Privacy Policy

SwitchGauge (“SwitchGauge”, “we”, “us”) is a car-management service that lets you keep your vehicles, service history, running costs and reminders in one place. SwitchGauge is operated by Data Science London.

For the purposes of the UK GDPR and the EU GDPR we are the data controller for the personal data described in this notice. Our registered address is available on request while our company details are being finalised.

Questions, requests and complaints: admin@switchgauge.com.

We collect only what the service needs to work. In practice that is:

• Account data — your email address, display name, profile picture if you upload one, and your preferences (units, language, currency, theme). Passwords are handled by our authentication provider and are never visible to us.
• Security and session data — sign-in times, the authentication method used, IP address, browser and device description for each session. This is what powers the login-history screen and lets you revoke a session you do not recognise.
• Vehicle data — everything you record about your cars: make, model, year, registration and identification details, mileage, service visits, maintenance plans, parts and modifications, fault codes and issues, fuel and cost entries, plus any photos or documents you upload.
• Billing data — your subscription tier, trial and renewal status, and the customer and subscription identifiers issued by our payment processor. We never see or store your card number; that goes directly to Stripe.
• Location data — described separately in section 3, because it is the most sensitive thing here and it works differently from the rest.
• AI assistant data — if you use an AI feature, the text and vehicle context you submit is sent to the AI provider to generate a response. We log the time, model, token counts and estimated cost so you can see your usage against your plan.
• Support and email data — messages you send us, and delivery events for the reminder and notification emails we send you.

We do not use advertising trackers, third-party analytics, or behavioural profiling, and we do not sell personal data or share it with data brokers.

SwitchGauge uses two very different kinds of location, and treats them differently.

Approximate location from your IP address

When your browser loads the dashboard, our hosting provider tells our server the approximate city your connection appears to come from, derived from your IP address. We use this for one thing: showing local weather on the dashboard when precise location is unavailable.

These coordinates are a city or network centroid — they identify roughly which city a connection is routed through, not where you are. They can be several kilometres out, and on mobile networks or a VPN they can name the wrong city entirely. We label anything derived this way as approximate. We do not store this location; it is used for the weather lookup and then discarded.

Precise location from your device (GPS)

Precise location is off unless you turn it on. Two independent things must both be true before we ever read it: you enable location in your SwitchGauge settings, and your browser or operating system grants permission when it asks.

With location enabled, we record a point only while the app is open, and only when both:

• at least 20 minutes have passed since the last recorded point, and
• you have moved more than 250 metres, or the accuracy of the reading has materially improved.

We never record a continuous track, never collect in the background, and stop immediately when you close the app or switch location off. A stationary session typically produces a single point. Each point stores the coordinates, an accuracy figure, the source, the time, the vehicle selected at the time, and the version of this notice you consented under.

Location history is kept for 90 days and then deleted automatically. You can view your history, delete it in full at any time, and withdraw consent from Settings. Withdrawing consent stops collection immediately.

• To provide the service — your account, garage, logs, reports and reminders. Legal basis: performance of our contract with you.
• To take payment and manage subscriptions — trials, renewals, invoices and failed-payment handling. Legal basis: performance of our contract, and legal obligation for keeping financial records.
• To keep accounts secure — session records, rate limiting, abuse prevention and our administrative audit log. Legal basis: our legitimate interest in protecting users and the service.
• To show local weather from approximate IP location. Legal basis: our legitimate interest in a useful dashboard, balanced by the fact that the data is coarse, is not linked to a stored location profile, and is not retained.
• To record precise location history. Legal basis: your consent, which you can withdraw at any time without affecting the rest of the service.
• To operate AI assistance where you choose to use it, and to meter it against your plan. Legal basis: performance of our contract.
• To send service email — reminders you asked for, security notices, and billing notifications. Legal basis: performance of our contract and our legitimate interest in operational communication.

We use a small number of processors to run the service. They act on our instructions and may not use your data for their own purposes.

• Supabase — database, authentication and file storage. Holds your account, vehicle and location data.
• Vercel — application hosting. Processes requests, server logs, and supplies the approximate IP-derived city described above.
• Stripe — payment processing and subscription billing. Stripe is an independent controller for payment data; see their own privacy notice.
• Resend — transactional email delivery.
• OpenStreetMap (Nominatim) — turns coordinates into a place name, and place names into coordinates, for the map. These lookups are made by our server, not your browser, so OpenStreetMap does not receive your IP address, and coordinates are rounded before they are sent.
• Open-Meteo — weather for a coordinate. Also called from our server with rounded coordinates, so the provider does not receive your IP address.
• AI providers — where you use an AI feature, your prompt and the vehicle context it needs are sent to the configured model provider to generate the response.

We may also disclose data where we are legally required to, or to establish or defend legal claims. If SwitchGauge is ever acquired, data may transfer as part of that transaction and this notice will continue to apply until you are told otherwise.

Some of our providers process data outside the UK and EEA, including in the United States. Where they do, transfers are covered by appropriate safeguards — the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or the provider’s certification under the EU–US Data Privacy Framework. You can ask us for details of the safeguards applying to a specific provider.

• Account and vehicle data — while your account is open. When you delete your account we delete it within 30 days, except where we must keep records for the reasons below.
• Location history — 90 days, deleted automatically on a scheduled job, or immediately when you delete it yourself.
• Session and login history — 12 months, then deleted automatically.
• Billing and tax records — six years after the transaction, as UK tax law requires.
• AI usage logs — retained for the life of the account for quota, billing and abuse-prevention purposes.
• Backups — deleted data may persist in encrypted backups for a short period before those backups rotate.

You can, free of charge:

• ask for a copy of the personal data we hold about you;
• correct anything inaccurate — most of it you can edit yourself in the app;
• delete your account and its data;
• ask us to restrict or stop a particular use;
• receive your data in a portable format;
• object to processing we base on legitimate interests;
• withdraw consent for location history at any time, from Settings.

Email admin@switchgauge.comand we will respond within one month. If you are unhappy with how we handled it, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority in the EEA.

We use only what the service needs to function, so there is no consent banner to click through:

• Authentication cookies — keep you signed in and are set by our authentication provider. Strictly necessary.
• Local storage — remembers your theme and which car you had selected, so the app opens the way you left it. This stays in your browser.

We set no advertising, analytics or cross-site tracking cookies.

Data is encrypted in transit and at rest. Every table enforces row-level security, so one account’s data is not reachable from another’s session. Administrative actions are recorded in an audit log. API routes validate their input and are rate limited. No system is perfect: if a breach ever affects your rights, we will notify you and the relevant regulator as the law requires.

SwitchGauge is not intended for children. You must be at least 16 to hold an account. If we learn we have collected data from a child, we will delete it.

If we change how we use your data we will update this page and its version number. For material changes — particularly anything affecting location — we will tell you in the app or by email before the change takes effect, and where the change relies on consent we will ask again rather than assume the old answer still stands.