Privacy Policy
Effective date: August 18, 2026. Updated October 8, 2026 (added section 2B, job applicants; section 2A, our website and sales enquiries, was added October 1).
Dealership ("the app", "we", "us") is a mobile app that connects you with participating car dealerships for service booking, vehicle records, rewards, and inventory browsing. This policy explains what information we handle, why, who else touches it, and how you can get it deleted. We have tried to write it so a person would actually read it.
The short version: we collect what the app needs to work, we don't sell it, there are no ads in the app, and you can delete everything with one email or in-app request.
1. Who is responsible
The Dealership platform is operated by Disminal Innovations Inc, Ontario, Canada. For anything in this policy, contact:
Privacy contact
Each participating dealership is independently responsible for the customer and vehicle records it maintains (its "dealer records"), the same records it kept before the app existed. We process those records on the dealership's behalf to show them to you.
2. What we collect and why
| Information | Where it comes from | Why we have it |
|---|---|---|
| Phone number | You, at sign-in | It is your identity in the app. We verify it with a one-time text code instead of a password, and use it to match you to your existing service records at the dealership you choose. |
| Name | You, or your dealership's records | So the app and your dealership can greet you as a person rather than a number. |
| Vehicle information (year, make, model, trim, colour, VIN, licence plate, mileage) | You, or your dealership's records | Your garage: showing your cars, matching service recommendations to them, and attaching history to the right vehicle. |
| Service history (visits, work performed, work declined, amounts) | Your dealership's records | So you can see what's been done to your car and what it cost, in one place. |
| Bookings and appointments | You, in the app | To schedule your service and let the dealership prepare for it. |
| Rewards activity (points earned, redeemed, referrals, review claims) | Generated by your activity | To run the rewards program of the dealership you use. |
| Vehicle photos | You, if you add one | Only so your own car looks like your own car in the app. Optional. |
| Push notification token | Your device, if you allow notifications | To deliver booking confirmations and dealership offers you've opted into. Deleted when you disable notifications or delete your account. |
| Basic technical data (device model, app version, error logs) | Your device | Keeping the app working and fixing what breaks. Our error logs do not include your service records or message content. |
2A. Our website and sales enquiries
This section covers dealer-app.cc, the website where dealerships learn about Dealership and request a preview or demo (for example the /apply and /build pages). It does not change anything about the app described above.
- What you give us: when you fill in a form on the website we collect what you type: your name, dealership name, work email, phone number, dealership website, number of rooftops, your answers to our questions, and any demo time you pick.
- Why: to contact you about your dealership's app (including by phone, text message and email, where you have agreed to that), to build the preview you asked for, and to decide whether Dealership is a fit for your store. Reply STOP to any text to stop texts, or email us to stop everything.
- Advertising measurement: the website (not the app) uses the Meta Pixel, a tool from Meta Platforms, Inc. When you visit our pages it uses cookies and similar technology so Meta can tell us whether our ads led to visits and form submissions, and so we can show our ads to relevant people. Meta may receive information such as the pages you viewed, your browser and device details, and that you submitted a form (not the contents of what you typed). Meta's use of this information is governed by Meta's own privacy policy. You can control ad preferences in your Facebook or Instagram settings, and you can block or delete cookies in your browser.
- Service providers: form submissions are stored with Supabase and Vercel, and notifications about them are sent through Twilio and Discord, only so our team can follow up.
- Retention: we keep enquiry details while we are in contact with your store and delete them on request.
2B. Job applicants
When you apply for a job through dealer-app.cc/careers we collect what you send us: your name, email, phone number, the city you live in, the role, any link or note you add, and your resume if you attach one.
- Why: only to review your application, contact you about it, and consider you for roles at Dealership. We do not use it for marketing and we do not sell it.
- Who sees it: the people at Dealership involved in hiring. Applications and resumes are stored privately with Supabase and Vercel, and our team is notified through Twilio and Discord.
- Retention: we keep applications for up to two years so we can contact you about future roles, then delete them. Email us at any time to have yours deleted sooner.
- Accommodations: available on request at any stage of hiring.
3. What we do NOT do
- We do not sell your personal information. To anyone. Ever.
- We do not show advertising in the app or share app users' data with ad networks or data brokers.
- The app does not track you across other apps or websites, and it contains no third-party advertising or analytics SDKs. (Our marketing website for dealerships is different, see section 2A.)
- We do not collect your location.
- We do not share your information between dealerships. Your history at one store is never visible to another store. This separation is enforced in our database itself, not just in the app's screens.
4. Who processes data for us
We use a small number of service providers to run the platform. Each receives only what its job requires:
| Provider | Job | What they handle |
|---|---|---|
| Supabase | Database & hosting (servers located in Canada, ca-central region) | The app's data described in section 2 |
| Twilio | Text-message verification codes | Your phone number, at sign-in |
| Apple | Push notification delivery | Your device's push token and the notification content |
These providers act under contracts that limit their use of your data to providing their service to us.
5. Sharing with your dealership
The dealership you connect with can see its own relationship with you: your contact details, your vehicles, the services you book, your rewards activity, and whether its messages led to bookings. This is the same information the dealership's service desk has always had, the app gives you a window into it, and gives them a modern way to reach you. Dealership staff cannot see your activity at any other store.
6. Your choices and rights
- Notifications are optional. Decline the permission, or switch them off any time in iOS Settings, and we deactivate your device's token.
- Access & correction: you can see your vehicles, history, and rewards in the app. If something is wrong, tell us or your dealership and it will be corrected.
- Deletion: you can request deletion of your account and personal data at any time, see section 7. Apple requires this and so do we.
- Under Canada's PIPEDA and comparable laws elsewhere, you may request access to the personal information we hold about you, ask how it's used, and complain to a privacy regulator. We would rather you complain to us first: privacy@dealer-app.cc.
7. Deleting your account
Email privacy@dealer-app.cc with the subject "Delete my account" from a message that includes the phone number you signed in with, or use the delete option in the app's Garage tab. We will delete your profile, phone number, photos, push tokens, and app activity within 30 days and confirm when done.
One honest caveat: the underlying service records at your dealership (invoices, repair orders) are the dealership's business and legal records, deleting your app account removes your access and identity from our platform but does not erase the dealership's own books, which they must keep under tax and consumer-protection law.
8. Retention
We keep your data while your account is active. Verification codes expire in minutes and are handled by Twilio, not stored by us. Inactive push tokens are cleaned up. If your dealership leaves the platform, our copy of its customer data is deleted; if you delete your account, section 7 applies.
9. Security
Data is encrypted in transit (TLS) and at rest. Access to each dealership's data is enforced with row-level security in the database, every query, from every screen, is checked against who you are, not just filtered in the app. Sign-in uses one-time codes, so there is no password database to breach. No system is perfectly secure, but if a breach affecting your personal information ever occurs, we will notify you and the relevant authorities as the law requires.
10. Children
The app is for people old enough to own and service a car. It is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, tell you in the app before the change takes effect. The current version always lives at this page.
12. Contact
Questions, requests, corrections, complaints: privacy@dealer-app.cc. A human reads it.