1. What we collect
When you use Wrench, we collect the following information:
- Account information — Your email address and name, provided through Google OAuth or magic link sign-in.
- Garage data — VINs, makes, models, years, mileage, maintenance schedules, and service log entries for bikes you add.
- Bike photos — Images you upload to your garage are stored in our storage bucket. Photos submitted to the AI photo identification feature are sent to our AI provider for processing.
- Billing information — If you upgrade to Pro, Stripe handles your payment details. We only store your Stripe customer ID, subscription status, and billing period end date.
- Device information — We store a minimal session token in your browser to keep you signed in.
2. How we use your data
- To provide the core service: tracking bikes, generating maintenance schedules, logging service, and surfacing recall alerts.
- To generate AI maintenance schedules, market valuations, and identify bikes from photos.
- To decode VINs and look up recalls via NHTSA APIs.
- To send transactional emails (welcome, cancellation, subscription updates).
- To enforce tier limits (Free: 1 bike, Pro: unlimited).
We do not sell your data. We do not serve ads. We do not build advertising profiles.
3. Third-party services
Wrench uses the following third-party services to operate:
- Supabase— Database, authentication, and file storage. Your account, garage data, and bike images are stored in Supabase's cloud infrastructure. Supabase Privacy Policy
- Anthropic (Claude)— AI maintenance schedule generation, market valuation, and photo identification. Text and images are sent to Anthropic's API for processing. Anthropic Privacy Policy
- NHTSA— VIN decoding and recall lookups. VINs are sent to NHTSA's public API; no personal data is shared.
- API Ninjas — Motorcycle specs lookup. Make, model, and year queries are sent to API Ninjas; no personal data is shared.
- Stripe — Payment processing for Pro subscriptions. Stripe Privacy Policy
- Resend — Transactional email delivery. Resend Privacy Policy
- Vercel — Hosting and deployment. Vercel Privacy Policy
4. Data storage and retention
- Your account, bikes, maintenance schedules, and service log entries are stored as long as your account exists.
- Bike images are stored in Supabase Storage and remain available until you delete the bike or your account.
- Photos submitted for AI identification are processed in real time and are not permanently retained beyond the request.
5. Your rights
- Delete your account — You can delete your account and all associated data at any time. This action is immediate and irreversible.
- Access your data — Your bikes, maintenance items, and service history are visible in the app at all times. Pro users can export to CSV.
- Cancel your subscription — Pro users can cancel anytime via the Stripe billing portal, accessed from the in-app billing menu.
If you are in the EU, UK, or California, you have additional rights under GDPR or CCPA. Contact us at the email below to exercise them.
6. Cookies
Wrench uses a session cookie managed by Supabase to keep you signed in. We do not use tracking cookies, analytics cookies, or advertising cookies.
7. Children
Wrench is not directed at children under 13. We do not knowingly collect data from children under 13.
8. Changes
We may update this policy from time to time. Material changes will be noted by updating the date at the top of this page.
9. Contact
Questions about this policy? Email support@wrench-log.com.