Privacy Policy

Last updated 6 September 2026

KlubX is a private app for car clubs. You join a club by invitation, and what you post stays inside that club. This policy explains what we collect, why, who can see it, and how you get rid of it.

We do not sell your personal information and we do not share it with advertisers. That one is not a pricing decision and it is not going to change: what your club posts is not inventory.

KlubX is free to use today, and today there is no advertising in it and no third-party analytics or tracking SDK. Some of that may change — see "Money" below — and if it does, we will tell you in the app before it takes effect.

What we collect, and why

Your account. Your email address and a password, or your Apple ID if you use Sign in with Apple. If you sign in with Apple and choose to hide your email, we only ever see Apple's relay address, and that is fine — we never need your real one. We need this to give you an account and let you back into it. Legal basis: performance of our contract with you.

Your profile. A display name, and optionally a photo, a short bio, your city, an Instagram handle, a note about what cars you like to photograph, and the day and month of your birthday. All of it is optional except the name, and all of it is visible to the other members of your clubs.

We ask for the day and month of your birthday only. We do not ask for the year, so KlubX cannot work out your age. The only thing the birthday does is show a greeting in your club on the day.

Your cars. Make, model, year, colour, nickname, engine size, drivetrain, modifications, notes, photos, and a power figure if you enter one. A power figure is always stored with where it came from — stock, your own estimate, or a dyno — and if you say it came from a dyno, the dyno sheet you upload is stored with it and shown as the proof. All of it is visible to the members of the club the car is in.

Your drives. If you record a drive, KlubX stores the GPS trace of that drive: a position roughly every second, with altitude, speed, accuracy and time. This is the most sensitive thing in the app and we treat it that way — see "Location" below.

Your posts and messages. Posts, comments, reactions, polls, the votes you cast, photos, and direct messages to other members. Legal basis: performance of our contract with you.

Votes in a club poll are not anonymous. Other members can see who voted for what. The app says so before you create a poll.

Club money records. If your club runs a fundraiser, KlubX records how much was contributed and by whom, so the club has a list everyone can see. No money moves through KlubX — we are not a payment service and we never see a card, a bank account or a balance. The club collects by whatever means it already uses; the app is a notebook.

You can record a contribution as anonymous, which hides your name from the list. Be aware of what that does and does not do: the admin who confirms it still knows, and in a club of twenty people with the amounts visible, an anonymous entry is often easy to guess.

Places and reviews. Workshops and spots your club adds to the map, and whether you recommend them. Visible inside your club.

Moderation records. If a club admin mutes you, KlubX stores that you are muted in that club, until when, who did it, and the reason they wrote, if they wrote one. A mute stops you posting, commenting and reacting in that club's feed; it does not touch your garage, your drives or your private messages. You are told when it happens and until when. You are not told who did it — in a small club that turns a moderation decision into a personal argument, and the club's admins already know among themselves. The record disappears on its own when the mute expires and goes with your account if you delete it. Legal basis: our legitimate interest, and the club's, in a club that people want to be in.

Push notifications. A push token for your device, and which platform it is. It identifies the device, not you, and it is only used to deliver notifications you would get in the app anyway.

Technical data. Our hosting provider keeps ordinary server logs, including IP addresses, to run the service and to detect abuse. Legal basis: our legitimate interest in keeping the service working and secure.

Location

Location is the reason for most of this policy, so here it is on its own.

We only record your location when you have asked us to. There are three separate cases, each with its own switch:

• Recording a drive. You press Start. KlubX records the GPS trace until you press Stop. Your drives are private to you by default — nobody in your club sees a drive unless you publish it.
• Automatic drive detection. Off unless you turn it on in Settings. With it on, KlubX notices when you start driving and begins recording on its own. It sends you a notification every time it does, so a recording never appears that you did not know about. Legal basis: your consent, and you can withdraw it at any time by turning the switch off.
• Sharing your location during a club event. Off unless you turn it on, for that event. It shares one position, not a trail — each update replaces the last, so there is no history to leak. It is only visible to people going to the same event, only while the event is happening, and only for ten minutes after your last update. Turning it off or leaving the event deletes the position.

