OnlyCars Privacy Policy
This Privacy Policy describes how OnlyCars (“we”, “us”, or “our”) — operated by Chu Wang — handles information when you use the OnlyCars mobile application.
Information We Collect
- Device Identifier. We generate and store a random device ID on your device to associate your garage with your device without requiring an account. This ID is never linked to your name, email, or any personally identifiable information unless you choose to sign in.
- Account Information (optional). If you sign in with Apple or Google, we receive a user identifier (sub) and, optionally, your email address from that provider. We use this to sync your garage across devices.
- Garage Data. We store the list of car IDs you have saved to your garage on our servers (AWS DynamoDB) to enable syncing and persistence.
- Purchase Records. If you make an in-app purchase, we store the store-issued transaction ID, the product ID, and your account identifier so we can credit the purchase, prevent replay fraud, and honor App Store / Play Store refunds. Records expire automatically after 90 days. We do NOT receive or store your card number, billing address, or any other payment data. Apple and Google handle the actual payment.
- Push Notification Token. If you enable push notifications, we store the Expo push token issued for your device so we can send you content and re-engagement notifications. This token is per-device, not per-account.
- Browsing Activity. We track which cars you have viewed within a browsing session to power the deck rotation feature. This data is tied to that session, used only to refresh your feed, and expires automatically.
Information We Do Not Collect
We do not collect your precise location, contacts, camera or microphone access, browsing history outside the app, or any payment information. We do not sell, rent, or share your information with third-party advertisers.
How We Use Your Information
- To store and sync your garage across your devices
- To personalize your browsing session (deck rotation)
- To allow you to sign in and associate your garage with your account
- To respond to support requests you send us by email
Data Storage & Security
Your data is stored on AWS infrastructure (DynamoDB, S3) located in the United States. Authentication tokens are stored securely on your device using the platform's secure enclave (iOS Keychain / Android Keystore). Session data expires automatically.
Third-Party Sign-In
If you use Sign in with Apple or Sign in with Google, your sign-in is governed by Apple's and Google's respective privacy policies. We only receive the information described under “Account Information” above.
Children's Privacy
OnlyCars is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
Your Rights
You may permanently delete your account at any time from within the app (Menu → About → Privacy Policy → Delete Account). The action cannot be undone and removes your sign-in account, garage, progression, profile, in-app purchase records, and the push token / session for the device you delete from. It does not cancel an auto-renewable subscription (billed by Apple or Google) — cancel that separately in your store account.
For other privacy questions, contact us at only.cars.app.ai@gmail.com.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date above.