Privacy Policy
Effective Date: October 9, 2026 · Version: 1.8
McGlyn Consulting, LLC ("we," "us," or "our") operates the Wrench Wise™ application ("the App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App.
We collect information you provide directly, including:
- Account Information: Name, email address, and a password if you set one
- Vehicle Information: Make, model, year, VIN, mileage, purchase date
- Maintenance Records: Service history, dates, costs, notes, photos
- Purchase History: Subscription plan, billing status (processed by our payment provider)
- Feedback: Bug reports, feature requests, and support inquiries
When you use the App, we may automatically collect:
- Device Information: Device type, operating system, browser type, IP address
- Usage Data: Features used, pages visited, time spent in the App
- Identifiers: Internal user ID, session identifiers
- Advertising and Attribution Data: In supported advertising markets, ad click identifiers such as Google click IDs, your device's mobile advertising identifier (Apple IDFA on iOS / Google Advertising ID on Android), approximate region signals, and conversion events such as signup, trial, or purchase
- Diagnostics: Crash logs, performance data, and error reports
We may receive information from:
- Vehicle Data Services: VIN decoding and recall information from the National Highway Traffic Safety Administration (NHTSA) public API
- Authentication Providers: If you use biometric login
- Sign-in Providers (Apple, Google): If you choose Continue with Apple or Continue with Google, that company sends us an identifier for your account with them, your email address (with Apple this may be a private relay address that forwards to you), whether they have verified that address, and your name if you share it. We never receive your Apple or Google password, we do not ask for your contacts, and we use and keep nothing else from that account
- Subscription Providers: RevenueCat may send us subscription lifecycle events, such as initial purchase, renewal, cancellation, billing issue, or expiration
We use your information to:
- Provide the Service: Store and display your vehicle and maintenance data
- Send Reminders: Notify you of upcoming maintenance based on your preferences
- Improve the App: Analyze usage patterns to enhance features and fix issues
- Provide Support: Respond to your questions and feedback
- Ensure Security: Detect and prevent fraud or unauthorized access
- Process Payments: Manage subscription billing and entitlements
- Measure Advertising Performance: In supported markets, understand whether advertising campaigns lead to signups, trials, or purchases
3. Data Storage and Security
3.1 Storage
On the mobile app, data created without a paid subscription is stored only on your device. If you use the Wrench Wise mobile app without an active subscription, your vehicle and maintenance data is kept locally on your device and is not uploaded to or stored on our servers. Cloud storage, cross-device sync, and backup are features of a paid subscription. (The web version of Wrench Wise stores your data on our servers.)
One exception, on any plan: scanning a VIN sends the photo you take to our servers, where it is read by the AI provider listed in Section 4.2, and we keep a record of the scan and its result. VIN scanning does not require a subscription, so this is the one way data you create in the mobile app reaches our servers without one. Importing a service manual works the same way, and is a paid feature.
Subscriber data is stored securely on our servers using:
- Database: For structured data (vehicles, maintenance records), protected by authentication and access controls
- File Storage: For uploaded files (photos, documents)
- Credential Protection: Passwords are hashed; sensitive credentials (such as SMTP keys and the Sign in with Apple token described in Section 4.2) are encrypted at rest
3.2 Security Measures
We implement industry-standard security measures including:
- HTTPS encryption for all data transmission
- Token-based authentication with secure session management
- Regular security audits and updates
- Access controls limiting employee access to user data
3.3 Data Retention
Mobile use without a subscription: because this data is stored only on your device, we do not hold it on our servers. Deleting the app removes that data, and if your device is not backed up we cannot recover it.
Subscribers: we retain your server-stored data while your subscription is active. If your subscription lapses, your data remains available so you can resume by resubscribing; you can delete it immediately at any time (see Section 6.3).
On request: you can delete your account and data at any time (see Section 6.3). Deleted data is removed from our active systems within 30 days and may persist in encrypted backups for up to 180 days, after which those backups expire. Anonymized, aggregated usage data that cannot identify you may be retained for analytics.