The raw GPS trace of a drive is never shared with anyone, not even when you publish the drive. What your club sees is the processed line on the map. A second-by-second trace with altitude and speed says far too much about where you live and who you visit for us to hand it around.

We do not use your location for anything other than the feature you turned on. We do not build a profile from it, and we do not give it to anyone for advertising.

Who can see what

KlubX is built around clubs, and the club is the privacy boundary.

• Members of a club can see other members' profiles, cars, published drives, posts, photos, events and places in that club.
• People outside the club see none of it. There is no public feed, and nothing you post is visible outside your club.
• A club can choose to appear in the club directory so that other people can find it. That shows the club's shop window and nothing else — see below.
• Direct messages are visible only to the two people in the conversation. If you delete a conversation, it disappears from your inbox and stays in theirs — see "Deleting a conversation" below.
• Club admins can see the fundraiser records, can remove members and can mute them. They cannot read your direct messages and cannot see your unpublished drives.
• If you are in two clubs, they stay separate. Your posts in one do not appear in the other.

The operator role

One account — ours, as the people who run KlubX — holds an operator role in a club it set up. We would rather write this down than have you find it in a settings screen.

What that role can do is remove content and undo an admin's decision in that club: take down a post or a photo, change a member's role, or hand the club back to somebody. It exists so that a club whose owner walks away, or whose admin locks everyone out, is not a club nobody can rescue. Every action it takes is written to a log that the club's admins can read, with what was done, to what, and when.

What it cannot do is the part that matters:

• It cannot read your direct messages. Nobody can, other than the two of you.
• It cannot see a drive you have not published, and it cannot see the GPS trace of any drive it does not own.
• It cannot see a build project you keep private.

Those three are not promises about how we behave. They are enforced by the database itself, the same way they are enforced for everyone else, and changing that would mean rewriting this paragraph first.

The club directory

A club can choose to appear in the KlubX club directory, where any signed-in KlubX user can find it. Only the club's shop window is shown: its name, description, logo, city, country, the marques it is about, and how many members it has. Its posts, photos, drives, events, and who its members are, are not shown and do not become visible by being listed.

No club is listed unless the club asks for it and we approve it, and a club that changes its mind stops being listed as soon as it says so. A club that never asks is not findable at all: it does not appear in searches and its existence is not disclosed to anyone.

If you ask to join a club, that club's admins see your display name, your profile photo, your city, the message you write, and the one car you choose to attach, if you attach one. They do not see the rest of your garage, your drives, or anything from your other clubs. If they say no, what is kept is the record that they said no, so that the app can stop you from asking the same club again straight away.

Money

KlubX is free to use today. There is no advertising in it, and nothing in the app watches what you do and reports it somewhere else.

Some features may cost money in the future, and there may be commercial content in the app. If that happens, you will see what it is before it affects you: prices before you pay, and a notice in the app before anything you use today changes. What will not change is the first line of this policy — we do not sell your personal information, and we do not build a profile of you to sell attention.

Who we share it with

We use a small number of companies to run the service. They process data on our instructions and are not allowed to use it for their own purposes.

• Supabase — the database, sign-in, and file storage. This is where almost everything lives. Hosted on Amazon Web Services in Virginia, United States.
• Mapbox — the maps. Loading a map tells Mapbox roughly what part of the world you are looking at, along with your IP address. We have turned Mapbox's own telemetry collection off.
• Expo — delivering push notifications, which then go through Apple's or Google's notification service to reach your device.
• Apple and Google — distributing the app, and Sign in with Apple if you use it.

That is the whole list. There are no analytics or tracking tools in the app, we do not sell personal information, and we do not share it for advertising.

The workshops and businesses that appear in the map search come from OpenStreetMap, whose data is available under the Open Database License. That is a one-way import that happens on our servers: searching it does not send anything about you to OpenStreetMap.

When you tap "open in Google Maps" for a place, you leave KlubX and Google's own privacy policy applies from there.

Sending data outside your country

Our servers are in the United States. If you are in the European Economic Area, the United Kingdom, or another country with transfer rules, that means your data leaves your country.

