Last updated: 23 October 2026
GarageVivo records the history of a bicycle so that whoever owns it next can read it. This page says what that means for the person using it: what is stored, why, who else sees it, and how to leave. The controller is GMSoft di Gatti Matteo, Contrada Ponte Tavole 3/C, 62014 Corridonia (MC), Italy. VAT IT01953870431, REA MC-270129. Certified mail matteo.gatti@gigapec.it.
Application: the GarageVivo mobile application. Service: the Application together with the public passport pages served from garagevivo.com.
Company, we, us: GMSoft di Gatti Matteo, Contrada Ponte Tavole 3/C, 62014 Corridonia (MC), Italy, the controller of the personal data described here.
User, you: the person using the Application. Personal Data: information relating to an identified or identifiable person. Usage Data: data generated by using the Service.
Passport: the record of one bicycle. Public passport: that record as a stranger sees it, once you switch sharing on.
Your email address and the identity your sign-in provider gives us. GarageVivo has no password of its own: you sign in with Apple, with Google, or with a link we email you, and what reaches us is what those providers send.
A display name, and a picture if you upload one. Both are yours to change or empty at any time.
Your country and the language you read the Application in.
Which version of the terms and of this policy you accepted, and when: on the sign-in screen, or when the Application asked again after a change. With it we keep the language, the platform and the version of the Application it happened in, because that record is how we can show what you agreed to.
We do not collect advertising identifiers, we do not track you across other apps or websites, and we do not build a profile of you for marketing.
What you enter: name, brand, model, category, year, frame material and size, weight, colour, serial number and frame number, and the purchase date and price if you record them.
What you attach: photographs, and documents such as invoices, warranties and manuals.
What you record over time: components fitted and removed, battery measurements, maintenance, and the timeline those produce.
A serial number and a frame number are the two fields that identify a specific bicycle rather than describe it. They are never shown on a public passport.
Connecting Strava is optional and nothing about it is stored until you do.
If you connect it we store your Strava user id and username, the access and refresh tokens that let us ask on your behalf, the names of your Strava gear, and your rides: start time, distance, moving time, elevation and sport type.
Disconnecting deletes the tokens and stops the asking. Rides already imported stay on the bicycle they were matched to, because they are part of its usage history.
We measure how the Application is used, which screen was opened, when it was opened, updated or put away, the device model and operating system, and whether the session is a bicycle owner's or a workshop's. It is how we find out which parts of the Service work and which are never reached.
We also record that certain things happened, never what they contained: that somebody signed in, with Apple, Google or an email link, and whether the account had just been created, which side of the product they chose, that a workshop was registered and asked to be checked, that a workshop found a bicycle, opened a visit, saved and signed its interventions and closed the visit, and after how many days, which action it chose on one of its bicycles, that it made a tag (never its name), how it filtered its lists and that it discarded a draft, that a bicycle was registered, in which category, whether a frame number was given with it and how many of the other details were filled in, that a registration was left unfinished, which choice was made in the menu for adding things, that a photograph or a battery was added, that a workshop's search found nothing and whether what it looked for had the shape of a frame number or of a passport identifier, and that a PIN was refused. The number searched for, the number on your frame, the name of your bicycle and the PIN itself are not sent, and a length is the most that is ever said about anything typed.
None of it is attached to you. It is sent under an identifier belonging to the installation rather than to your account; we never send your account id, your email address, your name, or anything at all about a bicycle; and the two cannot be joined afterwards.
There is no session recording and no screen recording. The address your requests arrive from is not turned into a place, no advertising identifier is read, and nothing here follows you into another app or website.
When the Application fails with an error it did not expect, we receive a report of it: the kind of error, where in our code it happened, the version of the Application and the device model and system. The message that comes with an error is rewritten before it leaves your device, so an email address, a value you typed, a code or an address inside it is replaced by what kind of thing it was. The report is sent under the same installation identifier as the rest, and is not attached to you.
It is processed in the European Union by PostHog. Because it names nobody, it cannot single you out and cannot be used to decide anything about you.
A message you send us yourself, with Send feedback in Account or in a workshop's tab, is different: it is attached to your account, because we may need to answer it. We keep the kind you chose, what you wrote, whether you sent it from Account or from a workshop's tab and which workshop, and the version of the Application and your phone's system. Nothing else about your device, and nothing about what you did before writing. Only we read it, at our own desk.
Contract, for the account and for everything the Service does with what you record. Without it there is nothing to provide.
Consent, for connecting Strava and for publishing a passport. Both are off until you turn them on, and both can be withdrawn without giving a reason.
Contract, too, for a workshop's name on the public passport when the workshop chooses it, and the legitimate interests of whoever owns the bicycle and whoever buys it in keeping a certified record already published intact (section 9).