Sign in with Apple, on your device: if you share your name the first time you use Continue with Apple, the sign-in component inside the app keeps a copy of that name on your device. Signing out or deleting your account does not remove that copy; it stays on the device until you delete the app.
We do not sell your personal information. We do engage in limited cross-app advertising measurement (described in Section 5): on iOS only if you allow it via Apple's App Tracking Transparency prompt, and on Android by default unless you opt out via the in-app "Share data for advertising" setting. We may share information with the following categories of service providers:
4.1 With Your Consent
When you explicitly authorize sharing.
4.2 Service Providers
We use the following third-party services to operate the App. Each is contractually required to protect your data and use it only for the purposes described:
- Sentry (Functional Data Systems, Inc.) — Crash reporting and error monitoring. Receives: crash logs, device type, OS version, app version, and error context. Does not receive personal vehicle data.
- RevenueCat (RevenueCat, Inc.) — Subscription and purchase management, including RevenueCat Web Billing where available. Receives: user or anonymous RevenueCat identifier, subscription status, product identifiers, purchase receipts, and purchase lifecycle events.
- Google Ads / Google tag (Google LLC) — Advertising attribution and conversion measurement for supported markets such as the United States and Canada. Receives: ad click identifiers, browser/device information, page and conversion events, transaction identifiers, purchase value, and related measurement data where enabled.
- Google Analytics for Firebase (Google LLC) — App-usage analytics on our iOS and Android apps, and advertising-conversion measurement. Receives: a Firebase app instance identifier, app and device information, app events, and your device's mobile advertising identifier (Apple IDFA on iOS / Google Advertising ID on Android) used for ad attribution and remarketing. On iOS, advertising signals stay off until you allow tracking via Apple's App Tracking Transparency prompt, and turn on only in supported markets such as the United States and Canada. On Android, advertising measurement is on by default in supported markets; you can opt out anytime via the in-app "Share data for advertising" setting. Purchase and subscription lifecycle events from RevenueCat are linked to the Firebase identifier so a purchase can be measured as a conversion.
- Sign in with Apple (Apple Inc.) — Optional sign-in on our iOS app. If you choose Continue with Apple, Apple confirms who you are and sends us the information described in Section 1.3, and Apple knows that you signed in to Wrench Wise. We keep one encrypted token from Apple on our servers. Its only use is to tell Apple to disconnect Wrench Wise from your Apple Account. When you delete your account we ask Apple to revoke that token, and it is deleted with your account. (We do the same if a password reset removes Apple sign-in from an account, which happens when its email address was never confirmed or was changed after the account was created.)
- Sign in with Google (Google LLC) — Optional sign-in on our iOS and Android apps. If you choose Continue with Google, Google confirms who you are and sends us the information described in Section 1.3, and Google knows that you signed in to Wrench Wise. We do not keep a Google sign-in token on our servers.
- OpenAI (OpenAI, L.L.C.) — AI reading of images you submit. Receives: photos you take of a VIN plate or sticker when you use VIN scanning, and pages of any vehicle service manual you upload, so the maintenance schedule can be extracted from them. Used only to return the reading to your account; not used to train models.
- NHTSA Recalls API (U.S. Government) — Vehicle safety recall lookups. Receives: vehicle year, make, and model (no personal information).
- SMTP Email Provider (configured by account administrator) — Sends verification and notification emails. Receives: recipient email address and message content.
4.3 Legal Requirements
When required by law, court order, or to protect our rights and safety.
4.4 Business Transfers
In connection with a merger, acquisition, or sale of assets, with notice to users.
5. Tracking, Advertising, and Measurement
Wrench Wise™ does not display third-party advertisements in the App or sell your personal information.
For immediate production rollout, advertising measurement is limited to supported markets such as the United States and Canada. On the web, we use a small regional policy check based on browser locale and time zone signals to decide whether Google Ads measurement should load. If the browser appears to be outside supported markets, or if browser privacy signals such as Global Privacy Control or Do Not Track are enabled, optional Google Ads measurement is not loaded.
Google Ads measurement helps us understand whether campaigns lead to meaningful actions such as signups, trials, or purchases. RevenueCat remains our source of truth for subscription purchases and entitlement status.
