Last Updated: July 29, 2026
GarageIQ is built to keep your account and vehicle data protected while still enabling social features, Premium billing, and optional AI tools.
The app runs on Vercel with a Supabase backend (Postgres, Auth, Storage, and Edge Functions). Traffic is served over HTTPS. Encryption in transit and at rest follows those providers’ standard practices.
Access is protected by Supabase Auth (JWT sessions). You can sign in with email/password or Google. Use a strong, unique password and protect your email inbox. Sign out on shared devices.
Database access is gated by authentication and row-level policies so users generally only read and write their own private records. Social features intentionally share some profile, post, and limited garage information with other signed-in users. Private documents and detailed vehicle records remain restricted to your account unless you share them.
Premium payments are processed by Stripe. GarageIQ stores subscription status and Stripe customer identifiers needed for billing; we do not store full card numbers on our servers.
AI features call OpenAI from our servers. Content you submit for those features (for example receipt images) may be processed by OpenAI to generate results. We do not sell that data for advertising. See the Privacy Policy for details.
If you believe your account has been compromised or you find a vulnerability, contact admin@garageiq.app.
We monitor and update our stack as needed, but no online service is perfectly secure. Please practice good account hygiene.