Privacy information

Information used by Garage

Depending on the features you choose to use, Pitstate processes:

• Your email address, account identifier and authentication information when you create or use a Pitstate account.
• Vehicle identification, mileage, component, service, setup, session, cost and event information that you enter.
• Written notes, receipts, images and documents that you deliberately attach to a record.
• Location information when you start a GPS or circuit-session feature and grant permission.
• Messages and contact details when you email Pitstate for support, data requests or partnership enquiries.

Receipts, photos and notes can contain other people's details. Avoid adding information that is unnecessary and review personal details before sharing a file or Passport.

How information is used

Information is used to provide the functions you request, authenticate and protect your account, keep your vehicle records, synchronise your Garage, carry out approved Passport handovers and respond to enquiries. Pitstate does not sell personal information.

Maintenance reminders and interval estimates use the records and rules you select. They are planning aids, not mechanical inspections, safety certificates or verified manufacturer schedules for every vehicle.

Your account, cloud records and device copies

Garage 1.9 stores vehicle records and private attachments in your signed-in account's cloud Garage, with a separate cache on each device. Offline changes wait for sync; conflicting edits may need your review. Check Garage sync for pending uploads before changing devices. Earlier device-only records need an explicit import into the chosen account.

Garage and Pitstate Pro are separate products using the same Pitstate sign-in. Deleting Garage vehicles does not delete that shared login or Pro records. A request to delete the entire Pitstate account must consider both products.

Keep a private exported backup of important records and attachments. A complete Garage backup contains more information than a selected Passport package and should not be given to a buyer as if it were only that vehicle's handover.

Location and device permissions

Location is accessed after device permission is granted for features such as circuit detection and session recording. Precise route-map upload is optional and off by default; recorded distances and session summaries still sync. You can change permissions in device settings and remove saved route traces using Garage's data controls.

Camera and photo access support the images you choose to attach. Optional device unlock uses Apple's local authentication; Pitstate does not receive your Face ID or Touch ID template.

Passport sharing

A Passport handover starts with a seller key, a buyer request and your separate final approval. The approved buyer receives access to that vehicle's app record, including its structured history, usage and settings. Only selected files and opted-in written notes are included. Raw GPS routes, login credentials and unrelated vehicles are excluded.

Review the buyer and every field or file you intend to share. File contents and image metadata are not automatically redacted. Excluded files stay private to the seller; copies already exported by another person cannot be remotely recalled. A Passport is not proof of legal ownership, verified servicing or vehicle condition.

Recovery, retention and deletion

Scheduled cleanup removes server recovery snapshots older than 30 days; an interruption or backlog can delay removal. That cleanup does not delete active vehicle records, retained files, handover audit records, local recovery copies or exported backups.

Deleting a vehicle or all Garage records removes active Garage access after sync. Signing out hides that account's records on the device. Neither action deletes your shared Pitstate account or all retained copies. The kept-files screen supports download and export; it does not provide complete file erasure.

To close your account, open Settings → Data & privacy → Delete Pitstate account in Garage. You can export your records first. The app requires fresh password verification and a final confirmation, then shows the request's progress. Completed deletion removes your owned Garage cloud records, retained private files and recovery records, your shared Pitstate login and the verified account's copies managed by Garage on that device.

Pro memberships, shared team references and completed handovers can require protected review before deletion proceeds. Other people's team content and buyer-owned vehicles and files are preserved. A request awaiting review or with failed cleanup remains visibly incomplete. The operational target is seven calendar days from the request, including review; it is not a guarantee of immediate or universal erasure. Progress and any overdue status remain available in the app.

Copies saved or shared outside Garage cannot be remotely recalled. Older temporary exports that cannot be reliably linked to your account are kept for manual review. De-identified deletion request records remain for operational audit, and providers may retain logs or recovery copies under their own arrangements. The 30-day Garage snapshot rule does not apply to every category of information. Contact Pitstate below for access, correction or help with a wider data request. The complete beta notice will set out the legal operator and final retention arrangements before outside invitations.

Service providers

Supabase provides Pitstate account authentication, Garage cloud records and private file storage. Resend delivers branded account-confirmation and password-reset emails, processing the recipient address, message content and delivery information. Google Workspace is used for business communications. The website host processes information needed to deliver and protect this website.

Garage's core Supabase database, authentication and file storage are hosted in London. Provider support, operational processing and content delivery can take place outside that region. Resend stores email content and delivery logs in the United States; its Ireland sending region controls routing rather than storage location. Resend describes transfer safeguards including Standard Contractual Clauses and the UK Addendum. See the providers' Supabase data-location information and Resend privacy and retention information.

Supabase's published Free-plan log access is one day; this is not an erasure deadline for every internal log or recovery copy. Resend publishes 30-day email and log retention on its Free plan and seven-day backup retention. Deleting a Pitstate account does not itself purge earlier messages from Resend or recipients' mailboxes. Specific earlier removal can require provider assistance. These published provider defaults do not establish a universal retention period for all Pitstate information.

Production registration lookup remains disabled pending supplier setup. Manual vehicle entry does not need a paid lookup. Automotive, retail and event integrations require their own authorised arrangements; Pitstate does not send your information to them merely because they appear as future integration areas on this site.

This website

This website does not use advertising trackers, marketing cookies or mailing-list collection. Standard security and delivery logs may be processed by the website host. Garage does not include an advertising identifier or analytics SDK in the current build.

Contact and requests

For a privacy question or an access, correction or deletion request, email partnerships@pitstate.co.uk. Please identify the product and the records concerned; do not send passwords or login tokens.

You can also raise a data-protection concern with the Information Commissioner's Office.