What we keep, and why
Frunk stores the record of your car because that is the product. It stores nothing it does not need for that, shows nothing to advertisers, and lets you take it all with you or delete it.
Who is responsible
Frunk is run by Mediamax, Denmark, contact info@mediamax.dk. Mediamax is the data controller under the General Data Protection Regulation (GDPR). Write to that address for any question or request in this policy; we answer within a month.
What we store
| Data | Why | Where it comes from |
|---|---|---|
| Your email address and a display name | To sign you in with a one-time code and to tell you what is due | You, or Google if you sign in with Google |
| Your cars: model, year, options, VIN, plate, purchase date | To resolve the maintenance schedule for your exact car | You |
| Odometer readings, logged jobs, parts, costs, notes, photos of the car and receipts | The logbook itself, the reminders and the cost per kilometre | You and the people you share a household with |
| Household membership and invite codes | So family can share one garage | You |
| Technical logs: IP address, browser, time of request | To keep the service running and secure; kept for a short time by our hosting and database providers | Your device |
We do not collect location, do not read anything from your car unless you connect it yourself in a later version, and do not use analytics or advertising trackers on the site or in the app.
Legal basis
- Performing the service you signed up for (GDPR article 6(1)(b)): the account, the garage, the reminders.
- Our legitimate interest in running a secure service (article 6(1)(f)): technical logs and abuse prevention.
- Your consent (article 6(1)(a)) for anything optional we add later, such as connecting your car, which you can withdraw at any time.
Who processes it for us
- Supabase hosts the database, sign-in and file storage, on servers in the European Union (Ireland and Frankfurt).
- Postmark (ActiveCampaign, LLC) sends the sign-in codes and reminder emails. It processes your email address and the message; open and link tracking are switched off. Postmark is based in the United States and operates under the EU standard contractual clauses.
- Google, only if you choose to sign in with Google: Google tells us your email and name, nothing else, and Google's own privacy policy applies to your Google account.
- The web servers for the site and the app are run by Mediamax's hosting provider.
We do not sell personal data and we do not share it with sponsors or other owners. Workshop recommendations, when they come, show only what you choose to publish.
Sharing inside the app
Members of your household see the cars, log, costs and photos in that household and each other's display name. Leaving a household stops that. Nothing is visible to other users unless you share it on purpose.
How long we keep it
For as long as you have an account. Delete a car and its record is gone; delete your account and everything goes with it, apart from technical logs that expire on their own within 30 days and backups that roll over within 30 days. Until account deletion is in the app, email us and we do it the same week.
Your rights
You can ask for a copy of your data, correct it, have it deleted, restrict or object to how we use it, and take it with you in a machine-readable form. Export to CSV and PDF is coming in the app; until then, email us. You can also complain to the Danish Data Protection Agency, Datatilsynet, atdatatilsynet.dk.
Cookies and local storage
The site sets no cookies. The app keeps your sign-in session and a copy of your garage in your browser's or phone's local storage so it opens quickly and works offline. Signing out clears them. There are no third-party cookies.
Children
Frunk is for car owners and not meant for anyone under 16.
Changes
When this policy changes, the date at the top changes and the app tells you on the next sign-in. The current version always lives at frunk-app.com/privacy.