MOTORHUB - PRIVACY POLICY

Last Updated: February 19, 2026

================================================================================

INTRODUCTION

================================================================================

Welcome to MotorHub. This Privacy Policy explains how we, Andrea Vaiuso ("we," "us," "our"), collect, use, disclose, and protect your information when you use the MotorHub mobile application ("App").

Your privacy is important to us. This policy describes:

- What information we collect

- How we use your information

- How we share your information

- Your rights and choices

- How we protect your information

BY USING THE APP, YOU AGREE TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE THE APP.

================================================================================

1. INFORMATION WE COLLECT

================================================================================

1.1 INFORMATION YOU PROVIDE DIRECTLY

When you create an account or use the App, you may provide:

a) Account Information (via Sign in with Apple):

   - Apple User ID (unique identifier)

   - Email address (may be hidden/private per Apple's privacy features)

   - Name (first name and last name, if provided)

b) Profile Information:

   - Username (unique, chosen by you)

   - Profile picture

   - Date of birth

   - Country

   - Interests and preferences (vehicles, motorcycles, hobbies)

c) Vehicle Information:

   - Brand, model, year, engine type, category

   - VIN (Vehicle Identification Number) and license plate

   - Odometer readings and mileage

   - Purchase price and date

   - Photos of vehicles

   - Service and maintenance records

   - Receipts and documents

   - Notes and custom categories

d) Financial Information:

   - Service costs and expenses

   - Fixed expense reminders (insurance, taxes, etc.)

   - Payment history for vehicle-related expenses

   - Note: Payment card information for subscriptions is processed by Apple and we do NOT store it

e) Marketplace Listings:

   - Listing titles, descriptions, and pricing

   - Contact information (email, phone number)

   - Geographic location (country, latitude/longitude for listings)

   - Photos of items for sale

   - Vehicle history and service records (if shared in listings)

f) Events:

   - Event name, description, date, and location

   - Event type and categories

   - Participant information

   - Event photos and cover images

g) Community Content:

   - Posts, comments, and interactions

   - Reports of inappropriate content

   - Favorites and saved items

h) Communications:

   - Messages and feedback you send to us

   - Support inquiries

   - Reports and complaints

1.2 INFORMATION COLLECTED AUTOMATICALLY

When you use the App, we automatically collect:

a) Device Information:

   - Device type, model, and operating system version

   - Unique device identifiers (IDFA, where permitted)

   - Device settings and preferences

   - Screen resolution and display characteristics

b) Usage Information:

   - Features and functions you use

   - Content you view and interact with

   - Time, frequency, and duration of your activities

   - Navigation paths within the App

   - Search queries and filters

c) Location Information:

   - Approximate location based on IP address

   - Precise location (only when you provide it for marketplace listings, events, or sponsor visibility)

   - Location is NEVER tracked continuously or in the background

d) Performance and Diagnostic Data:

   - Crash reports and error logs

   - Performance metrics (load times, response times)

   - Network connection type and quality

e) Push Notification Tokens:

   - Device push notification tokens (to send you notifications)

1.3 INFORMATION FROM THIRD-PARTY SERVICES

We integrate with third-party services that may provide information:

a) Apple Sign In:

   - Authentication tokens

   - User verification data

   - Apple ID information (as permitted by you)

b) Apple iCloud and CloudKit:

   - Sync status and metadata

   - Data stored in your private iCloud container

c) Google Vision OCR:

   - Photos you choose to scan for odometer readings

   - Extracted text from photos

d) OpenAI:

   - Text you submit for AI-powered features

   - Generated responses and suggestions

e) Cloudflare:

   - Content moderation results

   - Image storage and delivery metadata

f) Apple In-App Purchase / StoreKit:

   - Transaction identifiers

   - Subscription status and entitlements

   - Purchase history

1.4 INFORMATION WE DO NOT COLLECT

We do NOT collect:

- Precise location unless you explicitly provide it for marketplace/events

- Continuous background location tracking

- Payment card numbers (handled by Apple)

- Biometric data

- Health information

- Racial or ethnic origin, political opinions, religious beliefs

- Genetic or biometric data for identification purposes

================================================================================

2. HOW WE USE YOUR INFORMATION

================================================================================

We use your information for the following purposes:

