Privacy Policy

Last updated: 17 July 2026

This Privacy Policy explains how the operator of HoodUp (“HoodUp”, “we”, “us” or “our”) collects, uses, stores and shares information when you use the HoodUp mobile app, the hoodup.app website or related support services.

HoodUp is a car modification tracker, virtual garage and car community app. Users can create vehicle profiles, record modifications, costs and performance figures, share posts, follow other users and access optional HoodUp PRO features.

1. Who controls your data

The operator of HoodUp is the data controller for personal data handled directly through the app and website. Service providers that process data on our instructions act as processors or independent controllers depending on their role.

2. Information we collect

Account and profile information

When you create an account, we may collect your email address, username, display name, profile photo, authentication provider, account settings, notification preference and public or private profile choice.

Vehicle and modification information

You may add a car make, model, year, colour, engine details, vehicle photo, registration number, BHP, torque, 0-60 figures, modification details, part brands, costs, fitting dates, fitted-by information and notes. Some vehicle information may relate to you when combined with an account or registration number.

User-generated content and social activity

We collect posts, photos, videos, captions, comments, replies, likes, saves, follows, feedback submissions, votes, reports and blocks. We also retain moderation records needed to review reports, enforce the Terms of Service and prevent repeated abuse.

Subscription and purchase information

Apple or Google processes payment details for app subscriptions. HoodUp and its subscription service provider may receive purchase status, product identifier, entitlement status, renewal or expiry information, storefront and a transaction reference. We do not receive your full payment card number.

Device, diagnostics and usage information

We may collect app version, operating system, device type, crash information, network status, feature events, sign-up and onboarding events, purchase-flow events, notification token and basic technical logs. This helps us keep the app stable, secure and useful.

Support information

If you contact support, we collect the details you submit, such as your name, email address, device information, issue description and any attachments you send by email.

Website information

The website may receive standard server logs such as IP address, browser type, requested page and timestamp. The current website does not use advertising trackers. If analytics or non-essential cookies are added later, this policy and any consent controls will be updated before they are used where required.

3. How we use information

We use information to:

• create and secure your account;
• store and display your car, modifications, performance figures and spend history;
• operate the Hub feed, profiles, comments, follows, saves and notifications;
• provide registration and MOT lookup features;
• deliver HoodUp PRO features, including vehicle analysis, comparisons, share cards, timelines and widgets;
• process support, feedback, reports, blocks and moderation actions;
• measure app reliability and understand which features are working;
• detect fraud, abuse, security incidents and policy breaches;
• comply with law, store policies and valid legal requests; and
• send launch or product emails where you asked to receive them.

4. Legal bases for processing

Where UK or European data protection law applies, we rely on one or more of the following:

• Contract: processing needed to provide the account, vehicle records, social features, subscription and support you request.
• Legitimate interests: securing the service, preventing abuse, improving reliability, measuring performance and enforcing content rules, balanced against your rights.
• Consent: optional notifications, email updates, photo access or other permissions where consent is the appropriate basis. You can withdraw consent through device or app settings.
• Legal obligation: processing needed to comply with law, tax, accounting, consumer protection or lawful authority requests.

5. Vehicle registration and MOT lookup

If you use the UK registration lookup, the registration number is sent securely to a HoodUp server function, which requests vehicle or MOT data from the Driver and Vehicle Standards Agency service. The returned make, model, year, colour, fuel type, engine size and MOT information may be used to prefill your vehicle profile and, where you confirm it, stored with the car record.

Registration numbers are used to provide the lookup and MOT panel. They are not intended to appear publicly as part of your profile or post unless you independently include a visible plate in an uploaded image or text. You should obscure plates in content if you do not want them visible.

6. AI analysis

HoodUp PRO may send selected vehicle, modification and performance information to a server-side Google AI service to generate informational vehicle analysis or a suggested next modification. The request is tied to your authorised account and is not intended to include your password or payment card information.