Legitimate interests, for keeping the Service running, secure and free of abuse, and for the usage data in section 5, which identifies nobody.
Legitimate interests, too, for the one invitation we send to an address a workshop gave us for you (section 8): it is the only way to tell you a bicycle was registered as yours, and the address is used for nothing else.
Your request, for a message you send from the Application (section 5): we use it to answer you and to improve the Service, and for nothing else.
Legal obligation, where the law requires us to keep or produce something.
Nothing, until you switch a passport on. A bicycle is private when you register it.
A public passport shows the bicycle: make, model, category, its maintenance history, its components, and estimated usage. Beside a certified service it may show the name of the workshop that signed it, if the workshop had chosen to appear when it signed (section 9). It never shows your name, your identity, the serial number, the frame number, your documents, or what you paid.
The link is a random 22-character token. Anyone holding it can read the passport; nobody can guess one. Switching sharing off makes the link stop working immediately, and it then answers exactly as an invented link does.
A public passport is readable without an account and may be seen by anyone you give the link to. Give it out accordingly.
When you hand a bicycle on, whoever held it before you still sees the work done while it was theirs that is waiting for their answer, and only that, until they confirm or contest it. The same holds for you with the bicycles you hand on.
A workshop can register at its bench a bicycle GarageVivo does not know, and declare it a customer's. To do so it gives us the customer's email address, and we use it for one thing: sending an invitation to accept the bicycle, with a code for somebody who signs in with a different address.
The workshop is never told whether that address already belongs to an account.
The address is kept while the invitation is open and erased when it closes: when the customer accepts, says the bicycle is not theirs or that they are not interested, or when the invitation expires after thirty days. What stays is the declaration itself, which workshop made it, who at the workshop, and when.
If you receive an invitation you did not expect, you can ignore it and it expires by itself, or write to support@garagevivo.com and we erase the address straight away.
A workshop gives us its legal name, its trading name, its VAT number, its address and a contact, and to be verified a chamber of commerce extract. For a sole trader these are data about a person: the legal name is often the owner's own name.
The VAT number is checked against the European register when verification is requested, and that answer is kept with the request. The extract is read by a person and deleted as soon as the request is approved, or thirty days after it is refused, so that a workshop contesting the decision is not asked to send it again. The decision, who made it and the names it approved are kept.
Every change of name is kept, with the seat at the workshop it was made from. A change of trading name after the verification is what makes the public passport show the legal name beside it (terms, section 9).
The customer who holds a bicycle, and whoever receives it from the workshop, always sees which workshop signed its work. The public passport shows the workshop's name only if the workshop chose to appear when it signed; until a workshop chooses, it does not appear. The choice, the seat it was made from and the version of the clause it was made under are kept, and so is the fact that the clause was shown.
Basis: contract, for the account and for the public attribution of signatures when the workshop chooses it. A name already written on a signature stays for as long as the record does, also after the workshop changes its choice or closes its account, because it is part of a certified record that its owner published and a buyer reads: the legitimate interest of both.
The choice is changed from the Application and applies to the signatures made after it. The rights in section 14 apply to a workshop as to anybody.
Supabase, for the database, authentication and file storage.
SendGrid, for the email we send you: the sign-in link, invitations and notifications. We do not measure whether you open them or what you press: no pixel and no rewritten links. The one image is the GarageVivo logo, the same file for everybody, served by garagevivo.com: loading it tells nobody who you are.
The provider of the server that hosts this page and our own back office, behind Cloudflare.
Cloudflare, which serves this page and the public passport pages.
PostHog, for the usage data in section 5, on its European infrastructure.
Expo, which delivers updates to the Application. When the Application starts it asks whether a newer version of its code exists, so your device's network address, its platform and the Application's version reach Expo. Nothing about you or your account is sent.
Google Cloud Vision, which checks a photo you upload for nudity and explicit content before anybody else sees it. The image goes to Google's European endpoint and comes back with a judgement; nothing else about you goes with it, and Google does not keep it.
Strava, only if you connected it, and only for what that connection needs.
Apple and Google, for sign-in. They tell us who you are; we do not tell them what you do here.
When you share a passport's link in a messaging app, that app (WhatsApp, Telegram, iMessage and the like) reads the page to show a preview: the bicycle's name, what is certified and recorded, and its photo. Only what the public passport already shows, and only because you chose to send the link.
We do not sell personal data and we do not share it for advertising.
Our processors may handle data outside the European Economic Area.
Where they do, the transfer relies on an adequacy decision or on Standard Contractual Clauses, together with the technical measures those require.