2.1 TO PROVIDE AND IMPROVE THE APP

- Create and manage your account

- Authenticate your identity via Apple Sign In

- Sync your data across your devices via iCloud

- Store your vehicle information, photos, and service records

- Track maintenance schedules and send reminders

- Calculate economic statistics and fuel consumption

- Provide odometer scanning via OCR

- Enable marketplace functionality for buying/selling

- Facilitate community features and events

- Display personalized content and recommendations

- Improve App features, performance, and user experience

- Develop new features and functionalities

2.2 TO PROCESS TRANSACTIONS

- Process and fulfill subscription purchases (via Apple)

- Verify entitlements and access to premium features

- Manage subscription renewals and cancellations

- Sync StoreKit transactions with our servers for entitlement validation

2.3 TO COMMUNICATE WITH YOU

- Send you service-related notifications (e.g., account updates, security alerts)

- Send maintenance reminders and notifications

- Respond to your inquiries and support requests

- Send you promotional communications (you can opt out)

- Notify you about new features and updates

- Send push notifications (you can disable in settings)

2.4 TO ENSURE SAFETY AND SECURITY

- Detect and prevent fraud, abuse, and security threats

- Moderate content using AI to enforce Community Guidelines

- Investigate and respond to violations of our Terms of Use

- Protect the rights and safety of users and third parties

- Comply with legal obligations and enforce our agreements

2.5 TO ANALYZE AND IMPROVE

- Understand how users interact with the App

- Identify usage patterns and trends

- Perform analytics and research

- Troubleshoot technical issues

- Monitor and improve App performance

2.6 FOR LEGAL AND COMPLIANCE PURPOSES

- Comply with applicable laws, regulations, and legal processes

- Respond to lawful requests from public authorities

- Enforce our Terms of Use and other policies

- Protect our legal rights and interests

================================================================================

3. HOW WE SHARE YOUR INFORMATION

================================================================================

We do NOT sell your personal information to third parties.

We may share your information in the following circumstances:

3.1 WITH OTHER USERS (PUBLIC INFORMATION)

Some information is publicly visible when you use community features:

- Username and profile picture

- Marketplace listings (title, description, photos, location, contact info)

- Events you create or join (event details, participation status)

- Community posts and interactions

3.2 WITH SERVICE PROVIDERS

We share information with third-party service providers who perform services on our behalf:

a) Apple (iCloud, CloudKit, Sign In, In-App Purchases)

   - Account authentication

   - Data synchronization across your devices

   - Payment processing

   - Subscription management

b) Cloudflare (Workers, R2 Storage, AI)

   - Backend infrastructure and API services

   - Image and file storage

   - Content delivery

   - AI-powered content moderation (Llama Guard)

c) Google (Vision API)

   - Optical character recognition (OCR) for odometer scanning

   - Photo submitted by you are processed to extract text

d) OpenAI (GPT Models)

   - AI-powered features (e.g., generating descriptions, assistance)

   - Text processing and analysis

These service providers are contractually obligated to protect your information and only use it for the specific purposes we authorize.

3.3 FOR LEGAL REASONS

We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:

- Comply with legal obligations, court orders, or government requests

- Enforce our Terms of Use and other agreements

- Investigate potential violations

- Protect against fraud, security threats, or illegal activity

- Protect the rights, property, or safety of MotorHub, our users, or the public

3.4 BUSINESS TRANSFERS

If we are involved in a merger, acquisition, sale of assets, bankruptcy, or similar business transaction, your information may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice in the App.

3.5 WITH YOUR CONSENT

We may share your information for other purposes with your explicit consent.

3.6 AGGREGATE AND DE-IDENTIFIED DATA

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, or marketing purposes.

