Privacy Policy and Terms of Use

1. Developer, App, and Scope

This page is clearly labeled as the Privacy Policy for the CarPal Android app listed on Google Play. The developer/business is CarPal Enterprise Inc.. Privacy questions and requests may be submitted to [admin@getcarpal.com]. This policy applies to the Android app, website, account deletion page, support channels, payments, and third-party SDKs or service providers integrated with the app.

2. User and Device Data We Access or Collect

• Account identifiers: name, email address, phone number, user ID, login/session records, account preferences, and support communications.
• Commercial and transaction data: subscriptions, purchases, invoices, payment status, refunds, support requests, and account deletion requests. CarPal does not store full payment card numbers; payment processors handle card data.
• Vehicle and listing data: vehicle details, listing text, photos, preferences, service/maintenance information, and content you choose to upload.
• Device and usage data: IP address, device model, operating system, app version, crash logs, diagnostics, security logs, analytics events, cookies, and Google Play-compliant identifiers such as App Set ID when used for essential analytics, fraud prevention, or app functionality.
• Permission-based data: camera, photos/media, notifications, location, or similar Android-permission-gated data only when needed for a feature and only after the required in-app disclosure and consent/runtime permission flow.

3. How We Use Data

CarPal uses user and device data only for app and service functionality and policy-compliant purposes reasonably expected by the user: account creation and login, vehicle/listing features, subscriptions and billing, customer support, safety and fraud prevention, diagnostics, analytics, legal compliance, enforcement of agreements, and communications you request or permit. We limit access, collection, use, and sharing of personal and sensitive user data to these disclosed purposes.

4. Prominent Disclosure, Consent, and Runtime Permissions

If CarPal accesses, collects, uses, or shares personal or sensitive user data in a way that may not be reasonably expected from the feature, the app provides a prominent in-app disclosure before collection or permission access. The disclosure identifies the data involved, explains the feature purpose, and states whether the data is shared. Consent requires a clear affirmative user action, such as tapping an accept button or checking a box. Closing the screen, navigating away, or taking no action is not treated as consent. Runtime permissions are requested only after the relevant disclosure where required.

5. Sharing, SDKs, and No Sale of Sensitive User Data

We may share data with hosting providers, payment processors, analytics providers, crash reporting tools, notification providers, customer support tools, professional advisers, affiliates, and authorities when required by law. We remain responsible for third-party SDKs used in the app and seek to ensure their data practices comply with Google Play Developer Program policies. CarPal does not sell personal and sensitive user data for monetary consideration. If advertising or measurement identifiers are used, they are handled according to Google Play Ads policy and the user’s consent choices.

6. Secure Data Handling

CarPal handles personal and sensitive user data securely using reasonable administrative, technical, and organizational safeguards. Data transmitted between the app and CarPal systems is protected using modern cryptography such as HTTPS/TLS. Access controls, logging, monitoring, data minimization, and security reviews are used to reduce unauthorized access. Financial information and government identification numbers are not publicly disclosed.

7. Retention and Account Deletion

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including legal, tax, accounting, security, fraud prevention, dispute resolution, and compliance purposes. If the CarPal app allows account creation, users can request account deletion both in-app and through the external web resource at https://usecarpal.io/delete-account/. When an account deletion request is completed, CarPal deletes the app account and associated user data. Temporary deactivation, disabling, or freezing is not treated as deletion. Limited records may be retained only where required for legitimate legal, security, fraud prevention, or regulatory compliance reasons.

8. Google Play Data Safety Consistency

CarPal maintains a clear and accurate Google Play Data safety section for the app. The data collection, sharing, security, and deletion disclosures in Play Console are intended to match this Privacy Policy. If app data practices or integrated SDKs change, CarPal will update both this policy and the Play Console Data safety disclosures as required.

9. US State Privacy Rights

Depending on your state, you may have rights to know, access, correct, delete, obtain a portable copy of, or opt out of certain processing of personal information, including targeted advertising, sale, or sharing as defined by applicable law. Submit requests to [admin@getcarpal.com] or through available account/privacy tools. CarPal will not discriminate against you for exercising privacy rights and will honor valid opt-out preference signals where required.

10. Terms of Use

Account Responsibilities

You must provide accurate information, keep credentials confidential, and promptly notify us of unauthorized account activity.

Acceptable Use

You may not use CarPal for unlawful, deceptive, infringing, abusive, scraping, spamming, security-testing, reverse-engineering, or platform-disrupting conduct.

User Content

You retain ownership of your content, but grant CarPal a limited license to host, display, process, transmit, and use it as needed to operate and improve the services.

Suspension and Termination

We may suspend or terminate access for violations, risk, fraud, nonpayment, legal compliance, or platform protection. You may request account deletion through the available account deletion process.