Local by default
Opening the App does not upload the Garage.
DRILOREPrivacy by design
Your vehicle data serves you — not an advertising profile.
The important answer appears first. Expand the exact data map, owner controls or future requirements when you need the complete policy boundary.
Drilore Privacy Policy
Effective 6 October 2026. Drilore Pty Ltd operates Drilore. This policy covers the current local-first app, this website and our limited TestFlight beta. Speed/enforcement-camera alerts are temporarily unavailable in the current iOS TestFlight version; this does not disable your phone camera or invoice scanning, or describe every earlier or Android build.
Privacy requests, complaints and beta feedback: chris.jiang@binggowheels.com.au. Do not send a VIN, registration plate, invoice, backup password or other personal information unless it is needed for your request.
No ad business
No behavioural advertising profile or sale of Garage records.
Purpose before collection
Online requests use only the practical fields for that result.
Owner-controlled sharing
Backup, export and sharing remain deliberate actions.
The honest wording
We do not require a personal profile. Vehicle information can still be personal.
A Rego, VIN, vehicle photo, receipt, IP address or location can identify or relate to a person in context. Drilore therefore treats linkable vehicle data with personal-information care even when the core Garage does not ask for the owner’s name, birth date or contacts.
01 · CURRENT PRODUCTWhat exists, where it goes and how long it mattersOpen data map +
InformationWhere it goesControl or retention
Vehicle profile: make, model, Rego, VIN, photo, mileage and due datesApp-private storage on your deviceUntil you edit it, delete the App data or replace it with a restored Garage
Expenses, work items, up to 12 invoice photos per service/repair, membership cards and service historyApp-private storage; invoice text recognition runs on-deviceEditable drafts require your review; local recovery copies and OS-backup differences are explained below
Speed/enforcement-camera alerts in this iOS TestFlight versionTemporarily disabled; no camera-alert location monitoring, background tracking or reminder audioOrdinary vehicle and invoice photography and on-device text recognition remain available
Existing custom camera voice recordings from earlier versionsRetained on the original device; recording controls are unavailable in this iOS TestFlight versionNot uploaded; excluded from Garage export and OS backup. Versions with recording controls support individual deletion; removing the app removes its local files
Vehicle recall checksMake goes to the Drilore API; relevant official VIN lists are downloaded for on-device matchingVIN stays on-device for this check; no notice is not a no-recall certificate
Vehicle widget summaries, thumbnails and cached weatherOn-device widget storage; iOS uses an app-group containerCan be visible outside the app or on a lock screen; refresh and visibility depend on the OS
Encrypted Garage backupA file destination you chooseControlled by you and that storage provider; Drilore 1.1 cannot recover a lost password
Fuel or charging nearby requestLocation coordinates go to the Drilore API, then FuelCheck or Open Charge Map as required. A typed fuel-search place is geocoded using Apple services before the resulting coordinates are queriedUsed to return results; not automatically converted into a Garage record
Current weather requestCurrent coordinates go directly to Open-Meteo after location permission; weather may refresh when you open or return to the appCurrent condition cached on device; no persistent Drilore location history
Car-wash searchApple Maps on iPhone or the installed map service on Android when openedHandled under that provider’s terms; no Drilore wash-directory profile
CSV exports and generated sharing imagesA file destination or recipient you chooseCSV may include vehicle identifiers, supplier contacts and notes; included photos may identify a plate or person. Review before sharing
Website calculator valuesThis browser pageUsed for the on-page result and not saved to a Drilore account
Network and security metadataHosting and API infrastructure, including anonymous app sessions; Drilore stores hashes derived from IP addresses/session identifiers with request categories, counts and expiry times for rate limitingThese security counters persist in the service database; expired entries are cleaned during later requests, not necessarily at the exact expiry time. They do not contain the private Garage
TestFlight testing and feedbackApple processes beta usage and crash information and makes testing information and submitted feedback available to the developerReview feedback and screenshots before sending; they can contain personal or vehicle information. Apple controls its TestFlight retention under its policy
The Drilore API is hosted on Railway. Online providers include Open-Meteo, NSW FuelCheck, Open Charge Map, Apple geocoding/maps and the Australian Government Vehicle Recalls service. Hosting and data providers can process IP addresses and operational logs under their own policies, including outside Australia; Drilore does not promise Australian-only processing or a retention period it cannot control. The website uses hosting infrastructure separate from the private on-device Garage.
The charging service caches nearby public results in memory, keyed by coordinates rounded to three decimal places, radius and result limit. Entries are no longer used after five minutes, with a limit of 256 entries; expired entries are removed on a later charging request or process restart. This is not a persistent route history or a server copy of your Garage.
