GarageStacks owner app
Privacy
23 September 2026 · FutureStack Ltd, Nairobi, Kenya · garagestacks.futurestacks.online
This is the privacy note for the owner app and the GarageStacks website used by car owners. GarageOS (the garage side) is a separate product and stays on mobile web for now.
In short
GarageStacks keeps a service history on the car. To do that we hold your account, the cars you add, photos of receipts, and the jobs garages confirm on those cars.
We do not take payments inside the app. If you pay us, you pay on the website (M-Pesa or card). Those processors see what they need to complete the payment. We do not sell your data.
On the public pages we use advertising tags from Meta, Google and TikTok to see which of our ads bring people to GarageStacks. They record visits and sign-ups, not what is on your car's record. You can block them in your browser settings or with an ad blocker.
To delete your account, open the app, tap You, then Delete my account, or see how to delete your account. To have a single car record deleted, write to us. Contact is at the bottom.
Who this covers
This note covers people in Kenya (and anyone else) who:
- create an owner account with a phone number or email and a password
- add cars and keep a service history
- upload receipt photos
- see garage-confirmed jobs on their cars
- use the website to pay
It does not cover a garage’s own GarageOS books. A garage you take the car to will see the job details they need to confirm work on that car.
What we collect
Account. Phone number and/or email, password (stored as a hash, not as the password itself), and the name you give us if you give one.
Cars. Registration (number plate), chassis / VIN if you enter it, make, model, year, colour, and any other details you type onto the car record. We need these so the history sits on the right car and so a garage can confirm the right job.
Service history and jobs. Lines you add, lines a garage confirms, dates, mileage if you enter it, workshop name, and notes. A line is stamped so you can see whether it is owner-added or garage-confirmed.
Receipt photos. Pictures you take or upload of invoices, job cards, or faded thermal receipts. We store them so they stay with the car after the paper fades.
Garage confirmation. When a garage you use confirms work, we keep that confirmation on the car. The garage sees the car and job details needed to sign that line.
Technical basics. When you use the site or app we get the usual server logs: IP address, device/browser type, and time of the request. We use this to keep the service up and to look at faults. We do not use it to build an advertising profile.
Payments (website only). The owner app does not take in-app purchases and does not take M-Pesa or card payments inside the app. If you subscribe or pay a fee, you do it on the website. The payment processor then handles the M-Pesa or card payment. We keep a record that a payment succeeded and which plan or car it relates to. We do not store full card numbers.
We do not ask for your logbook as a government document upload in the owner app. If you type a registration or chassis number, that is vehicle identification you chose to save on the car.
Why we collect it
- so you can log in and see your cars
- so the history stays on the car, not in a glove box
- so a garage you use can confirm work they actually did
- so receipt photos do not disappear when the thermal ink fades
- so we can run the website, fix bugs, and stop abuse
- so we can match a website payment to your account (when you pay)
We are not building this to sell lists of owners or cars.
Who we share with
Garages you use. If you take a car to a garage on GarageStacks, that garage sees the car and the job they are confirming. They do not get your password. They get what they need to stamp the work.
Reading receipts and answering questions. When you snap a receipt or logbook, or ask Spanner about your car, the photo or question and the car details it needs are sent to Google's Gemini service, which reads it or writes the answer and sends it back to us. We use the result to fill in your record or reply to you.
Payment processors, on the website only. The M-Pesa and card processor (Paystack) sees the payment details it needs. The app does not pass card or till data through an in-app purchase.
Hosting and the usual plumbing. The product runs on servers and related services we use to keep it online (hosting, email/SMS delivery if we send a login or reset message). They process data on our instruction, not for their own marketing of your cars.
The law. If a Kenyan court or regulator lawfully requires it, we will hand over what we must.
We do not sell owner lists. We do not sell car histories to data brokers.
A time-limited share link (if you create one for a buyer) shows the history you chose to share, for as long as that link is valid. That is you sharing, not us selling.
How long we keep it
- Account and cars. For as long as the account is open, and for a short period after you ask us to delete it so we can finish the deletion and stop the same record reappearing by mistake.
- Service history and receipt photos. For as long as the car record exists. The point of the product is that the history can outlast a sale. If you delete the car or the account, we delete or detach that history as you ask.
- Payment records on the website. For as long as we need them for accounts, refunds, and tax. We do not keep full card numbers.
- Server logs. A short operational window, then they roll off.
If a garage confirmed a line on a car, deleting your account may leave a gap on that car’s public-facing history. We will tell you if a deletion request cannot be done cleanly and why.
Your choices
You can:
- correct your account, car details, and history lines in the product
- delete a car or a receipt photo you uploaded
- ask us to delete your account
- ask us what we hold on you
To delete an account, or if the in-product controls are not enough, email us. Say you want the GarageStacks owner account removed and use the phone or email you signed up with.
Kenya’s Data Protection Act, 2019 gives you rights to access, correct, and delete personal data, and to complain to the Office of the Data Protection Commissioner if you are not satisfied. This note is written in plain English; it is not a substitute for legal advice.
Children
GarageStacks is for people who own or look after a car. We do not aim it at children. If we learn we have an account for someone who should not have one, we will close it.
Security
We use HTTPS on the site and app traffic. Passwords are stored hashed. Receipt photos and car records sit on our hosting, not on a public folder. No system is perfect. If we become aware of a breach that affects you, we will contact you and the relevant Kenyan authority as the law requires.
The app and payments
The owner app is for login, cars, history, receipts, and garage confirmation.
It does not:
- take in-app purchases
- take M-Pesa or card payments inside the app
- replace the website checkout
Pay on garagestacks.futurestacks.online.
Changes
If we change this note in a material way, we will update the date and put the new version at /privacy. Keep using the product after that date means you have seen the new note.
Contact
FutureStack Ltd
Nairobi, Kenya
Email: [email protected]
Product: https://garagestacks.futurestacks.online
Write “GarageStacks privacy” in the subject if you can.