Privacy notice

Pitstop connects drivers with independent mechanics for scheduled vehicle service. It is starting in the San Francisco Bay Area, with planned expansion as approved mechanics join in other locations. This notice describes the information used by the iPhone app and these public support pages.

Last updated: September 25, 2026. Operator: Saidmakhmud Makhkamjonov. For privacy questions or requests, email saidmakj@gmail.com.

Information we use

• Account and profile: your name, email address and account role; saved vehicles and favorite mechanics; and, for mechanics, a public profile, vehicle specialties, service area or workshop street address, offered services, prices, availability and submitted credentials. Supabase Auth handles passwords and sign-in; the Pitstop profile database does not store your password.
• Jobs and communication: the service address and map pin, vehicle and service details, requested time, quotes, booking status, messages, uploaded photos or documents, reviews, reports and in-app notifications.
• Nearby search: an area you enter or a location you choose to share. The app asks for iPhone location permission only after you tap “Use my current location.” It sends search coordinates to the Pitstop API to find nearby mechanics. A service address and pin are saved when you submit a booking.
• Payments, when available: Stripe receives the information needed for card checkout and mechanic payout onboarding. Pitstop keeps transaction references, payment and refund status, and amounts associated with a booking; card numbers are entered through Stripe, not stored in Pitstop’s database.
• Technical information: service providers process ordinary network requests and operational logs to run and protect the app and site. If push notifications are enabled and you opt in, Pitstop stores a device token to deliver them. The current iPhone app has no advertising or cross-app tracking SDK.

How information is used and seen

We use account and service details to operate search, bookings, communication, payments, mechanic approval, support and abuse review. An approved mobile mechanic listing displays the mechanic’s name, business information, service-area center on a map, specialties, prices and availability. An approved workshop listing also publicly displays its full street address and map pin. Public reviews display the reviewer’s account name, rating and review text. Mobile mechanics should choose a service-area center that does not expose a private home address; workshop mechanics should enter only a business address they intend to make public.

The customer and assigned mechanic can see their booking details, including the service address, vehicle, quotes and their private conversation. Authorized Pitstop administrators can review mechanic credentials, reports and job information to operate the marketplace and resolve issues. Other users cannot browse private booking messages or credential files.

Service providers

Supabase hosts account authentication, the private database, file storage and the app API. Apple provides iPhone location permissions and map search and display. Cloudflare Pages hosts this site and processes requests to its pages. Email sent to saidmakj@gmail.com is handled by Google. Once payments are enabled, Stripe provides checkout and mechanic payout onboarding. Account confirmation and recovery emails will also be processed by the email-delivery provider configured for Supabase Auth. We share information with these providers only for the functions described here.

How long information is kept

Account, profile, saved-vehicle and marketplace information remains while the account is active; the current system does not automatically expire active accounts or booking history after a set number of days. A private upload that is never attached to a message or mechanic-credential submission is queued for deletion after it is more than 24 hours old. The cleanup runs periodically, and a failed storage deletion is retried.

When an eligible account is deleted, the app removes that account’s saved vehicles, favorites, notifications, device tokens and uploads. It replaces the account’s name and email, its authored message and review text, and the participant name, address, map pin and cancellation reason on its bookings. For a customer deletion it also replaces the vehicle details in those bookings; for a mechanic deletion it removes that mechanic’s public listing details. Historical booking, price, payment, event and moderation records remain without a configured automatic expiry. Some free-text quote explanations, event details or support records written by others may remain. External providers may keep their own transaction, support and operational records under their policies. Email us if you want us to review a retained record or have a question about a provider’s retention.

Your choices and requests

You can search by entering an area instead of granting location permission. You can change iPhone location or notification permissions in Settings. You can start account deletion in the app; active jobs, unsettled payments or an open mechanic payout account must be resolved first. If external file or sign-in cleanup is temporarily unavailable, the request is queued for retry. Email saidmakj@gmail.com to ask for access, correction or deletion of your information, or for help finishing an account-deletion request. We will review requests under applicable law.

We will update this notice when the app’s data practices or service providers change. For booking or payment help, see support.