We rely on the European Commission's Standard Contractual Clauses, which our hosting provider has signed, to protect it. You can ask us for a copy at klubx.app@proton.me.

How long we keep it

• Your account and everything attached to it: until you delete your account. Then it goes, as described in the next section.
• A drive: until you delete it, or you delete your account.
• A live position shared during an event: it stops being visible ten minutes after the last update, and is deleted when you turn sharing off, when you leave the event, or automatically once the event is over.
• Photos in a club event album: these stay with the event even if you leave the club, because they belong to the event and the other people in them. Your name comes off them.
• A mute: it stops applying by itself the moment it expires. The record of it goes when your account does.
• Server logs: kept for a short period by our hosting provider for security and troubleshooting.

Deleting a conversation

You can remove a direct-message conversation from your inbox. It is removed for you and not for the other person. Their copy stays as it was.

We know that is not what "delete" sounds like, so here is why: a chat is two copies of the same conversation, not one shared between you. Letting one side erase the other's copy would mean letting anyone rewrite what somebody else remembers of a conversation. The same principle is why nobody can edit or delete a message you wrote.

If they write to you again, the conversation comes back — with the new messages, and none of the old ones.

To delete a single message you sent, hold it and delete it. That one does disappear for both of you, because it is yours.

Deleting your account

You can delete your account from inside the app: Settings → Delete account. You can also ask us at klubx.app@proton.me, or through the form at klubx.app, without reinstalling the app.

When you delete your account, we permanently remove your profile, your cars and their photos, your drives and their GPS traces, your posts, comments, reactions, votes, places and reviews you wrote, your direct messages, your push tokens, and your sign-in credentials.

Two things are handled differently, and we would rather tell you now than surprise you:

• Photos you added to a club event album stay in the album, without your name. They document a club event that other people were also at.
• If you are the owner of a club, you must hand the club over to another member before you can delete your account. Otherwise the club is left with nobody who can run it. The app walks you through it.

Your rights

Wherever you live, you can ask us to:

• See what we hold about you, and get a copy.
• Correct anything wrong. Most of it you can edit yourself in the app.
• Delete your account and your data.
• Take your data with you in a portable format.
• Object to, or restrict, how we use it.
• Withdraw consent for anything you turned on, such as automatic drive detection or sharing your location during an event. Withdrawing it does not undo what was lawful before.

Write to klubx.app@proton.me. It is free, and we will not make it difficult.

If you are in Panama, Ley 81 de 2019 gives you these rights with deadlines: ten working days for access, cancellation and portability, and five working days for correction. If we do not do what we should, you can complain to the Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI), Dirección de Protección de Datos Personales, at protecciondedatos@antai.gob.pa.

If you are in the European Economic Area or the United Kingdom, you have these rights under the GDPR, and you can complain to your national data protection authority.

If you are in California, we do not meet the thresholds that make the CCPA apply to us, and we do not sell or share personal information or use it for cross-context behavioural advertising. We give you the rights above anyway.

Automated decisions

There are none. Nothing in KlubX makes a decision about you automatically, and we do not profile you.

Security

Every photo bucket is private and served through short-lived signed links, never public URLs. Access to your club's data is enforced in the database itself, row by row, not just in the app — so a bug in a screen cannot hand someone data they should not have. Passwords are hashed by our sign-in provider and we never see them.

No system is perfect. If something does go wrong and your data is affected, we will tell you and the relevant authority, within 72 hours where the law requires it.

Children

KlubX is for people aged 16 and over. We do not knowingly collect anything from anyone younger. If you believe a child has an account, write to klubx.app@proton.me and we will remove it.

Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect. The date at the top always tells you which version you are reading.

Who is responsible, and how to reach them

The controller of your personal data is:

• Mariam Lisette Pitti Rios
• 76 Este, San Francisco, Panama City, Panama
• klubx.app@proton.me

Write to that email about anything in this policy: to ask what we hold about you, to correct it, to get a copy, to object, or to complain. It is free, and we will not make it difficult.

If you are in Panama and you are not satisfied with our answer, you can complain to ANTAI (Autoridad Nacional de Transparencia y Acceso a la Información). If you are in the European Union or the United Kingdom, you can complain to your national data protection authority.