02 · OWNER CONTROLSAccess, correct, export, restore and deleteOpen controls +
Access and correction
Review and edit local Garage records, including earlier invoice mistakes. Recognition is on-device assistance, not independent verification. Suggested maintenance needs owner review.
Portable backup
Export My Garage creates an encrypted .drilorebackup file with a password of at least 10 characters. Compatible iPhone and Android versions can restore it; the password cannot be recovered. Recordings are excluded. CSV is for review, not restoration.
Deletion and recovery copies
Delete records in the app. Android may retain deleted media temporarily in a protected prior recovery generation until a later successful save rotates it. Local safety snapshots and widget copies have their own lifecycle; exported or OS-backed-up copies must be managed separately. Deleting an app is not proof that every external copy is gone.
Location, microphone and notifications
Weather can refresh when the app opens or returns to the foreground after location permission is granted. Nearby fuel and charging queries use location or your selected search area. The current iOS TestFlight version does not run speed/enforcement-camera monitoring, request background location for it or offer microphone recording. Earlier builds with camera alerts enabled may use ongoing foreground/background location and locally recorded audio; camera matching stays on-device. Rego, service and monthly-usage notifications remain optional local reminders. You can revoke permissions in system settings.
Weather-provider logs
Open-Meteo states that its API may process IP addresses for maintenance and abuse prevention, and that troubleshooting logs may contain geographical coordinates and are deleted after 90 days. This is the provider’s stated practice, not a claim that all Drilore-related data has the same retention period. See Open-Meteo’s terms and privacy notice.
OS backup is not Cloud Garage
iOS device/iCloud backups may include Garage data and media depending on settings. Android excludes Garage data from automatic OS cloud backup and device transfer. Custom camera recordings are excluded on both. Drilore does not currently provide continuous cloud sync.
Sharing choices
Preview shared images and exported files. Generated summaries omit VIN and plate fields, but vehicle photos can still reveal them. Chosen names, exact spending, supplier contacts and notes can also be personal. Recipients and storage services control their own copies.
TestFlight diagnostics and feedback
TestFlight is provided by Apple. Beta usage information, crash reports and feedback can be shared with the developer through Apple. This is separate from the local Garage and is not a claim that Drilore never sends any data. Avoid including private documents or identifiable vehicle details in feedback screenshots unless necessary. See Apple’s TestFlight privacy notice.
Privacy requests and complaints
Contact chris.jiang@binggowheels.com.au to ask about access, correction, deletion or a privacy concern. Describe the request using the minimum information needed; we may ask for enough information to verify and handle it. Local Garage records are managed on your device because we do not hold a server copy. Contact correspondence is used to handle and document your request, not for advertising. If a concern remains unresolved, you can seek guidance from the Office of the Australian Information Commissioner.
03 · SEPARATE PURPOSESAnalytics and commerce cannot copy the GarageOpen boundaries +
Minimal product measurement
Future measurement should answer coarse product questions without sending Rego, VIN, receipts, notes or exact coordinates as analytics fields.
On-device insight first
Vehicle cost trends should be calculated on-device where practical. Optional cloud analysis must disclose purpose, fields, region, retention and deletion before consent.
Separate transaction purpose
Future checkout needs the customer details required for payment, delivery, support and legal obligations. Those belong to the order, not the local Garage.
Owner-approved crossing
An order may propose a receipt, warranty or replacement reminder. Nothing enters a Garage until the owner approves it.
04 · BEFORE LAUNCHCloud, forum, analytics and marketplace gatesOpen requirements +
Cloud Garage
Separate opt-in, disclosed data region, encrypted transport and storage, tested restore, export, deletion, backup-expiry and recovery design.
Product analytics
A separate choice using minimal event names and coarse counts. Raw VIN, Rego, receipts, notes and exact location must not be analytics properties.
Owner forum
Community identity and public posts remain separate from the private Garage. Sharing requires an explicit action and preview.
Marketplace
Payment and delivery data require their own purpose, retention and disclosure and must not be combined with private Garage history for advertising.
Privacy standard
Collect less. Explain it. Delete it when it no longer has a purpose.
OAIC guidance supports relevant, minimal collection and destruction or de-identification when information is no longer needed.
Release status and accountability
This policy describes the current beta, not a promise of future services. Product analytics, Cloud Garage, public community and live checkout remain unavailable; this update does not open those services. Drilore does not sell Garage records or use cross-app advertising tracking. Future changes that introduce new purposes or data flows require an updated explanation and any applicable user choice before activation.
Policy changes will be reflected on this page with an updated effective date. Last product-boundary review: 6 October 2026. Read the current owner handbook →