================================================================================

4. DATA STORAGE AND RETENTION

================================================================================

4.1 WHERE WE STORE DATA

a) Your Private iCloud Container:

   - Vehicle information and service records

   - Photos and documents

   - Odometer entries

   - Custom categories and service types

   - This data is stored in YOUR private iCloud account and is subject to Apple's iCloud Terms and Privacy Policy

b) Our Servers (Cloudflare Workers and R2):

   - User account information

   - Community posts and interactions

   - Marketplace listings and images

   - Events and participation data

   - Usage analytics and logs

c) Third-Party Services:

   - Temporary processing by Google Vision API (OCR)

   - Temporary processing by OpenAI (AI features)

4.2 HOW LONG WE RETAIN DATA

We retain your information for as long as necessary to provide the App and fulfill the purposes described in this Privacy Policy:

a) Account Information:

   - Retained while your account is active

   - Deleted within 90 days of account deletion (unless required by law)

b) Vehicle and Service Records (iCloud):

   - Retained in your iCloud account until you delete them

   - Deleted when you disable iCloud sync or delete the App data

c) Marketplace Listings:

   - Active listings: retained while active or until you delete them

   - Deleted listings: marked as deleted (soft delete) and removed from public view immediately

   - Permanently deleted after 90 days (for fraud prevention and dispute resolution)

d) Events:

   - Retained until you delete them or 1 year after event completion

   - Past events may be archived for historical purposes

e) Analytics and Logs:

   - Retained for up to 90 days for troubleshooting and security purposes

   - Aggregated analytics may be retained indefinitely in anonymized form

f) Legal Obligations:

   - Some data may be retained longer if required by law, regulation, or necessary for legal proceedings

4.3 DATA DELETION AND ACCOUNT TERMINATION

You have full control over your data and may delete content or your entire account directly from within the App at any time.

a) In-App Account Deletion

MotorHub provides a self-service account deletion function accessible within the App settings. When you initiate account deletion:

- Your account will be permanently deactivated immediately.

- All personal data stored on our servers associated with your account will be permanently deleted from our production databases without undue delay.

- Public content created by you (such as marketplace listings, posts, comments, or events) will be removed from public visibility immediately.

- Associated backend records will be erased or irreversibly anonymized where deletion is not technically feasible or where retention is required for legitimate legal purposes (e.g., fraud prevention, dispute resolution, or legal compliance).

b) iCloud Data

Data stored in your private iCloud container is under your control and governed by Apple’s iCloud terms. When you delete your account:

- MotorHub will delete any server-side references to your iCloud data.

- You may also delete iCloud data directly from your Apple device or iCloud settings if desired.

c) Residual Technical Data

Limited residual data may remain temporarily in encrypted backups, logs, or disaster recovery systems. Such data will be automatically overwritten or deleted according to our retention schedules and will not be used for any operational purpose.

d) Legal Retention Exceptions

We may retain minimal information strictly necessary to:

- Comply with legal obligations

- Resolve disputes

- Enforce agreements

- Prevent fraud or abuse

Such retained data will be restricted, securely stored, and deleted when no longer required.

e) No Email Requirement

You are not required to contact us to delete your account. The deletion functionality available inside the App is sufficient to fully remove your account and associated personal data.

================================================================================

5. DATA SECURITY

================================================================================

5.1 SECURITY MEASURES

We implement industry-standard security measures to protect your information:

a) Encryption:

   - Data transmitted between the App and our servers is encrypted using TLS/HTTPS

   - iCloud data is encrypted both in transit and at rest (per Apple's security standards)

b) Access Controls:

   - Restricted access to personal data (only authorized personnel)

   - Role-based access controls for backend systems

   - Multi-factor authentication for administrative access

c) Secure Infrastructure:

   - Cloudflare Workers provide DDoS protection and secure computing environment

   - R2 storage uses secure, access-controlled buckets

   - Regular security updates and patches

d) Authentication:

   - JWT tokens for API authentication (15-minute expiry)

   - Refresh token rotation (single-use, 30-day expiry)

   - Secure token storage (Keychain on iOS/macOS)

e) Content Moderation:

   - AI-powered moderation to detect harmful content

   - User reporting system for community policing

5.2 LIMITATIONS

WHILE WE TAKE REASONABLE MEASURES TO PROTECT YOUR INFORMATION, NO SYSTEM IS COMPLETELY SECURE. WE CANNOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR DATA.

You are responsible for:

- Keeping your Apple ID and device secure

- Not sharing your account access with others

- Maintaining up-to-date device security (OS updates, passcodes, etc.)

