Privacy Policy

Effective date: August 13, 2026

1. Overview

Galyen Consulting LLC, operating as TrakMyToys (“we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

2. Information We Collect

Account information: When you sign up, we collect your email address and a hashed password.

Profile & garage data: Information you enter into the app — vehicle details, maintenance records, upgrade logs, warranties, documents, reminders, and photos you upload.

Billing information: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number — Stripe handles all payment data securely.

Usage data: We may collect basic usage information such as pages visited, features used, and error logs to improve the Service.

Contact form submissions: If you contact us, we retain your name, email, and message to respond to your inquiry.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the TrakMyToys Service
  • Process subscription payments and manage your billing
  • Send transactional emails (account confirmations, password resets)
  • Respond to support requests and contact form submissions
  • Improve the Service through anonymized usage analytics
  • Send product updates or announcements (you may opt out at any time)

4. Data Storage — Supabase

All user data is stored securely in Supabase, a cloud database platform hosted on AWS infrastructure. Data is encrypted at rest and in transit. Row-Level Security (RLS) policies ensure that each user can only access their own data. Supabase’s privacy practices are available at supabase.com/privacy.

5. Payment Processing — Stripe

Payments are processed by Stripe, Inc. When you subscribe to a paid plan, you are redirected to Stripe’s secure checkout. TrakMyToys never sees or stores your full credit card number. Stripe’s privacy policy is available at stripe.com/privacy.

6. AI Processing

Some features — including the warranty scanner, invoice scanner, and dealer-packet import — use a third-party AI provider (currently Anthropic, Inc.) to read and interpret documents you choose to upload. When you use these features, the contents of those documents are sent to the AI provider so it can generate the summary, coverage assessment, or other result you requested. This content is processed only to provide the feature to you and is not used to train AI models. AI-generated results can be incomplete or inaccurate, so you should review them before relying on them. The provider’s privacy practices are available at anthropic.com/legal/privacy.

7. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information, and we do not share it with third parties for their own marketing purposes. We share your information only with the service providers that help us operate TrakMyToys, who may use it only to provide services to us and are bound by confidentiality obligations. These providers currently include:

  • Supabase — database and file storage (hosted on AWS)
  • Stripe — subscription payment processing
  • Anthropic — AI processing of documents you upload
  • Resend — transactional and reminder emails
  • Vercel — application hosting
  • NHTSA (vPIC & Recalls) — VIN decoding and recall lookups; these receive a vehicle’s VIN or make/model, but no personal identifiers

We may also disclose information when required by law.

8. Cookies

We use cookies and local storage to maintain your authenticated session. We do not use third-party advertising cookies or tracking pixels.

9. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request that we correct inaccurate data
  • Deletion: Request deletion of your personal data (“right to be forgotten”)
  • Portability: Request your data in a portable format
  • Opt-out: Opt out of non-essential communications at any time
  • Non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, submit a request via our contact form or email info@trakmytoys.com.

10. Data Deletion

You can delete your account at any time through your account settings. Upon deletion, your personal data and garage records will be permanently removed within 30 days. To request deletion before account closure, contact us via the contact form.

11. Children’s Privacy

TrakMyToys is not intended for children under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Service after changes take effect constitutes your acceptance.

13. Contact

Privacy questions or requests? Contact us at info@trakmytoys.com or via our contact form.