Privacy Policy

Ultimate Car Audio App · Last updated May 2026

1. Information We Collect

Information you provide directly

• Account information: email address, password (stored hashed and salted), first and last name, and an optional username/handle you choose.
• Profile information: avatar image, bio, location text (city/state/country, entered manually — we do not collect GPS coordinates), social media handles, and per-field privacy settings.
• User-generated content: saved box designs (dimensions, materials, build notes, linked subwoofer data), tone-generator presets, photos you attach to saved designs, submitted events, shop/brand/organization pages, reviews, RSVPs, and ratings.
• Subscription and purchase information: subscription tier (Pro / Shop Pro / Brand Pro), legacy-Pro status, supporter donation history, and the date and source of your subscription. Payment processing is handled by Apple App Store and Google Play; we do not receive or store your payment card details.
• Content reports: when you report a published design or other user-facing content, we record your account identifier, the reason you provide, and the date of the report so moderators can review and respond.

Information collected automatically

• Analytics data: anonymous usage events (screen views, feature usage, version numbers, device type and platform) collected via a third-party analytics provider. We use this data in aggregate to understand which features are used and how to improve them.
• Device identifiers: Apple-provided IDFA and Google Advertising ID, when you grant permission via the iOS App Tracking Transparency prompt or your Android device’s ad-personalization settings. Used for personalized advertising delivery (Pro subscribers do not see ads).
• App diagnostics: crash logs and basic device metadata (operating system version, app version) when the App encounters errors.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the App and Site (account authentication, saving and syncing your designs, displaying your public profile and published designs, processing RSVPs and reviews).
• Provide and bill subscription services through the App Store and Google Play.
• Personalize your experience (e.g., showing your saved designs, granting Pro access, awarding achievements).
• Communicate with you about your account, subscription, and reported content.
• Improve the App through analytics, bug fixes, and feature development.
• Enforce our Terms of Service, moderate user-submitted content, and respond to reports.
• Comply with legal obligations.

3. Public Content and Visibility

The following information may be publicly viewable by other App users and by visitors to caraudioapp.com:

• Your unique username/handle — always public when an account exists.
• Other profile fields (display name, avatar, bio, location, social handles, achievement progress, statistics) — viewable based on the per-field privacy settings you choose. The default for most fields is “private”; you must opt in to making them public or visible to other users.
• Published box designs — when you choose to publish a saved design, it becomes viewable at caraudioapp.com/d/<token> and on your public profile at caraudioapp.com/u/<username>. The published design includes its name, dimensions, build notes, attached photos, linked subwoofer information, and a generated hero image. Unpublishing immediately removes the design from public view and permanently invalidates that share URL — republishing later generates a new URL; the old URL stays inaccessible forever.
• Reviews and ratings you leave for shops or other pages.
• Events you create and submit for publication (after admin review).
• Shop, brand, and organization pages you own and publish.

Cross-user content saving: when another user saves a copy of one of your published designs to their library, any photos attached to the design are copied into the saving user’s storage. The saved copy is theirs to keep, even if you later unpublish the original.

You can change your privacy settings at any time in Settings → Profile & Privacy within the App. Changes take effect immediately for new viewers; previously-cached versions of public pages may take a short time to clear.

4. How We Share Your Information

We do not sell your personal data. We share information only as described below:

• Service providers: we share information with vendors who operate parts of the App on our behalf, in the following categories:
  • A cloud database, authentication, and file storage provider (located in the United States).
  • An analytics and crash reporting provider.
  • A subscription receipt validation service.
  • A payment processor for web-based Shop Pro / Brand Pro subscriptions (limited to billing data).
  • Apple App Store and Google Play — in-app subscription and donation processing.
  • A mobile advertising network for banner and interstitial ads (not shown to Pro subscribers).
• Other users: as described in Section 3 above, content you have chosen to publish or make public is visible to other users and to the general public via caraudioapp.com.
• Legal compliance: we may disclose information when required by law, subpoena, court order, or to protect the rights, property, or safety of Xplicit Tech Solutions, our users, or others.
• Business transfers: if Xplicit Tech Solutions is acquired, merged, or sells assets, your information may be transferred as part of that transaction. We will notify users in advance and provide reasonable options regarding their data.

5. Data Retention

• Account data and user-generated content: retained for as long as your account is active.
• Account deletion: when you delete your account through the App, your profile, saved designs, supporter donations, statistics, photos, and other personal data are removed within a reasonable period. Community-contributed data (such as subwoofer dyno test entries or shop reviews) may be retained in anonymized form to preserve database integrity.
• Pages you own: shop, brand, or organization pages may be removed or orphaned at our discretion when an owner’s account is deleted.
• Backups: copies of database backups may persist for up to 30 days after deletion before being overwritten.
• Analytics data: aggregate analytics are retained per the analytics provider’s default retention policies (up to 14 months).

6. Your Rights and Choices

Depending on where you live, you may have the following rights regarding your personal data:

• Access and portability — request a copy of your personal data.
• Correction — update inaccurate information through the App’s settings or by contacting us.
• Deletion — delete your account directly through the App (Settings → Account & Security → Delete Account) or by contacting us.
• Restriction or objection — request that we limit certain processing of your data.
• Withdrawal of consent — disable analytics and ad personalization through your device’s operating system settings.

To exercise these rights, use the in-app controls when available, or email us at legal@xplicittech.com. We may need to verify your identity before fulfilling certain requests.

7. Children

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at legal@xplicittech.com and we will delete it. Users between 13 and 18 may only use the App with parental or guardian consent.

8. Security

We use industry-standard security measures to protect your information, including:

• HTTPS/TLS encryption for all data in transit between the App and our servers.
• Encryption at rest for stored data via our cloud database provider.
• Per-user access controls so that users can only read and modify their own private data.
• Password hashing using industry-standard algorithms.

No security system is perfect, and we cannot guarantee absolute security. If we become aware of a data breach affecting your information, we will notify you and the appropriate regulators as required by law.

9. International Users

The App and Site are operated from the United States, and your information is stored on servers located in the United States. If you access the App from outside the United States, you consent to the transfer, storage, and processing of your information in the United States, which may have data protection laws that differ from those in your home country.

10. Third-Party Links and Content

The App and Site may contain links to third-party websites, news articles, or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or other factors. When we make material changes, we will notify users through an in-app prompt or by updating the “Last updated” date at the top of this policy. Continued use of the App or Site after changes are posted constitutes acceptance of the revised policy.

12. Contact