On our mobile apps, we use Google Analytics for Firebase to understand app usage and to measure whether advertising leads to subscriptions. On iOS, advertising signals turn on only if you allow tracking through Apple's prompt (described below) and only in supported markets such as the United States and Canada. On Android, where there is no system tracking prompt, advertising measurement — including the Google Advertising ID — is on by default in supported markets; you can turn it off anytime via the in-app Settings → "Share data for advertising" control. When you make a purchase or change a subscription, our payments provider (RevenueCat) shares that event with Google Analytics so the purchase can be counted as a conversion. RevenueCat remains our source of truth for subscription purchases and entitlement status.
The iOS app uses Apple's App Tracking Transparency framework. We show Apple's tracking prompt after you have started using the app. If you allow tracking, and you are in a supported market, we may use your device's Advertising Identifier (IDFA) to measure ads more precisely. If you do not allow tracking, we still process your purchase and rely only on privacy-preserving, aggregate measurement. Your tracking choice can be changed at any time in iOS Settings → Privacy & Security → Tracking. Allowing or denying tracking never affects your ability to use the app, make purchases, or restore subscriptions.
6. Your Rights and Choices
6.1 Access and Correction
You can view and update your personal information through the App's Settings.
6.2 Data Export
You can export your vehicle and maintenance data at any time through Settings > Data > Export.
6.3 Account Deletion
You can delete your account directly within the App by navigating to Settings > Danger Zone > Delete My Account. The deletion process includes a preview of all data that will be removed, an option to export your data first, and a confirmation step: your password, or a fresh sign-in with Apple or Google if that is how you sign in. For free accounts, deletion is immediate. For paid accounts, deletion is scheduled for when the current subscription period ends. You may cancel a pending deletion at any time before it takes effect.
You may also request deletion by contacting us at privacy@mcglyn.com.
6.4 Communication Preferences
You can manage notification preferences in Settings > Preferences.
6.5 Do Not Track
We respect Do Not Track (DNT) browser settings.
6.6 Advertising Measurement Choices
You may use browser privacy controls such as Global Privacy Control or Do Not Track to prevent optional Google Ads measurement from loading. You may also contact us at privacy@mcglyn.com for questions about advertising measurement choices.
7. Cookies and Tracking
The App uses:
- Essential Cookies: For authentication and security
- Preference Cookies: To remember your settings
- Advertising Measurement Cookies or Similar Technologies: Used only in supported markets such as the United States and Canada to measure Google Ads performance and conversions
We do not enable optional advertising measurement in regions where we have not enabled the required consent and compliance flow.
8. Children's Privacy
The App is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.
9. International Data Transfers
We are based in the United States. If you use the App from another country, your information is transferred to and processed in the United States by us and the service providers listed in Section 4.2.
10. California Privacy Rights (CCPA)
If you are a California resident (CCPA/CPRA), you have the right to:
- Know what personal information we collect
- Request deletion of your personal information
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information
- Non-discrimination for exercising your rights
We do not sell your personal information. We do "share" limited identifiers and advertising/analytics data with Google for cross-context advertising measurement (as described in Section 5). You can opt out of this sharing at any time:
- On iOS: decline Apple's App Tracking Transparency prompt, or turn it off under Settings → Privacy & Security → Tracking.
- On the web: enable Global Privacy Control (GPC) in your browser — we honor it as a valid "Do Not Sell or Share" opt-out request.
- On Android: advertising measurement is on by default; turn it off anytime via the in-app Settings → "Share data for advertising" control — we honor it as a "Do Not Sell or Share" opt-out.
To exercise any of these rights, contact us at privacy@mcglyn.com.
11. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have additional rights:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
- Right to withdraw consent
To exercise these rights, contact us at privacy@mcglyn.com.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the updated policy in the App
- Sending you an email notification
- Updating the "Effective Date" above
For questions about this Privacy Policy or our data practices, contact us at:
McGlyn Consulting, LLC Email: privacy@mcglyn.com
By using Wrench Wise™, you acknowledge that you have read and understood this Privacy Policy.