Faultfolio · Privacy

Privacy policy

Effective and last updated: 3 September 2026 · Operated by Essor AWD

Faultfolio is operated by Essor AWD. This policy explains what information the web service and the Android app handle, why, and what you can do about it. Faultfolio is designed so that one account holds one owner's private vehicle history and no other user can read it.

Information we handle

Account and profile. Your email address, password credential held by the authentication service, display name, account creation and sign-in timestamps.

Your vehicle. The single vehicle record you create: registration if you enter one, nickname, make, model, year, mileage readings and ownership type.

Fault history. Fault cases and their timeline events, including your descriptions, dates, severity and status you set, warning lights and diagnostic fault codes you record, garage and dealer visit notes, quoted or paid repair costs, outcomes, next actions and your own notes.

Evidence files. Photographs, documents and audio you upload, together with file name, type, size and upload time. These are stored in private storage and are not publicly listable; downloads use time-limited links issued to your signed-in session.

Reminders and preferences. Reminder titles and due dates, completion state, and your notification preferences for reminder emails, follow-up prompts and product updates.

Subscription data. Your subscription status, current period end, cancellation flag, whether the introductory month has been used, and the payment processor's customer and subscription identifiers. Full payment-card details are handled by Stripe and are not stored in the Faultfolio application database.

Transactional email. The address we send service email to, and delivery and engagement events reported by the email service, for messages such as sign-up confirmation, password reset, subscription activation, renewal reminders, payment failure, cancellation and refund notices.

Device, network and security data. Information necessarily processed to serve and secure requests, such as IP address, request timestamps, browser or app version and error diagnostics, plus authentication and security logs. On the Android app, an on-device private cache of your own records supports offline viewing and is cleared when you sign out.

Why we handle it, and on what basis

At a high level: most processing is necessary to perform our contract with you — to create your account, hold your vehicle and fault records, store and return your evidence, generate reports, send reminders you have enabled, and manage paid access. Some processing rests on our legitimate interests in keeping the service secure, preventing abuse and fraud, diagnosing faults in the software and defending legal claims, balanced against your interests. Some rests on legal obligation, such as billing, tax and accounting records held by us or our payment processor. Optional product-update email rests on your consent, which you can withdraw in Settings at any time; it is off unless you turn it on.

Service providers

We do not sell your personal information and we do not use your vehicle evidence for advertising. Information is processed on our behalf by the providers needed to run Faultfolio: Supabase for authentication, database and private file storage; Stripe for subscription payments, billing portal and payment fraud prevention; Resend for transactional email delivery from our verified sending domain; and our application hosting and content-delivery infrastructure. Each processes information only to provide its service to us, or to meet its own legal, security and fraud-prevention obligations. Some providers may process data outside the UK; where that happens we rely on the safeguards those providers offer for international transfers.

Security

Access is authenticated, and database and storage rules are scoped to the owning account and to an active paid entitlement, enforced on the server rather than trusted from the app. Evidence lives in a private bucket restricted to supported file types and a per-file size limit, with time-limited download links. Transport uses HTTPS, and billing state is only ever written from verified payment-processor events. No system can promise absolute security, but the design goal is that one user cannot read or change another user's records.

Retention

Your records are kept while your account exists. When you permanently delete your account, the private evidence files are removed and the authentication account and associated application records are deleted. Limited technical logs and routine backups may persist for a short period as part of normal security and disaster-recovery practice. Billing, tax and fraud-prevention records may be retained by us or by Stripe for as long as the law requires, and security or abuse records may be kept where needed to protect the service or defend a claim.

Your rights

You have the right to access your data, to have inaccurate data corrected, to erasure, to restrict or object to certain processing, to data portability, and to withdraw consent where consent is the basis. You can exercise several of these directly: export your data from Settings, edit your profile and records, change notification preferences, or delete your account. For anything else, contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how we have handled your information.

Delete a Faultfolio account · Cookies and browser storage

Children

Faultfolio is intended for adult vehicle owners and is not directed at children. We do not knowingly create accounts for under-18s.

Changes to this policy

We update this policy when Faultfolio's features, providers or legal obligations change. The effective date at the top of this page identifies the current version.

Privacy contact

Privacy, access and deletion requests can be sent to Essor AWD using the contact method published at essorawd.com. Please do not include payment-card details or vehicle evidence files in a general enquiry.