This policy explains what Grailbox (“we”, “us”) collects when you use the app and website, why, and what your choices are. We follow the Australian Privacy Principles.
What we collect
- Your account: your email address and a password (stored scrambled, so we can't read it), plus the handle, display name, picture, banner, bio and location you choose to add.
- Your collection: the cars in your garage, the photos you add, what you paid, condition, notes, shelves, your Hunt list and any cars you list for sale or trade.
- Your activity: follows, reactions, deals and reviews, crew and event membership, and the messages you send and receive.
- Feedback and reports: what you write when you send feedback or report someone, plus the page you were on and your phone and browser type, so we can fix problems.
- Notifications: if you turn them on, the address your phone or browser gives us so we can send them to you.
- Payments: if you go Pro, Stripe handles your payment. We never see or store your card number. We keep a Stripe customer and subscription reference and whether your plan is active.
- Basic usage: anonymous page-view statistics from Vercel Analytics, which doesn't use tracking cookies. The app also uses a sign-in cookie and a couple of preference cookies to work.
How we use it
- To run the app: show your garage, value your cars, message other collectors and send notifications you asked for.
- To look after people: handle reports, block abuse and keep the community fair.
- To fix and improve Grailbox, using feedback and anonymous statistics.
- To take payment for Pro and to tell you about your plan.
- To email you about your account (such as confirming your email or resetting a password), and occasionally about important changes. We don't send marketing spam.
Who can see what
- Your garage is visible to others only if you turn on the public garage setting. You can switch it off any time in Settings.
- Your profile (handle, display name, picture, bio and location text) can be seen by other collectors.
- Messages are between you and the person you're talking to. Crew chats are seen by that crew's members.
- Photos you share to a car's community page are shown to everyone, once approved, with the car.
- Grailbox admins can see what's needed to run and support the app, such as feedback and reports. We don't browse private messages.
Who we share it with
We never sell your personal information. We use a small number of services to run Grailbox, and they handle data for us under their own privacy terms:
- Supabase: our database, sign-in and photo storage.
- Vercel: hosting the app, and anonymous usage statistics.
- Stripe: Pro payments.
- eBay: we look up public eBay listings to estimate prices (no personal information is sent). Some “Find it on eBay” links may be affiliate links, so we could earn a small commission if you buy. eBay may set its own cookies when you open them.
- Apple, Google and Mozilla: their push services deliver notifications to your phone or browser.
Some of these services store data outside Australia. We may also share information if the law requires it, or to protect people from harm.
Keeping and deleting it
We keep your information while your account is open. To leave, go to Settings and tap Delete my account. That permanently removes your garage, photos, Hunt list, messages, profile and billing record, and cancels any Pro subscription. Routine backups may hold a copy for a short time before they expire. Feedback you sent is kept without your name attached.
Your rights
You can ask to see the information we hold about you, or to correct it. Most of it you can already edit in the app. Email us at yamsstudiosaus@gmail.com and we'll reply as soon as we can. If you're unhappy with how we've handled something, tell us first. You can also contact the Office of the Australian Information Commissioner (oaic.gov.au).
Security
We take reasonable steps to protect your information, including encrypted connections and access rules in our database that stop one person reading another's private data. No system is perfectly secure, so please use a strong, unique password.
Age
Grailbox is for people aged 13 and over.
Changes
If we change this policy in a way that matters, we'll update the date above and tell you in the app.
Contact
Questions about privacy? Email yamsstudiosaus@gmail.com.