- Immediately reporting any suspected unauthorized access

5.3 DATA BREACHES

In the event of a data breach that affects your personal information, we will:

- Investigate the incident promptly

- Notify affected users without undue delay (as required by law)

- Report to relevant authorities as required by law

- Take steps to mitigate harm and prevent future breaches

================================================================================

6. YOUR RIGHTS AND CHOICES

================================================================================

Depending on your location, you may have certain rights regarding your personal information:

6.1 ACCESS AND PORTABILITY

- You can access your account and vehicle data within the App

- You can export your data (Settings > Export Data)

- You can request a copy of your data by contacting us

6.2 CORRECTION

- You can update your profile information within the App

- You can correct vehicle and service records directly in the App

- Contact us if you need assistance correcting your data

6.3 DELETION

6.3 DELETION

You have the right to delete your personal data at any time.

- You can delete individual vehicles, photos, listings, or events within the App.

- You can permanently delete your entire account directly from the App settings.

- Upon account deletion, all personal data stored in our systems will be erased without undue delay, except where retention is required by law or legitimate legal interests as described in this Privacy Policy.

6.4 OBJECTION AND RESTRICTION

- You can object to certain processing of your data

- You can request restriction of processing in certain circumstances

- Contact us to exercise these rights

6.5 WITHDRAW CONSENT

- Where processing is based on consent, you can withdraw consent at any time

- This will not affect the lawfulness of processing before withdrawal

6.6 OPT-OUT OF COMMUNICATIONS

- You can disable push notifications in your device settings

- You can opt out of promotional emails (but not service-related communications)

6.7 iCloud SYNC

- You can enable or disable iCloud sync at any time in App settings

- Disabling sync will stop data synchronization but won't delete existing iCloud data

- You can delete iCloud data separately through the App or iCloud settings

6.8 DO NOT TRACK

The App does not respond to "Do Not Track" signals, as there is no uniform standard for DNT compliance.

6.9 EXERCISING YOUR RIGHTS

To exercise any of these rights, please contact us using the information in Section 11. We will respond to your request within 30 days.

================================================================================

7. CHILDREN'S PRIVACY

================================================================================

The App is NOT intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are under 13, DO NOT:

- Use the App

- Provide any information to the App

- Create an account

If we learn that we have collected information from a child under 13, we will delete that information promptly.

Parents or guardians who believe we may have collected information from a child under 13 should contact us immediately.

================================================================================

8. INTERNATIONAL DATA TRANSFERS

================================================================================

8.1 Data Transfer

Your information may be transferred to and processed in countries other than your country of residence, including:

- Switzerland (where we are based)

- United States (Cloudflare, Google, OpenAI servers)

- Ireland (Apple iCloud data centers for European users)

8.2 Legal Basis

These countries may have data protection laws that differ from your jurisdiction. We transfer data based on:

- Adequate level of protection (e.g., GDPR adequacy decisions)

- Standard Contractual Clauses (SCCs)

- Your consent

- Necessary for the performance of a contract with you

8.3 Third-Party Compliance

Our service providers (Apple, Cloudflare, Google, OpenAI) comply with applicable data protection regulations, including GDPR and privacy frameworks.

================================================================================

9. GDPR COMPLIANCE (European Users)

================================================================================

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

9.1 LEGAL BASIS FOR PROCESSING

We process your personal data based on:

a) Contractual Necessity:

   - To provide the App and its features

   - To fulfill our obligations under the Terms of Use

b) Legitimate Interests:

   - Improve and develop the App

   - Ensure security and prevent fraud

   - Communicate with you about the App

c) Consent:

   - For optional features (e.g., location-based services)

   - For promotional communications

d) Legal Obligations:

   - Comply with applicable laws and regulations

9.2 YOUR GDPR RIGHTS

In addition to the rights in Section 6, you have:

- Right to lodge a complaint with your local data protection authority

- Right to data portability (receive your data in a structured, machine-readable format)

- Right not to be subject to automated decision-making (we do not use automated decision-making for significant decisions)

9.3 DATA PROTECTION OFFICER

For GDPR-related inquiries, contact us at the email address provided in Section 11.

9.4 EU REPRESENTATIVE

If required by law, we will appoint an EU representative. Contact details will be provided here when applicable.

================================================================================

10. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

================================================================================

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

10.1 CATEGORIES OF INFORMATION COLLECTED

See Section 1 for detailed categories.

10.2 PURPOSES OF USE

See Section 2 for purposes.

10.3 DISCLOSURES

We do NOT sell your personal information.

We disclose information to service providers as described in Section 3.

