fire, comments on it, follows you, says they’re going to your meet, tags you, posts photos from your meet, or leaves or answers a sealed message on one of your vehicles, we record that so we can show it to you in the app. Only you can see your notifications, and they are deleted with your account. We don’t send notification emails.
• Phone notifications (iPhone app, only if you turn them on): if you allow notifications in the WheelHub iPhone app, Apple gives the app a device token, an address for your phone that Apple’s notification service uses. We store that token with your account so we can send the notices described above, new messages, and reminders the day before and two hours before a car show you said you’re going to. We also store which kinds you switched on or off, and a record of which notices were sent so none is sent twice. The notice’s text (for a message, the start of the message) passes through Apple to reach your phone. You can switch each kind off in Settings, or turn notifications off for WheelHub in your iPhone’s Settings. Signing out on that phone forgets its token, and deleting your account deletes all of it.
• Vehicle identification numbers (VINs) and sealed messages (optional): if you add a VIN to a vehicle in your garage, only you can see it. It is never shown on your profile, in search or to any other member, and we match it only as a one-way cryptographic fingerprint. A VIN typed into search returns the year, make and model of that vehicle and how many sealed messages are waiting on it — never the owner, their profile, or whether the owner has an account. A sealed message you leave for a future owner (and any photographs in it, which are stored privately) can be read only by someone who has that VIN on a vehicle in their garage. You are not identified to them unless you choose to sign it. If you report a sealed message, your report does not tell you who wrote it; our moderators can see the author in order to act on it.
• Safety and feedback: reports you submit, members you block, and vehicles you submit through “Not listed? Add it.”

Information collected automatically

• The days you open WheelHub. When you open the Service while signed in, we record that your account was active on that date — a date and nothing else. No page, no time of day, no device. It tells us how many people come back, which page counts cannot. It is visible to us only as totals: the tools that read it cannot return an individual account, and we do not use it to build a profile of you. It is deleted with your account.
• Session cookies that keep you signed in, and a few small ones that make the app behave: one notes that today’s visit has been counted, one that you’ve put a reminder away, and one holds a random number that sets the order older posts appear in on Home for your visit. None of them identifies you to anyone else. We do not use advertising or cross-site tracking cookies, and our analytics use no cookies at all.
• Server logs maintained by our hosting providers when your device connects to the Service: IP address, browser and device type, the page requested and the time of the request. These are used to operate and secure the Service.
• Aggregate usage counts. We use Vercel Web Analytics to count how many people visit each page, along with coarse details such as country, browser and whether the visit came from a phone or a computer. It sets no cookies, does not follow you to other websites, and does not build a profile of you. We see totals, not individuals, and these counts are not linked to your account.

Photographs and location. Photographs taken on a phone often contain embedded metadata, including the GPS coordinates where they were taken. WheelHub removes this metadata on your device before a photograph is uploaded. We do not collect your device's location; the only location information we hold is what you type in yourself.

02What is visible to others

WheelHub is a public community. Your username, profile, garage, posts, comments, likes, follows, Swap Meet listings, events, the clubs you belong to and what you post on the general boards are visible to anyone, including people who do not have an account, along with any location you entered in them. What you post on a club’s own board is visible only to that club’s members.

The following are not public: your email address, your messages (visible only to you and the other participant), the members you have blocked, the reports you submit, your mileage readings, what any service cost, your receipts and your reminder settings. Your service records are private too, unless you choose to show them for a vehicle. Members you report are not told who reported them.

A VIN you add to your garage is never public, and neither is a sealed message: it can be read only by whoever has that VIN on a vehicle in their garage, and it does not carry your name unless you sign it.

Information you make public can be copied or shared by others. Consider carefully before posting details such as a license plate, VIN or home address in a photograph, caption or listing.

03How we use information

• To operate the Service: display your profile and posts, deliver messages, power search, and let members find and follow builds.
• To keep the Service safe: review reports, remove content and accounts that violate our Terms of Service, and detect and prevent abuse and fraud.
• To communicate with you about your account, such as confirming your email address or resetting your password. We do not send marketing email.
• To maintain and improve the Service and diagnose problems.
• To comply with legal obligations.

