What we keep — and what we don't.

What we collect

• Camera photos. When you photograph a car, likely licence plates are covered on your device and a compressed copy is sent through our server to OpenAI's API to identify the make and model. Automatic plate detection is best-effort, so the result screen lets you cover anything it missed before adding the car. The identification copy is processed for the request and is not stored by us. OpenAI's handling is governed by their privacy policy.
• Location. When you spot a car, its coordinates are saved locally on your device for your personal map. We also turn that location into a coarse region cell of roughly 40 km and send the cell with the car type to Supabase as an aggregate traffic count. The aggregate record contains no user ID, raw coordinates, or capture timestamp and cannot show an individual route.
• Anonymous identity & leaderboard. To power the global leaderboard and player profiles, we create an anonymous account (no name, email, or phone number). We sync only: your chosen username, avatar, garage value, number of cars spotted, and which roster cars you own. This is handled by Supabase. See supabase.com/privacy.
• Public Garage images. Public Garage photo sharing is optional and off until you choose to enable it. When enabled, a reduced, plate-hidden copy of up to three captures per collected car, your three featured showroom cars, and an optional photo avatar are stored in Cloudflare R2 so signed-in players can visit your garage. Your full-resolution originals, custom car names, and capture locations stay on your device. You can turn Public Garage photos off in Settings to remove the remote image copies while keeping your leaderboard progress.
• Purchase information. Subscriptions are handled by Apple and RevenueCat. We receive purchase status and product information so we can unlock Pro and restore purchases; we never receive your payment-card details. RevenueCat's policy applies: revenuecat.com/privacy.
• Analytics. We use Mixpanel to collect app sessions and limited product events, including paywall and purchase-flow outcomes and a spotted car's make and rarity. These events include app/device technical information and a random installation identifier, but are not joined to your Octane account. IP-based geolocation is disabled, and the data is sent to Mixpanel's EU endpoint. Mixpanel's policy: mixpanel.com/legal/privacy-policy.

What we never collect

• We don't ask for your real name, email, phone number, or any sign-in — your account is anonymous.
• We don't browse your photo library or contacts. We receive only photos you explicitly capture or select in the app.
• We don't show ads, build ad profiles, or share your data with advertisers.
• We don't sell or rent your data to anyone.

Where your data lives

Your full-resolution car photos, custom names, and capture locations are stored locally on your iPhone using SwiftData. Anonymous leaderboard data is synced through Supabase, and only the reduced Public Garage images described above are stored in Cloudflare R2 when you opt in. Deleting the app removes local data; the in-app Delete Account control removes your synced profile and remote images as well.

Community content

Usernames, garage progress, and opted-in Public Garage images are visible to signed-in players. You can report or block any player from their profile, and we remove content or accounts that violate our Terms of Use.

Third-party services

• OpenAI — identifies cars from photos. Privacy policy →
• Supabase — anonymous accounts, leaderboard, and social garage records. Privacy policy →
• Cloudflare R2 — stores opted-in Public Garage image copies. Privacy policy →
• RevenueCat — manages subscriptions. Privacy policy →
• Mixpanel — anonymous, EU-hosted usage analytics. Privacy policy →

Children

Octane is not directed at children under 13. We do not knowingly collect data from children.

Contact

Questions or a data-deletion request? Email brnktl@gmail.com