10.4 YOUR CALIFORNIA RIGHTS

You have the right to:

a) Know what personal information we collect, use, and disclose

b) Request deletion of your personal information

c) Opt out of the sale of personal information (we don't sell)

d) Non-discrimination for exercising your rights

10.5 EXERCISING YOUR RIGHTS

To exercise your California privacy rights, contact us using the information in Section 11.

We will verify your identity before processing your request.

10.6 AUTHORIZED AGENTS

You may designate an authorized agent to submit requests on your behalf. We will require proof of authorization.

10.7 SHINE THE LIGHT LAW

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

================================================================================

11. CONTACT US

================================================================================

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: Available at https://sites.google.com/view/andrea-vaiuso-app/privacy

Developer: Andrea Vaiuso

Location: Italy

We will respond to your inquiry within 30 days.

For GDPR or CCPA-specific requests, please specify this in your message.

================================================================================

12. CHANGES TO THIS PRIVACY POLICY

================================================================================

We may update this Privacy Policy from time to time to reflect:

- Changes in our practices

- Changes in applicable laws

- New features or functionalities

- Feedback from users

12.1 NOTIFICATION OF CHANGES

When we make material changes, we will:

- Update the "Last Updated" date at the top of this policy

- Notify you via email (if we have your email address)

- Display a prominent notice in the App

- Request your consent if required by law

12.2 YOUR CONTINUED USE

Your continued use of the App after changes become effective constitutes your acceptance of the updated Privacy Policy.

12.3 REVIEW REGULARLY

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

================================================================================

13. THIRD-PARTY LINKS AND SERVICES

================================================================================

The App may contain links to third-party websites, services, or resources:

13.1 THIRD-PARTY PRIVACY POLICIES

We are not responsible for the privacy practices of third parties. Their collection and use of your information is governed by their own privacy policies.

13.2 THIRD-PARTY SERVICES WE USE

- Apple: https://www.apple.com/legal/privacy/

- Cloudflare: https://www.cloudflare.com/privacypolicy/

- Google: https://policies.google.com/privacy

- OpenAI: https://openai.com/policies/privacy-policy

We encourage you to review their privacy policies.

================================================================================

14. AUTOMATED DECISION-MAKING AND PROFILING

================================================================================

14.1 CONTENT MODERATION

We use AI-powered content moderation (Cloudflare Workers AI - Llama Guard) to automatically review marketplace listings and community posts for policy violations.

This automated processing may result in:

- Flagging content for manual review

- Temporary suspension of content until reviewed

- Rejection of content that violates guidelines

You have the right to:

- Request human review of automated decisions

- Appeal content moderation decisions

- Contact us to dispute automated actions

14.2 NO SIGNIFICANT AUTOMATED DECISIONS

We do NOT use automated decision-making for decisions that significantly affect you (e.g., account termination, subscription eligibility) without human oversight.

================================================================================

15. DATA MINIMIZATION AND ACCURACY

================================================================================

15.1 DATA MINIMIZATION

We collect only the information necessary to provide and improve the App. We do not collect excessive or irrelevant data.

15.2 DATA ACCURACY

You are responsible for ensuring the accuracy of information you provide. We provide tools within the App for you to update and correct your information.

If you identify inaccuracies, please update your information or contact us for assistance.

================================================================================

16. YOUR RESPONSIBILITIES

================================================================================

By using the App, you agree to:

a) Provide accurate and truthful information

b) Keep your account credentials secure

c) Not share your account with others

d) Comply with applicable data protection laws when posting content about others

e) Respect the privacy of other users

f) Not post personal information about others without their consent

g) Report security vulnerabilities or data breaches to us promptly

================================================================================

ACKNOWLEDGMENT

================================================================================

BY USING MOTORHUB, YOU ACKNOWLEDGE THAT:

- You have read and understood this Privacy Policy

- You understand how we collect, use, and share your information

- You consent to the practices described in this Privacy Policy

- You understand your rights and how to exercise them

- You understand that iCloud data is subject to Apple's privacy practices

- You understand the risks of sharing information in public community features

================================================================================

PLEASE PRINT OR SAVE A COPY OF THIS PRIVACY POLICY FOR YOUR RECORDS.

Last Updated: February 19, 2026

Version: 1.0