TELEMETRY & DATA

This Privacy Policy explains how TOFUC collects, uses, stores, shares, and protects your information when you use our mobile application and related services. We have crafted this policy with the same precision and care that you apply to your vehicle builds. Our philosophy is simple: collect the minimum, protect the maximum, and never sell your data.

TOFUC is designed with privacy as a foundational principle, not an afterthought. Because we do not require user accounts, email addresses, or passwords, the amount of personally identifiable information we collect is intentionally minimal. Your garage data, vehicle specifications, photographs, and expense records remain primarily under your control, stored locally on your device.

By using TOFUC, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our application. This policy complies with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) where applicable.

We collect only the information necessary to provide and improve TOFUC services. The categories of information we may collect include:

Device Information: We may collect non-personal technical information about your device, including device model, operating system version, unique device identifiers (such as IDFA with your consent), and mobile network information. This data helps us optimize performance and diagnose issues.

Usage Analytics: We may collect anonymous usage statistics, such as feature usage frequency, screen views, button taps, and session duration. This information is aggregated and de-identified, meaning it cannot be used to identify you personally.

Crash Reports: If the application crashes, we may automatically collect diagnostic information including error logs, stack traces, and device state at the time of the crash. This data is used solely for debugging and improving application stability.

In-App Purchase Data: When you purchase T-Coins, Apple Inc. processes the transaction. We receive only a transaction receipt identifier and the product purchased. We do not collect or store your payment card information, billing address, or Apple ID credentials.

We use the information we collect for the following legitimate business purposes:

• Service Provision: To operate, maintain, and provide the core features of TOFUC, including vehicle data storage, photo management, expense tracking, and T-Coin balance management.
• Performance Optimization: To analyze application performance, identify bottlenecks, optimize battery usage, and improve load times across different device configurations.
• Quality Assurance: To detect and fix bugs, crashes, and other technical issues that affect user experience.
• Fraud Prevention: To detect and prevent unauthorized access, cheating, exploitation of the T-Coin system, or other abusive behavior.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects. We do not use your vehicle data, photographs, or personal records for advertising targeting or behavioral analysis.

Your vehicle data, photographs, modification records, and expense logs are stored locally on your device using Apple's secure storage frameworks. This data is not transmitted to our servers unless you explicitly enable device cloud backup through iCloud. We do not maintain centralized databases of user vehicle information.

We implement industry-standard security measures to protect any data that does pass through our systems, including encryption in transit using Transport Layer Security (TLS) and encryption at rest where applicable. Access to our internal systems is restricted to authorized personnel only and protected by multi-factor authentication.

While we take reasonable precautions to protect your information, no security system is impenetrable. We cannot guarantee the absolute security of your data against unauthorized access, hardware or software failure, or other factors beyond our reasonable control. You acknowledge that you provide information at your own risk.

We are committed to keeping your information private. We do not sell, rent, trade, or otherwise transfer your personal information to third parties for marketing or advertising purposes. We may share information only in the following limited circumstances:

• Service Providers: We may engage trusted third-party vendors to perform functions on our behalf, such as cloud hosting, analytics, or crash reporting. These providers have access only to the information necessary to perform their functions and are contractually obligated to maintain confidentiality.
• Legal Requirements: We may disclose information if required to do so by law, court order, or governmental regulation, or if we believe in good faith that such disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, user information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your information.
• With Your Consent: We may share information with third parties when you have given us explicit permission to do so.

Aggregated, anonymized data that cannot reasonably be used to identify you may be shared for research, statistical, or marketing purposes.

Protecting your data is as important to us as protecting a high-performance engine. We employ multiple layers of security safeguards:

• Data Minimization: By design, we collect the absolute minimum amount of data required to operate the service.
• Local-First Architecture: Sensitive data remains on your device rather than centralized servers.
• Encryption: Data transmitted over networks is encrypted using TLS 1.2 or higher. Locally stored data benefits from Apple's hardware-level encryption on modern iOS devices.
• Access Controls: Internal access to any server infrastructure is restricted, logged, and monitored.
• Regular Audits: We conduct periodic security assessments and code reviews to identify and remediate vulnerabilities.

Despite these measures, the security of information transmitted through the internet or mobile networks cannot be guaranteed. We encourage you to take additional precautions, such as keeping your device operating system updated, using device passcodes or biometric locks, and enabling remote wipe capabilities.

Depending on your jurisdiction, you may have certain rights regarding your personal information. Under applicable United States law, particularly the CCPA/CPRA for California residents, you have the following rights:

• Right to Know: You have the right to request disclosure of the specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions required by law.
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Note that TOFUC does not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: You have the right to request correction of inaccurate personal information.

To exercise any of these rights, please contact us using the information provided in the Race Control section. Because TOFUC does not maintain user accounts, deletion requests primarily involve removing analytics identifiers associated with your device. To delete all local data, simply delete and reinstall the application.

TOFUC integrates with or may reference third-party services that have their own privacy policies. These include:

• Apple App Store: Processes all in-app purchases. Governed by Apple's Privacy Policy and Terms of Service.
• Apple iCloud: Optionally stores your device backups, which may include TOFUC data. Governed by Apple's iCloud Terms and Conditions.
• Analytics Providers: We may use anonymous analytics services to understand application usage. These services collect aggregated, non-identifiable data.
• Crash Reporting Services: We may use crash reporting tools to collect diagnostic information when the application fails.

We are not responsible for the privacy practices of these third parties. We encourage you to review their respective privacy policies before using their services. The inclusion of any third-party service does not imply our endorsement of their privacy practices.

TOFUC is not intended for use by individuals under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child under 13 has provided us with personal information without your consent, please contact us immediately, and we will take steps to delete such information.

If we become aware that we have inadvertently collected personal information from a child under 13, we will promptly delete that information from our records. If you are under 13, please do not use TOFUC or provide any information through the application.

For users between the ages of 13 and 17, we recommend that parents or guardians review this Privacy Policy and monitor their minor's use of the application, particularly regarding in-app purchases and photo uploads.

TOFUC is a native mobile application, not a website, and does not use traditional browser cookies. However, we and our third-party service providers may use similar technologies, including device identifiers, local storage, and mobile analytics SDKs, for the purposes described in this policy.

Apple's App Tracking Transparency framework requires us to request your permission before accessing your device's advertising identifier (IDFA). If you decline tracking permission, we will not access your IDFA, though anonymous analytics may still be collected using non-identifiable methods.

You can manage tracking permissions at any time through your device Settings under Privacy & Security > Tracking. Disabling tracking will not affect the core functionality of TOFUC.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or application features. When we make material changes, we will notify you through an in-app notification or by updating the effective date at the top of this policy.

Your continued use of TOFUC after any modifications constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information. Non-material changes, such as clarifications or formatting updates, may be made without notice.

The most current version of this Privacy Policy will always be available within the TOFUC application settings menu and on our designated support page.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our privacy team. We are committed to addressing your inquiries promptly and transparently.

Last updated: April 2026 — TOFUC Development Team