Privacy policy

Effective October 27, 2026

LCHQ ("we") is a garage log app for Land Cruiser owners. This policy explains what we collect, why, who helps us run the app, and the choices you have. In short: we keep what you put in the app so the app can work, we don't sell it, and you can delete it all at any time.

What we collect

• Account: your email address and password. Passwords are stored hashed by our sign-in provider; we never see them.
• Plan and usage: your plan (Free, Pro or beta), when Pro renews or ends, how many Elsie messages and receipt reads you've used, and any extra messages you bought, so the limits work.
• Your Land Cruisers: VIN or chassis number, series, model year, engine, trim, nickname and odometer mileage.
• Your log: service entries, line items, part numbers, costs, vendors, notes, parts bin items, reminders and the recalls you mark done.
• Receipts: photos and PDFs you scan or share into LCHQ, and the text read from them.
• Home state (optional): the US state or Canadian province you pick, so Basecamp can list nearby events first. You can clear it any time.
• Notifications (optional): if you turn on notifications, a push token for your phone (an address Apple and Expo use to deliver them, not your phone number) and which kinds you want. Signing out removes the token from your account.
• Beta list (website): if you join the beta on landcruiserhq.com, your email address, which form you used and when, so we can send your TestFlight or Google Play testing invite. We don't use it for anything else.
• The community (optional): if you share a rig, the display name you choose, your rig's photo, the posts, photos and comments you make, the waves you give, who you follow, the events you say you're going to or interested in, the Instagram and IH8MUD names you add, and your TLCA membership and chapter if you add them. If you report a post or block someone, we keep that too.

We don't collect your location, contacts or advertising identifiers. The camera and photo library are used only when you choose to scan or pick a receipt, or to take or pick a photo to share. Before a photo you share leaves your phone, it's resized and its location and camera details are removed. Saving a share card to Photos asks only for permission to add photos. We don't use third-party analytics or advertising.

How we use it

Only to run LCHQ for you: to store your log, read your receipts, work out reminders, look up recalls and service bulletins, send sign-in and password-reset emails, and answer support requests.

Who helps us run LCHQ

• Supabase hosts our database, file storage and sign-in. Your data is stored on their servers.
• Anthropic reads receipt images. When you scan or share a receipt, the image is sent to Anthropic's Claude to extract the date, vendor, line items and totals. Anthropic processes it to return that text; under Anthropic's commercial terms, data sent through its API isn't used to train its models. Anthropic also checks community posts, comments and photos (including rig photos) against the community rules before they appear, and Elsie's answers come from Anthropic's Claude.
• Resend delivers our account emails, such as password-reset codes.
• NHTSA (the U.S. National Highway Traffic Safety Administration): when you look up a VIN, the VIN is sent to NHTSA's public decoder. Recalls and service bulletins are looked up by model year only.
• Cloudflare hosts this website and passes beta-list signups to our database. It handles your IP address to serve the page; the site sets no cookies and loads nothing from other companies.
• Apple processes payments for LCHQ Pro through the App Store. We never see your card or payment details.
• RevenueCat keeps track of your LCHQ Pro subscription for us: what you bought, when it renews or ends, and your LCHQ account ID so the purchase is linked to the right account. It doesn't receive your name, email or log.
• Expo (and Apple's push service) deliver notifications you turn on. They receive your phone's push token and the notification's text, such as "New recall for Biscuit", and nothing else from your account.
• Apple Maps shows Basecamp events and opens directions when you ask for them.

We share data with these providers only so they can do their part of running the app. We don't sell your data or share it for advertising.

Who can see your data

Your vehicles, log and receipts are private to your account. Other users can't see them. Basecamp events are public to everyone signed in to LCHQ.

The community is opt-in, one rig at a time. Nothing about a rig is visible to other owners until you turn on "Share this rig". Then owners signed in to LCHQ can see that rig's photo, nickname, series, year and engine, your display name and home state, the build items you pick, your mileage club patches, your Instagram and IH8MUD names and TLCA chapter if you add them, and what you post. Exact mileage shows only if you turn it on, and you appear on event attendee lists and the Basecamp map only if you turn on "Show me going to events"; rigs are shown at events, never at your home. Your VIN, receipts, costs and the shops you use are never shared. Comments you leave on posts show your display name. When you share your own photo outside LCHQ as a card, you choose where it goes. Blocking someone hides your rigs, posts and comments from each other. If you transfer a rig to a new owner, its sharing switches off and your posts stay yours.

If you sell a Land Cruiser, you can choose to transfer it to the buyer. You make a transfer code in the app and give it to them; when they enter it, the Land Cruiser and its records move to their account: the service log, receipts with their photos and PDFs, fuel log, reminders, parts bin and recall status. Receipt photos can show your name, address or card details, so the app asks you to check them first. Your account and your Elsie chats stay with you. Until the buyer uses the code, you can cancel it.

Keeping and deleting your data

We keep your data while you have an account. You can delete individual receipts, entries and Land Cruisers in the app, and you can delete your whole account under Account → Delete account (the three dots at the top of Home; step by step). That permanently deletes your account, vehicles, log, parts bin, reminders, receipt files, and your community posts, photos, comments, waves and follows. You can also delete any of your posts or comments in the app, and turning off "Share this rig" hides that rig and its posts. Copies in our providers' backups age out on their normal schedules.

To come off the beta list, email us and we'll delete your address.

Security

Data travels over encrypted connections. Each account's data is protected by database rules so only that account can read or change it. No system is perfectly secure, so please use a password you don't use elsewhere.

Children

LCHQ isn't meant for children under 13, and we don't knowingly collect their information.

Changes

If we change this policy we'll update this page and the date above, and tell you in the app if the change is significant.

Contact

Questions or requests about your data: support@landcruiserhq.com.