Privacy Policy for GloveBox
Last Updated: May 3, 2026
Disclaimer: This document is provided for informational purposes and does not constitute legal advice. You should have it reviewed by a qualified attorney familiar with Chilean law and any other jurisdictions where you offer the App before publication.
Introduction
Welcome to GloveBox ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the GloveBox mobile application (the "App").
Operator: GloveBox is operated by
[YOUR LEGAL ENTITY NAME — replace before publication] ("Operator").
Contact: glovebox.cl@gmail.com
By using the App, you acknowledge that you have read this Privacy Policy.
Scope
This policy applies to personal data processed in connection with the App. It is intended to align with common requirements under Chilean law, the EU/UK GDPR (where applicable), U.S. state privacy laws such as the CCPA/CPRA (where applicable), and Apple App Store and Google Play expectations. Specific rights and remedies depend on your place of residence.
Information We Collect
Information You Provide
Account and profile
- Email address, display name, and profile photo (if you add one)
- Authentication credentials (passwords are hashed; we do not store plaintext passwords)
Vehicle information
- Vehicle details you enter (e.g., make, model, year, license plate, VIN, odometer, notes)
Documents
- Images or files you upload (e.g., permits, inspections, insurance, license-related documents)
- Metadata you add (e.g., document type, expiration dates, descriptions)
- Output from optional AI-assisted analysis of documents you choose to scan (e.g., extracted text or fields)
Information Collected Automatically
Device and diagnostics
- Device type, operating system, app version
- Device or installation identifiers as exposed by the platform or SDKs
- Crash logs and basic performance or error information where enabled
Usage
- General usage of features (e.g., screens or flows used) where collected by our hosting or analytics tooling
Permissions
- Camera, photo library, documents, and notifications—only when you grant permission and use related features
Payments
Subscription status and purchase metadata are processed by Apple and/or Google and by RevenueCat as described below. We do not receive your full payment card details.
How We Use Information
We use information for:
Providing the Service
- Creating and securing your account
- Storing and displaying vehicles and documents
- Running optional AI-assisted document processing
- Local or cloud sync according to your plan
- Sending transactional messages and in-app or push notifications you configure
Improving and securing the Service
- Debugging, abuse prevention, security monitoring, and product improvement
Aggregated and anonymized insights
- We may generate aggregated, anonymized statistics or datasets that do not reasonably identify you or any individual (for example, high-level trends across many users). Depending on legal characterization in your jurisdiction, such data may not constitute personal data.
- Where permitted by law, we may license or commercialize those anonymized aggregate insights to third parties (for example, research or industry benchmarking). We do not intend to sell identifiable personal information as such.
Anonymization limitation
- If information can still be linked to an identifiable person—directly or indirectly—it remains subject to this Privacy Policy and applicable data-protection rules. We do not claim that all derived outputs are anonymous without appropriate technical and organizational measures.
Legal and compliance
- Complying with law, regulatory requests where legally required, and enforcing our Terms of Service
Legal Bases (EEA/UK users)
Where GDPR/UK GDPR applies, we rely on one or more of:
- Performance of a contract (providing the Service you request)
- Legitimate interests (security, improvement, and communications that are not overridden by your rights), where permitted
- Consent (where we expressly ask and you agree—for example, optional marketing or non-essential cookies on web properties, if any)
- Legal obligation (where the law requires processing)
You may withdraw consent where processing is consent-based, without affecting prior lawful processing.
Chile — Personal Data Protection
If you are in Chile, applicable rules include, among others, the constitutional guarantee respecting private life and Law 19.628 on the protection of private life, as well as the Personal Data Protection Law (commonly cited as Law 21.719) and its implementing regulations, subject to their effective dates and transitions.
Typical rights include, where applicable, access, rectification, cancellation, and blocking (and related objections or complaints to the competent authority as the law may provide). To exercise rights, contact glovebox.cl@gmail.com. We may need to verify your identity.
This summary is not exhaustive and does not replace professional advice.
Sale or Sharing of Personal Information (U.S. — California and similar states)
We do not sell personal information as defined by the CCPA/CPRA in the sense of exchanging identifiable consumer records for money with third parties in the traditional "data broker" sense.
We may share personal information with service providers and processors (e.g., cloud hosting, AI, subscription management) strictly to operate the App, subject to contractual safeguards.
Aggregated anonymized information that does not identify you may fall outside the scope of "personal information" under applicable U.S. state laws when properly anonymized; statutory definitions vary.
California residents may have rights to know, delete, correct, and opt out of certain sales or sharing of personal information for cross-context behavioral advertising, and to limit use of sensitive personal information, as applicable. Submit requests to glovebox.cl@gmail.com. We will not discriminate for exercising rights.
If we offer a financial incentive program subject to CPRA, we will disclose material terms.
International Data Transfers
Your information may be processed in Chile, the United States, the European Economic Area, the United Kingdom, and other countries where our providers operate. We use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) where required by applicable law.
Third-Party Services
| Provider | Role | Privacy documentation |
|---|---|---|
| Google Firebase | Auth, database, storage, related services | firebase.google.com/support/privacy |
| Google (Gemini AI) | Optional document analysis | policies.google.com/privacy |
| RevenueCat | Subscription status and entitlements | revenuecat.com/privacy |
| Apple / Google | App distribution and in-app purchases | Respective platform privacy policies |
Third parties process data under their own terms. We encourage you to read their policies.
Retention
We retain personal data as long as needed to provide the Service and for legitimate business purposes (e.g., security, legal compliance). When you delete your account, we delete or anonymize personal data within a reasonable period, subject to backup and legal retention requirements.
Security
We implement reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure.
Children
The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it. Other jurisdictions may impose different age thresholds for consent—parents or guardians should supervise minors' use.
Your Rights (General)
Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. Contact glovebox.cl@gmail.com to exercise these rights. You may also lodge a complaint with your local supervisory authority where GDPR/UK GDPR applies.
Automated Processing
Document analysis may involve automated processing of images or text you submit. You remain responsible for verifying accuracy (e.g., expiration dates, plate numbers).
Changes to This Privacy Policy
We may update this Privacy Policy. We will post the updated version and revise the "Last Updated" date. If changes are material, we will provide notice as required by law or as we otherwise deem appropriate (e.g., in-app notice or email).
Contact
Email: glovebox.cl@gmail.com
Postal: [YOUR BUSINESS ADDRESS — Chile or other — replace before publication]