For as long as your account exists. When you delete it: at once, if nothing in it is tied to anybody else's data; otherwise thirty days later.
If you sign in but never finish signing up (you never choose whether you have a bicycle or a workshop) and add nothing, the account is erased entirely after fifteen days. You can sign up again with the same address whenever you like.
You can delete your account from inside the Application: Account, then delete your account. Every public passport you published goes dark at that moment, not thirty days later, and the Strava connection is dropped in the same step.
If your account is tied to nobody else's data (no bicycle of yours was held by somebody else before or after you, no workshop worked on it, and you signed, confirmed or wrote nothing on somebody else's), it is erased at once and entirely, your own bicycles and their history included, and you can sign up again with the same address. Otherwise, after thirty days your profile is removed permanently. The bicycles you registered keep their history, with your name no longer attached to any of it: a passport is for whoever owns that bicycle next, and it cannot lose its worth because you closed your account.
What remains after that point identifies no one: a bicycle, its services, its components, and the dates they happened.
An address a workshop gave us for a customer is erased when the invitation closes, thirty days at the latest (section 8).
A message you send from the Application is kept while your account exists, and goes with it; or sooner, if you ask us to delete it (section 5).
You can remove a single bicycle from its passport's menu. If nobody but you has ever touched it (no workshop, no signed service, no change of owner, nobody who asked for its passport) it is deleted at once and entirely, with its photos and documents. If it has a history it is archived instead: it leaves your garage and the history stays. If you leave a line saying why, we keep it with your account, for support, and it goes with the account. A workshop can remove a bicycle of its own in the same way, from its Bikes section: deleted when no service was ever signed on it and it was never anybody else's, archived otherwise.
Access to your data is enforced by the database itself, row by row, rather than by the application asking politely.
Traffic is encrypted in transit, files are stored with access control, and the tokens that let us reach Strava on your behalf are held separately from the rest of your integration.
No system is perfectly secure, and we do not claim otherwise.
Access, rectification, erasure, restriction, portability, objection, and the withdrawal of any consent you gave.
Deletion is in the Application. If you cannot open it, write to support@garagevivo.com from the address of your account and we delete it for you. For anything else, write to support@garagevivo.com and we will answer within one month.
You may also complain to the Garante per la protezione dei dati personali, or to the supervisory authority where you live.
The Service is not directed at children under 14. If you are younger, use it with a parent or guardian.
If an account belongs to someone under 14 without a parent's agreement, write to support@garagevivo.com and it will be removed.
The Application can send you to Strava, and a passport you publish may be linked from elsewhere. What those services do with your data is governed by their own policies, not by this one.
This policy may change. The version on this page is the one in force, and the date below says when it last did.
Where a change materially affects you, we will say so in the Application rather than only here.
garagevivo.com sets no cookie and loads nothing from anyone else: the page, its scripts and its typeface all come from us.
Since 23 October 2026 the home page and the download page count visits anonymously: that the page was opened, its language, the campaign named in its address (the utm parameters of an ad or a post), the website you came from, whether the screen is a phone's or a computer's, whether you scrolled to the section with the store badges, and which store button you tapped. Each visit has an identifier drawn when the page opens and forgotten when it closes, so two visits cannot be joined and nobody can be followed. Nothing is kept in your browser for it.
These counts pass through our own server, which forwards them to PostHog in the European Union without your address, so PostHog never learns it and cannot turn it into a place. Our server forwards only the items listed here; nothing you type and nothing else about your device is sent. They name nobody, cannot single you out, and are used only to learn whether the page and our ads work.
It keeps nothing in your browser. Until 13 October 2026 it kept one thing there, under the name gv-landing-open: whether the page was open the last time you came. If you visited before that day it may still be there; nothing reads it any more, it says nothing about you, and clearing your browsing data removes it.
Asking which features are on for everybody and where the app is listed is a request to our database provider, so your address reaches Supabase the way it reaches any server you visit. It is not kept as a record of you and it is not joined to anything.
The passport pages and these two documents are served the same way, and they carry nothing at all.
Until 13 October 2026 the website had a form to ask for early access, before the Application reached the stores. The form is gone, and everything that was left through it has been deleted.
GMSoft di Gatti Matteo, Contrada Ponte Tavole 3/C, 62014 Corridonia (MC), Italy. VAT IT01953870431, REA MC-270129. Certified mail matteo.gatti@gigapec.it.
support@garagevivo.com
You can also write to us on WhatsApp at +39 379 369 1044, from Contact support in the Application. WhatsApp is Meta's service: writing there gives us your phone number and your WhatsApp name, and what you send also passes through Meta under its own terms. We use it only to answer you, and you can ask us to delete the conversation at any time.