The short version. Chip.IT Mechanical is a personal vehicle and equipment record keeper. Everything you log — odometer readings, oil changes, photos of receipts, NFC chip pairings — is yours. We don't sell it, we don't show it to other users, and we don't use it to train advertising profiles. We keep what's necessary to run your garage, send the reminders you asked for, recover your account, and (if you choose) move a chip and its history to a new owner when you sell a vehicle.

1. Information you give us

• Account profile. Email address, display name, password (stored only as a one-way password_hash), optional 4-digit app-open PIN (stored only as a hash), optional service PIN, and your role (user or admin).
• Google sign-in (optional). If you choose "Continue with Google", we receive your Google account ID (sub), your verified email, your name, and your profile photo URL. We never receive your Google password and we don't read your inbox, contacts, or Drive.
• Vehicles & equipment. Anything you choose to enter — name, type, year, make, model, VIN, current mileage, photos, and a description.
• Maintenance logs. The service date, mileage, title, notes, optional next-due date or mileage, and any photos you upload of receipts or work performed.
• NFC chips. The chip's unique code, which vehicle it's paired to, when it was first claimed, and a tap counter / last-tapped timestamp so you can see if a chip is being used.
• Stolen-vehicle reports. If you mark a vehicle stolen, you may also enter a police case number, agency name, agency contact email and phone, your contact phone, and a last-known-location free-text field. This information is what makes the recovery flow useful.
• Sharing & transfers. The email address of anyone you invite to share or transfer a chip to, plus an optional personal note you type into the offer.
• Splash & preferences. Your custom splash image (if uploaded), splash duration, animation, effect, dashboard view preference, and theme.

2. Information we collect automatically

• Session & "remember me" tokens. A hardened HttpOnly session cookie (CHIPIT_SID) and an optional remember-me cookie. The remember-me record stores the IP and browser user-agent of the device you logged in from so you can revoke it if your phone is lost.
• Push subscription endpoints. If you opt in to push notifications, your browser issues a subscription endpoint (a long URL identifying just your device). We store it so we can deliver reminders.
• NFC tap metadata. When a chip is scanned we increment its tap counter and update its last-tapped timestamp. We also write the IP of the scanner into a tamper-resistant alert row when the vehicle is flagged stolen.
• Server logs. Standard web-server access logs (IP address, timestamp, URL, response code, user-agent) are kept for short-term security troubleshooting and abuse prevention.

3. Information we do not collect

• We don't collect your real-time location. The app does not request browser geolocation permission.
• We don't collect your contacts, photo library, or any data outside what you explicitly upload to your garage.
• We don't use third-party advertising trackers or analytics SDKs that profile you across other websites.
• We don't sell, rent, or barter your personal information to anyone, ever.

4. How we use what we collect

• To run your garage — show your vehicles, your logs, your photos, your chips.
• To send you the reminder emails you configured (oil changes, scheduled service, recall notifications, etc.).
• To deliver push notifications you opted in to receive.
• To authenticate you, secure your account, recover your password, and keep your remember-me sessions valid.
• To complete a chip transfer or vehicle-share you initiated.
• To assist law enforcement only with valid legal process, or — at your explicit choice — with the contact information you entered into a stolen-vehicle report.
• To protect the service against fraud, abuse, and brute-force attacks.

5. Who can see your data

• You. Always. Everywhere it's stored.
• Anyone you explicitly share a vehicle with. Sharing is opt-in and revocable from Settings → Sharing.
• The new owner of a chip you transferred. When you accept a chip transfer, the receiving account inherits the entire service history of that vehicle. This is the entire point of the transfer flow — please don't initiate one unless you intend that result.
• Chip.IT Mechanical administrators. A small number of Prosolutions employees with the admin role may view records as needed to operate, support, or secure the service.
• Service providers we rely on: our hosting provider (server & database), our SMTP relay (transactional email only — reminders, welcome, password resets, share/transfer offers), and a Web Push relay (Apple, Google, and Mozilla browser-vendor endpoints). None of these vendors receive permission to use your data for anything other than delivering the message we asked them to deliver.
• Law enforcement, only when compelled by a subpoena, court order, or other valid legal process — or to address a credible threat to life or safety.

6. NFC chips, public scans, and what scanners can see

A Chip.IT NFC tag encodes only a short opaque code. When someone taps a chip:

• If they are the chip's owner, they get the vehicle's service history.
• If the vehicle is flagged stolen, they see your stolen report exactly as you wrote it (including any contact info you opted to display) so they can return the vehicle.
• If the chip is unpaired, they see a generic onboarding screen.
• In every other case they see a polite refusal that reveals nothing about the asset or its owner.

7. How long we keep things

• Your account, garage, logs, and photos: until you delete them or close your account.
• Pending chip-transfer offers: 14 days, then automatically expired.
• Auth / "remember me" tokens: until they expire, you sign out, or you revoke them.
• Web-server access logs: a small number of weeks, then rotated and discarded.
• NFC chip transfer history: kept indefinitely as an immutable audit trail (denormalized, so deleting the underlying account does not corrupt the chain of custody for the new owner). It contains an email address and timestamp — never the password or the contents of any vehicle that has since been transferred away.

8. Your rights & choices

• Access. Everything you've stored is visible to you in-app at any time.
• Correction. Edit any vehicle, log, or profile field directly.
• Export. Email legal@mychipit.com from the account's email address and we will produce a machine-readable copy of your records.
• Deletion. Request account deletion from the same address. We will erase your account, vehicles, logs, photos, push subscriptions, and active chip pairings. Immutable transfer history is anonymized to a hash.
• Withdraw consent. Disable push, opt out of reminder emails, or remove Google Sign-in linkage at any time from Settings → Security.
• Lodge a complaint. If you believe we mishandled your data, contact us first — and you may also contact your local data-protection authority.

9. Children's privacy

Chip.IT Mechanical is not directed at children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal information from a child. If you believe a child has created an account, contact us and we will remove it.

10. International users

The service is operated from the United States. By creating an account you consent to your information being stored and processed in the United States, which may have data-protection laws different from those of your country of residence.

11. Changes to this notice

If we change this notice in a material way we will surface a banner inside the app the next time you sign in, with a link to the diff, before the new version takes effect.

12. Contact

Prosolutions Technology LLC · Attn: Chip.IT Mechanical Privacy · legal@mychipit.com