AI output can be incomplete or wrong. It is not professional mechanical, tuning, safety, legal, insurance or roadworthiness advice.

7. Profile, visibility and location choices

Public or private profile

You can choose whether your profile is public or private. A private profile and its posts are restricted from other users through server-side access controls. Account administrators may still access data where necessary for support, safety, security or legal compliance.

Car-level visibility

Cars may also have their own visibility setting. Review the active car and post before sharing so the correct vehicle is tagged and visible.

Location

HoodUp does not require continuous or background precise location for the core app features. If a profile or post allows a place to be added, providing it is optional. If a future feature requests device location, the app will ask for operating-system permission and explain the purpose before access. You can refuse or remove location permission in device settings.

8. User-generated content safety

HoodUp includes user-generated posts, comments and profiles. Users can report a post, comment or user and can block other users. Blocked users are removed from relevant feeds, search results and comments for the blocking account. Reports may include the reported content, account identifiers, reason and review status.

We may review, restrict, remove or preserve content where reasonably necessary to investigate a report, protect users, enforce the Terms of Service, respond to legal requests or prevent fraud and abuse.

9. Who we share information with

We may share limited information with:

• Supabase: account authentication, database, server functions and file storage.
• Google services: app analytics, sign-in and server-side AI analysis where enabled.
• Apple: Sign in with Apple, App Store purchases, push-related services and subscription management.
• Google Play: Google sign-in, Play purchases and subscription management.
• RevenueCat: subscription entitlement and purchase status.
• Expo services: push notification delivery and related app infrastructure.
• DVSA: vehicle and MOT data requests when you use registration lookup.
• Professional advisers or authorities: where reasonably necessary for legal, accounting, security, fraud prevention or valid law-enforcement requests.

We do not sell personal data or share it with advertisers for cross-app behavioural advertising.

10. International transfers

Some service providers may process information outside the United Kingdom or European Economic Area. Where required, transfers are protected through recognised safeguards such as adequacy regulations, approved contractual clauses or another lawful transfer mechanism.

11. How long we keep information

We keep account and vehicle data while your account remains active and for as long as reasonably needed to provide the service. Support, security, transaction and moderation records may be retained for a limited period after the underlying issue is closed where needed for fraud prevention, legal claims, accounting or compliance.

When an account is deleted, active account records, profile data, cars, mods, posts, comments, interactions and stored media associated with that account are scheduled for permanent deletion. Limited data may remain temporarily in protected backups or be retained where law requires it. Backup copies are not used to restore a deleted account.

12. Account deletion

You can initiate deletion inside the app through Settings → More settings → Danger zone → Delete account. The app asks for confirmation before permanently deleting the account and associated data.

If you no longer have access to the app, use the HoodUp account deletion page to submit a request. We may need to verify that you control the account before completing a web request.

Deleting a HoodUp account does not automatically cancel an Apple or Google subscription. Cancel the subscription through the store account before deleting the app account.

13. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy of certain data, withdraw consent and complain to a regulator. In the UK, you can complain to the Information Commissioner’s Office.

Send a request to info@hoodup.app. We may ask for information needed to confirm your identity and protect the account.

14. Security

HoodUp uses technical and organisational safeguards including authenticated access, row-level database controls, server-side secret handling, restricted storage paths, account-level privacy controls and protected subscription webhooks. No online service can guarantee absolute security, so you should use a strong password and protect access to your device and sign-in provider.

15. Children

HoodUp is not directed to children under 13. Users must also meet any higher minimum age or parental-consent requirement that applies where they live. If we learn that information was collected from a child who could not lawfully provide it, we will take reasonable steps to delete it.

16. Changes to this policy

We may update this policy when the app, providers, law or data practices change. The updated date will appear at the top. Material changes may also be announced in the app or by another appropriate notice.

17. Contact

Email privacy, support or data questions to info@hoodup.app.