JockeyBox ("we," "our," or "us") is developed and maintained by SunBroLynk. This Privacy Policy explains how we handle your information when you use the JockeyBox mobile application (the "App").
1. The Short Version
JockeyBox stores your vehicle data on your device. We don't collect personal information, we don't serve ads, and we don't sell data. The only data that leaves your device is anonymous crash reports, basic usage analytics, and optional community parts submissions.
2. Data Storage
All vehicle records, service logs, fuel logs, reminders, photos, and settings are stored locally on your device using an on-device database. This data never leaves your device unless you explicitly choose to share it.
We do not operate cloud servers that store your personal maintenance data. We do not have access to your records, photos, VINs, license plates, or any other vehicle information you enter.
3. Crash Reporting & Analytics
JockeyBox uses Google Firebase Crashlytics to automatically collect crash reports when the App encounters an error. Crash reports include:
- Device type and operating system version
- Stack trace (technical details about where the error occurred)
- App version
- Crash timestamp
Crash reports do not include your vehicle data, service records, photos, VINs, license plates, or any personal information you enter into the App.
JockeyBox also uses Google Firebase Analytics to collect anonymous usage data such as:
- App opens and session duration
- Feature usage patterns (which screens are visited)
- Device type and operating system version
- General geographic region (country level, not precise location)
Analytics data is aggregated and anonymous. It helps us understand how the App is used so we can improve it. We do not use this data for advertising or share it with third parties for marketing purposes.
Both Crashlytics and Analytics are subject to Google Firebase's Privacy Policy.
4. Community Parts Catalog
JockeyBox includes an optional community parts catalog where users can share which parts they used for their vehicles. When you log a service with parts, the App may submit the following to our community database:
- Part name, brand, and part number
- Part category (e.g., "Oil Filter")
- Vehicle year, make, model, and engine type
- Price and store name
- UPC/barcode (if scanned)
This submission is anonymous. We do not collect or associate any of the following with parts submissions:
- Your name or email address
- Your device ID or IP address (beyond what is technically necessary for the HTTP request)
- Your VIN or license plate
- Your location
- Any account credentials
You can disable community sharing in the App's settings.
5. VIN Decoding
When you scan or enter a VIN, the App sends it to the National Highway Traffic Safety Administration (NHTSA) public API to decode vehicle information. This is a direct request from your device to a U.S. government service. We do not proxy, log, or store these requests.
6. Vehicle Data
The App includes bundled databases of vehicle years, makes, models, and engine options sourced from the U.S. Environmental Protection Agency (EPA) fuel economy dataset and the NHTSA vehicle catalog. This data is stored within the App itself and requires no network requests.
7. Device Permissions
JockeyBox may request the following device permissions:
- Camera — To scan VIN barcodes, scan UPC barcodes when searching for parts in the community catalog, and capture receipt or service photos. Photos are stored locally on your device only.
- Storage / Photos — To save and retrieve photos you attach to service records.
- Internet — To query the NHTSA VIN decoder, search the community parts catalog, submit anonymous parts data, send crash reports and analytics, and optionally back up your data to cloud providers you connect.
- Notifications — To deliver maintenance reminders you have set.
We do not access your contacts, call history, microphone, or location.
8. Third-Party Services
The App uses the following external services:
- Google Firebase Crashlytics — Automatic crash reporting. Subject to Firebase Privacy Policy.
- Google Firebase Analytics — Anonymous usage statistics. Subject to Firebase Privacy Policy.
- NHTSA vPIC API (vpic.nhtsa.dot.gov) — VIN decoding. Operated by the U.S. Department of Transportation. Subject to their privacy policy.
- JockeyBox Community Parts API (db.jockey-box.app) — Anonymous community parts data. Operated by SunBroLynk. Collects only the anonymous parts data described in Section 4.
- Cloud Backup Providers (optional) — If you choose to connect Google Drive, Dropbox, or OneDrive, backup files are stored directly in your own account on those services. If you connect WebDAV or SFTP, backups are stored on your own server. We have no access to any of these accounts or the backup files stored within them. These connections are entirely optional and user-initiated.
We do not use advertising SDKs, Facebook SDK, or any third-party tracking tools beyond what is listed above. We do not serve ads.
9. Data Sharing
We do not sell, rent, or trade your personal information. We do not share your data with third parties for advertising purposes. Data may be shared only when required by law or to protect our legal rights.
10. Data Deletion
Since your vehicle data is stored locally on your device, you can delete all data at any time by uninstalling the App or clearing the App's data through your device settings. Individual records can be deleted within the App at any time.
Community parts submissions are anonymous and cannot be traced back to you or individually deleted. Crash reports and analytics data are retained by Google Firebase according to their standard retention policies.
11. Children's Privacy
JockeyBox is not intended for users under the age of 13. We do not knowingly collect personal information from children. If we discover that a child under 13 has provided personal information, we will delete it promptly.
12. Your Rights
For All Users
- Delete your vehicle data by uninstalling the App or clearing app data
- Delete individual records within the App
- Disable community parts sharing in settings
- Disable push notifications through device settings
For EU/EEA Residents (GDPR)
You have additional rights including data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. Since we do not collect personal vehicle data on our servers, these rights primarily apply to crash reports and analytics data processed by Google Firebase.
For California Residents (CCPA)
You have the right to know what personal information we collect, request deletion of your data, and opt out of any sale of personal information. We do not sell personal information.
13. Changes to This Policy
We may update this Privacy Policy when new features are added. Changes will be posted on this page with an updated revision date. Continued use of the App after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
Email: privacy@jockey-box.app
Developer: SunBroLynk