Privacy Policy

Last updated: July 11, 2026

CRLO (“we”, “us”, or “our”) operates the CRLO mobile application and crlo.cc (together, the “Services”). This policy explains what information the Services process, why we process it, and which service providers help us operate CRLO. CRLO is operated by P K Wickramasinghe Mudiyanselage Aruna Prabath Wickramasingha, trading as Argonize.

CRLO requires an account. Some processing is necessary to provide the Services, while optional features such as notifications and AI maintenance only process additional data when you choose to use them.

1. Information We Process

1.1 Account and authentication information

Clerk processes your account identifier, email address, name or profile details you provide, authentication credentials, session information, and the profile information you authorize Apple or Google to share. CRLO receives a Clerk user identifier to authorize access to your data.

1.2 Garage and vehicle content

We store garage names, vehicle details and identifiers, mileage, fuel and charging logs, service history, costs, notes, reminders, documents, photos, and other attachments that you add. This content is stored in Convex database and file storage.

1.3 Collaboration and activity

We store garage ownership and membership, collaborator nicknames, invite activity, and a history of actions in a shared garage. Everyone with access to a garage can view its shared content. The owner can remove collaborators.

1.4 Purchases and subscription status

RevenueCat, Apple, and Google process purchase and subscription information. RevenueCat receives a CRLO account identifier, device and platform information, purchase tokens or receipts, entitlement status, transaction history, and app usage timestamps needed to manage CRLO Pro.

1.5 Notifications and device information

If you grant notification permission, we process an Expo push token with your CRLO user identifier, platform, device name, and device model. Date-based reminder notifications are also scheduled locally on the device where you create or update them.

1.6 Diagnostics and website analytics

Sentry receives mobile crash reports, logs, performance and device context, network information, IP address, and other diagnostic details. The current mobile configuration permits default personally identifiable context in error reports. PostHog processes website page views, store-link and support-link clicks, browser and device information, referrer, network-derived location, and cookies or similar identifiers. We do not describe this information as anonymous.

1.7 AI maintenance information

When a Pro user requests an AI maintenance plan, CRLO sends selected vehicle details, recent service, fuel and charging records, existing reminders, mileage, dates, charging locations, and notes to OpenAI. Photos, documents, account credentials, and payment details are not included in that request.

2. How We Use Information

  • Provide authentication, garage storage, sync, sharing, and account support
  • Apply Free and Pro limits and manage subscription access
  • Schedule reminders and deliver notifications you enable
  • Generate an AI maintenance plan when a Pro user requests one
  • Diagnose errors, protect the Services, and understand website use

We do not sell personal data, run third-party ads in CRLO, or use garage content for advertising.

3. Service Providers and Sharing

We share information with processors only as needed to operate the Services or when you ask us to use a feature. Our current processors include:

  • Clerk for authentication and user account management
  • Convex for the application database, real-time sync, server functions, and attachment storage
  • RevenueCat, Apple, and Google for subscriptions and purchases
  • Sentry for mobile diagnostics and feedback
  • Expo for application updates and push-notification delivery
  • PostHog for website analytics
  • OpenAI when a Pro user requests an AI maintenance plan

We may also disclose information when required by law or to protect security, rights, and safety. If you join a shared garage, its owner and collaborators can view the content and activity in that garage.

4. Storage and Security

CRLO uses encrypted network connections and the access controls provided by Clerk and Convex. Cloud providers apply their own storage and infrastructure safeguards. Access to a shared garage is limited to its owner and invited collaborators.

No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.

5. Retention and Deletion

We retain account and garage data while your account is active and as needed to provide the Services. To request deletion of CRLO content and associated service-provider identifiers, follow the steps on ourDelete Account page. Deleting the sign-in profile inside the current app does not by itself confirm deletion of all content stored by CRLO, so contact us for a complete deletion request.

We may retain limited records when required for legal, tax, fraud prevention, security, dispute-resolution, or store-transaction obligations. Processors may retain backups for a limited period under their own retention schedules.

6. Your Choices and Rights

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Export a garage archive from the app
  • Request deletion of your CRLO content and account identifiers
  • Disable optional notifications in your device settings

Availability of particular rights depends on your location. Contact us using the address below to make a request.

7. Children's Privacy

CRLO is not intended for children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information to CRLO.

8. Changes to This Policy

We may update this policy and will revise the date at the top. When appropriate, we will notify users of material changes in the app or by email.

9. Contact Us

For privacy questions or requests, contact:

hello@crlo.cc