Privacy Policy

Wainwright is a vehicle lifecycle manager built to help you track fuel, maintenance, documents, and deadlines for your vehicles. This policy explains what information we collect, where it is stored, who can access it, and how we use it. We've written it to be direct and specific — not buried in legalese.

If you have questions not answered here, contact us at hello@stymielabs.com.

What Information We Collect

Account Information

When you sign up, we collect your email address and display name. If you sign in with Google, we receive your Google account email and name. We do not receive your Google password.

Vehicle and Tracking Data

The core of Wainwright is the data you enter about your vehicles. This includes:

• Vehicle details — make, model, year, and odometer readings
• Fill-up records — date, odometer, gallons, price per gallon, total cost, fuel type, and any notes you add
• Maintenance records — service type, date, odometer, cost, notes, and any photos you upload
• Reminders — type of renewal (registration, insurance, inspection, etc.), expiration date, and cost
• Profile preferences — unit system (imperial or metric), currency, and default fuel type

Glove Box Data

The Glove Box is designed to hold document details for your vehicles, which may include:

• Insurance provider, policy number, and agent contact information
• Vehicle registration details
• Driver's license number and expiration date
• Loan or lease account numbers and lender information
• Roadside assistance membership details
• Warranty information
• Emergency contact names and phone numbers

This data is stored in your account in the same database as your other Wainwright data. Do not store information in the Glove Box if you are not comfortable with it residing in a cloud-hosted database subject to the terms described in this policy.

Usage Data

We use Firebase Analytics (Google Analytics) to understand how the app is used. This collects aggregate data including pages visited, session duration, browser type, and device type. This data does not include the content of your vehicle records, fill-up entries, or Glove Box documents.

Where Your Data Is Stored

All Wainwright data is stored in Google Firebase, a cloud platform operated by Google LLC. Specifically:

• Firestore — stores all structured data (vehicles, fill-ups, maintenance records, Glove Box items, reminders, profile settings)
• Firebase Storage — stores photos you upload for maintenance records and vehicle photos
• Firebase Authentication — manages your login credentials

All data is transmitted over HTTPS. Wainwright does not operate its own database servers. Your data resides on Google's infrastructure subject to Google's Firebase privacy terms.

Wainwright also caches your data locally in your browser's IndexedDB storage to enable offline access and faster load times. This cache is stored only on your device and is cleared when you log out or clear your browser data.

Who Can Access Your Data

Other Users

No other Wainwright user can see your data. Access controls are enforced at the database level — your data is isolated to your account, and those rules cannot be bypassed by another user through the app.

Stymie Labs (Us)

As the operator of Wainwright, Stymie Labs LLC has administrative access to the Firebase project and could access stored records through the Firebase Console. We do not actively monitor, read, or analyze individual user records. We would access data only to diagnose a technical issue at a user's request, or if required to do so by law.

We have no automated processes that read or analyze the content of your vehicle or document records.

Google (Firebase Infrastructure)

Google processes your data as part of providing the Firebase platform. This is governed by Google's data processing terms. Google does not use your Wainwright data for advertising purposes under Firebase's standard terms.

Analytics and Tracking

Wainwright uses Firebase Analytics (powered by Google Analytics) to collect aggregate usage information. This helps us understand which features are used, how users navigate the app, and where we should focus improvements.

What analytics collects: page views, session duration, browser and device type, general geographic region (country/state level), and in-app events like logging a fill-up or adding a vehicle.

What analytics does not collect: the content of your records, your odometer readings, your fill-up costs, your Glove Box data, or any personally identifying vehicle information.

To opt out of Google Analytics tracking across all sites, you can install the Google Analytics Opt-out Browser Add-on.

How We Use Your Information

• To provide the Wainwright service — storing, displaying, and calculating statistics from your vehicle data
• To authenticate you and secure your account
• To send account-related emails (email verification, password reset)
• To understand aggregate usage patterns and improve the app

What We Don't Do

• We do not sell your data to any third party
• We do not share your individual records with any third party beyond the Firebase infrastructure required to run the service
• We do not use your vehicle or document data for advertising targeting
• We do not use automated analysis or machine learning on the content of your records
• We do not send marketing emails (you will only receive transactional emails related to your account)

Data Retention and Deletion

Individual Records

You can delete individual fill-up entries, maintenance records, reminders, and Glove Box items at any time within the app. Deletion is immediate and permanent.

Account Deletion

To request full account and data deletion, email hello@stymielabs.com. We will delete your account and all associated data — vehicles, fill-up history, maintenance records, photos, reminders, and Glove Box documents — within 30 days of your request. This action is permanent and cannot be undone.

Self-service account deletion within the app is planned for a future release.

Security

We take reasonable steps to protect your data:

• All data is transmitted over HTTPS
• Database access rules enforce that users can only access their own data
• Firebase App Check (reCAPTCHA v3) protects our APIs from automated abuse
• Firebase API keys are restricted to authorized referrers
• Photo storage is isolated by user ID with image-type and size validation

No system is perfectly secure. If you believe you've found a security issue, please contact us at hello@stymielabs.com before disclosing it publicly.

Changes to This Policy

If we make material changes to this policy, we will update the effective date at the top of this page. For significant changes, we will notify users via the app or by email. Continued use of Wainwright after a policy update constitutes acceptance of the revised terms.

Contact

Questions about this privacy policy or your data: hello@stymielabs.com

Wainwright is built by Stymie Labs, LLC in the Shenandoah Valley of Virginia.