04How we share information

We do not sell your personal information. We never have, and we have no plans to. Selling member data is not part of how WheelHub makes money.

Advertising. WheelHub carries no advertising today. We expect to introduce it, and it will come from businesses in the automotive world — parts manufacturers, shops, tuners, event organizers. When that happens, here is how it will work and what will not change:

• Advertisers buy space on WheelHub. We decide which members see an ad, using what you have already told us here — the vehicles in your garage and the parts you have listed on them, so that someone running a turbocharged 240SX sees parts that fit a turbocharged 240SX.
• We count how many builds carry a given part or brand, so we can tell an advertiser the size of an audience before they buy. Those are totals only. A count never identifies you, never names your build, and an advertiser cannot ask us who is in it.
• Advertisers do not receive your personal information. They get to reach an audience; they do not get your identity, your email address or your activity.
• We will not hand your information to advertising networks that track people across other websites and apps.
• We will update this page before any advertising appears, and tell you about the change.

We share information only in the following circumstances:

• With service providers that operate the Service on our behalf: Supabase (database, authentication and photo storage), Vercel (web hosting and aggregate analytics), Resend (transactional email) and Apple (delivering phone notifications to the iPhone app, if you turn them on). Each is permitted to use the information only to provide its service to us.
• With other members, as described in the previous section and when you send someone a message.
• For legal and safety reasons, when we believe disclosure is required by law or legal process, or is reasonably necessary to protect the safety of any person, prevent fraud, or enforce our Terms.
• In a business transfer, such as a merger, acquisition or sale of assets. Any successor would be bound by this policy or would notify you of any changes.

05Messages

Messages travel over encrypted connections and are visible in the app only to the two participants. Our moderation tools do not display message contents. Messages are not end-to-end encrypted, however, and may be accessed from our database where required by law or to investigate a serious safety concern.

06Retention and deletion

We retain your information for as long as your account exists. You may edit or delete your posts, comments, listings, events and garage vehicles at any time.

Deleting your account — from Edit profile & cars or through our account deletion page — immediately and permanently removes your account, profile, photographs, posts, comments, likes, follows, listings, events, messages and garage.

Two exceptions apply: reports you submitted are retained without your name so that our moderation records remain complete, and deleted data may persist in our providers' routine backups for a limited period before being overwritten.

07Your rights and choices

• Access and correction: review and update your information in Edit profile & cars.
• Deletion: delete your account at any time, as described above.
• Portability: request a copy of your information by emailing support@getwheelhub.com.
• Blocking: block any member to prevent them from viewing your posts or contacting you.

Depending on where you live — including California, the European Economic Area and the United Kingdom — you may have additional rights to know what personal information we hold, to correct or delete it, to restrict or object to its processing, or to receive it in a portable format. We do not sell personal information. To exercise any of these rights, email support@getwheelhub.com. We will respond within 30 days and will not discriminate against you for making a request. Residents of the EEA and UK may also lodge a complaint with their local data protection authority.

08Security

Connections to the Service are encrypted in transit, passwords are stored as cryptographic hashes, and database access controls limit each member to their own content. No system is perfectly secure, and we encourage you to use a password that is unique to WheelHub.

09Children

The Service is not directed to children under 15, and we do not knowingly collect personal information from them. If you believe a child under 15 has created an account, contact support@getwheelhub.com and we will delete it.

10International data transfers

WheelHub is operated from the United States. Your information is stored and processed by our service providers in the United States and may be processed in other countries whose privacy laws differ from those of your jurisdiction. By using the Service, you consent to this transfer.

11Changes to this policy

We may update this policy from time to time. We will revise the date at the top of this page and, for material changes, notify you through the Service or by email before the changes take effect.

12Contact

Questions or requests regarding your privacy may be directed to support@getwheelhub.com.