TQ WK

Privacy Policy

We never sell or share your data. Ever. Here is exactly what we do with it. Last updated 2026-09-28.

The promise

TQ WK never sells your personal data, never shares it with advertisers or data brokers, and never embeds third-party advertising or tracking SDKs. The only companies that ever handle your data are the ones we need to run the service, listed below, and they may use it only to provide that service to us.

What we collect

• Account: your name, username, email, mobile phone, and date of birth. The date of birth is used only to confirm you are 16 or older and, in whole years, to keep ads age-appropriate; it is never shown to anyone. On iPhone and iPad, Apple's Declared Age Range may also tell us the age band you or your family organiser set for the device (under 16, 16–17, or 18 and over) — never your exact age; we use it for the same two purposes and keep it with your date of birth.
• Sign-in providers: if you use Sign in with Apple or Google, we receive the name and email they give us (with Apple you can hide your email).
• Content you post: posts, comments, photos, videos, listings, reviews, messages, event and rental details, and your garage. Photos and videos are converted on your own device before they are uploaded, and the hidden data a camera writes into a file — including where it was taken — is removed in that step; we never receive it.
• Payments: when you buy or sell through TQ WK, Stripe collects your card or payout details. TQ WK never sees your full card number; we keep the record of what was bought, from whom, for how much.
• Location: only when you use a feature that needs it — the map, the marketplace search ring, drive times and weather — and only while you use it. Drive telemetry (speed on roads around an event) is collected only if you switch it on, is anonymised, and can be switched off at any time.
• Event check-ins: when you scan the check-in code posted at an event's gate, we record that you checked in to that event and when, so you can vote in its People's Choice. Scanning the code is how you check in; your location is not used for it.
• Contacts: only if you choose "find friends from contacts". Phone numbers are hashed on your device before they are sent; we match hashes and never store your address book.
• Device: push-notification tokens, app version and crash reports, so the app works and we can fix it. Crash reports (Firebase Crashlytics) describe what went wrong in the app and on which kind of device; they are not tied to your account. Week announcements — notices from the people running a car week — reach your phone through a notification topic your phone joins on its own when it decides it is near that week or the week is on your schedule; the decision is made on the device, your location is not sent to us for it, and Settings → Notifications turns it off.
• Reports and blocks: who reported or blocked what, so we can act on it. These are never shown to the person reported or blocked.
• Ads: TQ WK shows promotions bought by members and event partners. Which ads you were shown and whether you tapped them is recorded against your account so we can cap how often you see one and report delivery to the advertiser. Advertisers see counts, never who. Ads are targeted only by where you are looking (a feed, an event, a search) and your age band — never by tracking you across other apps or websites, and there is no advertising identifier in TQ WK.

What we use it for

Running TQ WK: showing you the feeds, matching buyers and sellers, delivering messages and notifications, processing payments, keeping the community safe by acting on reports, and understanding what breaks so we can fix it. That is all.

Who handles it for us

• Google Firebase (Google LLC) — hosting, database, storage, sign-in, push notifications, and abuse protection (App Check).
• Google Cloud Vision (Google LLC) — every photo uploaded to TQ WK is checked by machine for nudity, violence and hate imagery before anyone sees it. The photo is analysed and the result kept; Google does not keep the photo.
• Stripe, Inc. — payments and payouts. If you are paid through TQ WK (as a seller, host or event organiser), Stripe checks your identity and collects your bank details on its own pages; TQ WK receives only whether you can be paid and what Stripe still needs, never the document or the account number.
• Twilio, Inc. — text messages for verification and account recovery.
• Apple and Google — sign-in, if you choose those providers.
• OpenStreetMap Foundation — map tiles, and geocoding. When you open a map, your device fetches the tiles directly, so OpenStreetMap sees your IP address and the area of map you are looking at, and nothing else about you. When you publish a rental listing, we send that listing's address once to OpenStreetMap's geocoder to turn it into a map pin; nothing that identifies you goes with it. Your listing then shows the town, never the street line — a renter gets the exact address with their booking. When you post something in the Market, we send the neighborhood or town you typed to the same geocoder so buyers can search by distance, and we blur the pin by up to about half a mile; if what you typed turns out to be a street address, your listing shows only its town and the street line is not kept. When you plan a Market trip to a town, we look that town up the same way and send back only its map point; we keep no record of it, and your trips themselves stay on your phone.
• Project OSRM (demo server) — turn-by-turn routes in TQ WK Drive. A route request carries the start and end points and nothing that identifies you.
• RainViewer and the US National Weather Service — radar and weather alerts. Requests carry the map area or the event's location, never your identity.
• YouTube (Google LLC) — when a video on TQ WK is a YouTube video, it plays in YouTube's own player and Google's privacy policy applies to that playback.

Each is bound by a data-processing agreement and may use your data only to provide its service to us.

Who can see what

Your username, profile photo, bio, garage and public posts are visible to other signed-in TQ WK members. Your real name, friend list and media are visible only as far as you allow in Settings → Privacy (real name is private by default). Your phone and email are never shown to other members; other members can find you by phone or email only if you switch that on. Messages are visible only to the people in the conversation and, if reported, to our moderation team.

How long we keep it

As long as your account is open. When you delete your account (open your profile and tap Delete account, or use torqueweek.com/delete-account) your profile, garage, schedule, listings, friends, blocks, contact hashes and device tokens are deleted; your posts, comments and reviews are de-identified so other people's conversations are not destroyed; payment records are kept for as long as tax and payment law require, separately and no longer linked to you.

Security

Data is encrypted in transit and at rest. Passwords are never stored by TQ WK; Firebase stores a one-way hash. Every request to our servers must come from a genuine copy of the app (App Check). Access to production data is limited to the people who run TQ WK and is logged.

Children

TQ WK is for people 16 and older. We do not knowingly collect data from anyone under 16; if we learn we have, we delete it and close the account.

Your rights

You can see and correct your data in the app, delete your account from your profile or at torqueweek.com/delete-account, and request a copy of your data by emailing support@torqueweek.com. If you live somewhere with privacy laws that give you additional rights (for example California, the EU or the UK), you have them, and we honour them.

Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect.

Contact

support@torqueweek.com — Torque Week, Valparaiso, Indiana, USA.