ceraspec-privacy-policy

Privacy Policy for CeraSpec

Last Updated: April 30, 2026

Our top priority is your privacy. This page is used to inform visitors regarding our policies regarding the collection, use, and disclosure of Personal Information if anyone decides to use our Service. If you choose to use our Service, then you agree to the collection and use of information in relation to this policy.

1. Information Collection and Use

To provide and improve the CeraSpec experience, we require certain personal information. The data we collect depends on how you use the app:

2. Third-Party Services

Our app utilizes third-party services to handle data storage, analytics, and in-app purchases. These services may collect information used to identify you, process payments, and manage your subscription. Google Firebase: We use Firebase for authentication, database hosting (Firestore), file storage (Storage), and analytics. You can read Google’s Privacy Policy here: https://policies.google.com/privacy RevenueCat: We use RevenueCat to manage in-app purchases and subscriptions. RevenueCat receives receipt data from app stores to validate purchases and may collect anonymous user IDs and purchase history. RevenueCat’s Privacy Policy: https://www.revenuecat.com/privacy App Stores (Apple & Google): All financial transactions are processed securely by the Apple App Store or Google Play Store. We never see, collect, or store your credit card information.

3. Log Data and Crash Reporting

If the app crashes, we may collect log data and crash reports (which may include device IP address, device name, OS version, and the time/date of the crash) to diagnose and fix technical issues. This data is generally anonymous and used strictly for improving app stability. Granular Location Data: To help us understand our user base and improve regional app performance, Firebase Analytics may collect coarse location data (such as city, latitude, and longitude of the city) derived from your IP address. This data is aggregated and does not identify your exact street address. You can opt-out of this tracking by [Instruction: e.g., “disabling ‘Analytics’ in the app settings” or “adjusting your device’s privacy permissions”]

4. Security

We value your trust in providing us with your information. Data transmitted to and stored within Firebase is protected using industry-standard encryption protocols (such as encryption in transit and at rest). However, remember that no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. We urge you to use a strong password and keep your device secure. Data Breach Procedures: In the event that personal information is compromised as a result of a breach of security, we will promptly notify those persons whose personal information has been compromised, in accordance with applicable law.

5. Your Data Protection Rights Under US State Laws (CCPA, CPRA, VCDPA, etc.)

Depending on your state of residence (including California, Virginia, Colorado, Connecticut, Texas, and others), you may have specific rights regarding your personal data: • The Right to Know/Access: You have the right to request information about the specific personal data we have collected about you. Effective 2026, your right to request access to your personal information is no longer limited to the preceding 12 months. You may request a report of all personal data we have collected and retained about you since January 1, 2022. • The Right to Delete: You have the right to request the deletion of your personal data stored on our servers. You can request account deletion directly within the app settings or by contacting us. • The Right to Correct: You can edit most of your data directly within the CeraSpec app. • The Right to Opt-Out of Sale or Sharing: We do not sell your personal data to third parties. • The Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. Note regarding financial data: To exercise rights concerning your financial transactions or subscription status, please submit requests directly to the Apple App Store or Google Play Store.

6. Your Data Protection Rights Under GDPR and UK GDPR

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have certain data protection rights. Our legal bases for processing your data include the Performance of a Contract (to provide core app functionalities via Firestore/Auth/Storage) and Consent (for analytics). • The Right to Access, Update, or Delete: You can update your records in the app, or request complete account erasure by contacting us. • The Right of Data Portability: You have the right to be provided with a copy of your personal data in a structured, machine-readable format. • The Right to Withdraw Consent: You can withdraw your consent for analytics tracking via your device settings or app settings. • International Data Transfers: Because our cloud provider (Google Firebase) operates globally, your data may be transferred to and processed in countries outside of the EEA (such as the United States). These transfers are protected by standard contractual clauses and appropriate safeguards.

7. International Privacy Rights (Including PIPEDA and LGPD)

If you are a resident of Canada, Brazil, or other jurisdictions with comprehensive data protection laws, you maintain rights to access, rectify, and request the erasure of your personal data. Please contact us to exercise these rights regarding the data stored on our servers.

8. Data Retention and Appeals

• Data Retention: We retain your account information and app data (Firestore/Storage) for as long as your account is active. If you delete your account, your personal data will be purged from our active databases within a reasonable timeframe, subject to legal obligations. • Right to Appeal: If you believe a data privacy request was not adequately addressed, you may appeal by contacting support@CeraSpec.com with the subject “Privacy Appeal.”

9. Children’s Privacy

These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. If we discover that a child under 13 has provided us with personal information, we will immediately delete this from our servers.

10. Camera & Photo Library Access

The App requires access to your device’s camera and/or photo library to function. • Purpose: The camera and library are used to capture or upload images (such as vehicle records or receipts) into the App. • Processing & Storage: Unlike earlier versions of CeraSpec, images you upload are securely transmitted to and stored on our cloud servers (Firebase Storage) so you can access them across devices.

11. User Responsibility: Protecting Your Privacy

While we take data security seriously, we encourage you to be mindful of the information contained within the images you capture. • Redacting Personal Information: Before uploading photos of documents (such as vehicle titles or registration), we strongly recommend redacting sensitive personal details, including your home address, social security numbers, and financial info. • Sanitize Before Sale: If you intend to transfer your vehicle, please review your stored images and delete any that contain information you do not wish to share with the new owner. • User-Generated Content and Identifiers: You are solely responsible for the information and images you upload to the Service. This includes, but is not limited to, images containing Vehicle Identification Numbers (VINs), license plate numbers, geographical locations from events, or faces. While we secure your data on our cloud servers, we do not monitor or actively redact user-uploaded content. By uploading this data, you consent to its storage on our servers. • No Active Monitoring: While we implement industry-standard security measures to protect data stored on our cloud servers (Firebase), we do not actively monitor, audit, or redact user-uploaded content for PII (Personally Identifiable Information). By uploading this data, you acknowledge that it is your responsibility to ensure you have the right to share such information and that it does not violate any local privacy laws.

12. Business Transfers

If CeraSpec, or substantially all of its assets, were acquired, or in the unlikely event that we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of CeraSpec may continue to use your personal information as set forth in this policy.

13. No Professional Advice & Safety Warning

• For Information Only: All content provided through the Service is for informational and organizational purposes only. We are not a licensed automotive repair facility, and the Service does not provide professional mechanical, engineering, or safety advice. • Consult a Professional: You should always consult with a certified mechanic or the vehicle manufacturer before performing modifications or maintenance. • Assumption of Risk: You acknowledge that vehicle modification and track-day activities are inherently dangerous. You assume all risk for any property damage, personal injury, or death resulting from the use of information stored or viewed within the App. • No Reliance: We do not warrant the accuracy of any maintenance schedules, torque specs, or modification guides stored by you or other users.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.

15. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at: • Email: support@papamog.com • Discord: Open a ticket with us at https://discord.gg/PvSxeTEg • Web: https://privacy-policy.ceraspec.com