Privacy Policy

This Privacy Policy describes how Torq (“we,” “us,” or “our”) collects, uses, and shares information when you use the Torq mobile app and the torqapp.co website (the “Service”).

1. Information we collect

You provide

• Account information — email address and, where applicable, a display name when you sign up.
• Garage data — the vehicles you save (year, make, model, engine, trim) and your unit preference.
• Contributions — specs, corrections, upvotes, flags, and any comments you submit.
• Support communications — content of messages you send to support@torqapp.co.

Collected automatically

• Device and app data — app version, OS version, device model, locale, and crash diagnostics necessary to keep the app running.
• Authentication tokens— used to keep you signed in; stored on your device with the OS's secure storage (Keychain on iOS).

Collected by our service providers

• Apple App Store — handles purchase, billing, and account identifiers; we never see your payment-card data.
• RevenueCat — receives a pseudonymous subscriber ID to manage your subscription entitlements.
• Supabase — stores your account, garage, and Contributions on encrypted infrastructure we control.

What we do not collect: we do not use third-party advertising SDKs, we do not load analytics or tracking scripts on torqapp.co, and we do not sell or share personal information with data brokers or advertisers.

2. How we use information

• To provide the Service — show specs, sync your garage, validate your subscription.
• To improve the Service — diagnose crashes, fix bugs, prioritize features based on aggregated, non-identifying usage signals.
• To moderate Contributions — review submissions for accuracy and policy compliance.
• To communicate — answer your support requests; send infrequent, transactional emails (e.g., subscription receipts forwarded by Apple, account-security notices).
• To comply with the law and protect rights.

3. Legal bases (EEA/UK)

Where the GDPR applies, we process your information under these legal bases: performance of a contract (providing the Service you requested), legitimate interests (security, fraud prevention, product improvement balanced against your rights), consent (where required by law and obtained separately), and legal obligation (responding to lawful requests).

4. Sharing

We share information only with:

• Service providers who help us operate the Service (Apple, Supabase, RevenueCat, Vercel, email infrastructure). They process information on our behalf and under contractual confidentiality and security obligations.
• Legal authorities when required by law, court order, or to protect rights, property, or safety.
• In a business transfer — if Torq is acquired or merged, your information may transfer to the successor entity subject to this Policy.

We do not sell or rent personal information.

5. Data retention

We keep your account and garage data for as long as your account is active. If you delete your account, we delete or anonymize associated personal information within 30 days, except where retention is required by law, for security investigations, or to enforce these Terms. Public Contributions (e.g., upvoted specs) may remain in anonymized form.

6. Security

We use industry-standard safeguards: TLS in transit, encryption at rest for our database, row-level security on multi-tenant tables, and secure storage of credentials on-device. No system is perfectly secure; we encourage you to use a strong, unique password and to enable device-level passcode and biometrics.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise any of these rights, email privacy@torqapp.co. We respond within 30 days.

California residents may exercise rights under the CCPA/CPRA, including the right to know what we collect, the right to delete, and the right to opt out of “sharing” as defined by California law. We do not sell personal information and have not done so in the preceding 12 months.

8. International transfers

Torq is operated from the United States. If you access the Service from outside the U.S., you understand that information will be transferred to and processed in the U.S. and other countries where our service providers operate. Where required, we use standard contractual clauses or other legal mechanisms to safeguard transfers.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has provided us with personal information, email privacy@torqapp.co and we will delete it.

10. Cookies and the website

torqapp.co is a static marketing site. It does not set tracking cookies, does not load third-party analytics, and does not embed advertising scripts. Your browser may store local preferences (e.g., dark-mode setting) but no information that identifies you is sent to us from the website.

11. Changes

We may update this Policy from time to time. Material changes will be posted here with a new effective date. Continued use of the Service after the change takes effect constitutes acceptance.

12. Contact

Privacy questions or requests: privacy@torqapp.co.