TunerSync Privacy Policy

Information we use

• Account and contact details. Portal sign-in uses your name, email and store-account identifier to connect you with your projects. A Contact Us inquiry or service record can also include a phone number and order reference. Shopify handles store sign-in; TunerSync does not receive your Shopify password or collect payment-card details.
• Vehicle and Accessport details. Information you send can include vehicle year, make, model, transmission, fuel, modifications, mileage, nickname, ECU information, Accessport serial number, model and firmware, and related diagnostic information. These details help us prepare and support your tune.
• Project content. We store messages, inquiry details, instructions, tune maps, uploaded datalogs, logging presets, reference files, photos, and the notes and service history associated with your project. Files or messages may contain identifying details beyond the fields shown in the app.
• Connection and delivery records. We record app connection and recent-use times, app version, message source and read state, and notification registration, receipt and opening information. We also record an installer-download request when it is made while signed in to the portal. A recorded download request does not prove that installation finished. The shop uses these records to understand project progress and whether a customer has connected or received an update.
• Support diagnostics. If you choose to share a connection report, it can include app and USB/Accessport diagnostic details. The report is shared with the destination you select.
• Direct email from TunerSync. If you use Send to tuner, we verify your sending email and store a separate app sending identity, the recipient you choose, your message and vehicle details, selected attachments, and send-status records. Cloudflare stores and processes this request; Google Workspace processes verification emails and the outgoing email and attachments. The email identifies TunerSync as the sender and uses your verified email as Reply-To. The recipient receives the files and can reply to you by email. No tuning purchase or portal project is required. We rate-limit verification and sending, using a short-lived hash of the network address for verification limits. A successful send status means the email service accepted the message, not that the recipient opened or received it.

How the app uses your phone

TunerSync reads the connected Accessport after Android grants USB access. It copies selected files between the Accessport and phone, and uploads to a portal project when you choose the relevant upload or send action. Connecting an Accessport does not automatically upload all its files to the portal.

The app stores saved files and related metadata on the phone. Moving a phone file to Recently removed keeps a recoverable local copy. Removing an AP or phone file does not remove the portal's project copy or history.

Your saved tuner name and email, confirmed tank capacity, fuel inputs and calculator preferences are stored on your phone. Ethanol blend calculations run on the phone; using the calculator does not send those inputs to Dotson Tuning or your tuner. If you choose Send to tuner, the saved contact is used to address the email you review before sending.

Direct email uploads only the files you review and choose to send. Verifying an email does not send your files. TunerSync protects its separate sending credential with Android Keystore-backed encryption. Disconnecting this sending identity prevents further use of that device credential; it does not recall delivered emails, erase the saved phone files or sign you out of a portal project. Include your verified sending address in any account or data deletion request, including when you do not have a portal account.

You select files and photos through Android's chooser. Message photos selected in the Android app are resized and re-encoded without their original EXIF metadata, including location tags. This does not remove identifiers visible in a photo or inside other uploaded files. The app does not request access to your contacts, SMS or microphone.

Optional phone location in version 1.0.0. Phone GPS is off by default. If you turn it on in Phone data and grant Android location access, TunerSync records available phone location and speed alongside vehicle readings in your saved CSV log. These fields can include latitude, longitude, speed, altitude and accuracy. Android can provide precise or approximate location depending on your permission choice. Recording date and time are included without location permission.

Location collection starts with a recording you start from the dashboard. That recording can continue while another app is open or the phone is locked, with an ongoing recording notification. Collection stops when you stop recording, disconnect live readings or turn phone GPS off. TunerSync does not request Android's background-location permission.

GPS readings are stored with the log on your phone. If you choose to upload that log to your project, email it to your tuner or share it through another app, its location fields are included in the file received by that destination. Turning GPS off stops new location collection; it does not remove location already saved in an earlier part of a log or in a previously shared file.

When an Accessport connects, the app checks the model's public COBB release notes for firmware information. COBB's hosting receives the model-specific network request and normal connection information, such as the IP address. This check does not send your portal credentials, Accessport serial number or installed firmware value to COBB.

Why information is used and who processes it

Dotson Tuning uses the information to provide tuning and support, maintain your account and service history, transfer project files, answer messages, deliver requested alerts, troubleshoot problems and document work performed. The app does not include advertising, Google Analytics or an automatic crash-reporting SDK.

Authorized Dotson Tuning staff can access customer project information through the shop workspace. The customer app is limited to the signed-in customer's permitted projects.

Our providers include:

• Cloudflare, which hosts the portal, database and private project-file storage.
• Shopify, which provides store-account sign-in and order information used to link tuning purchases and projects.
• Google Firebase Cloud Messaging, which delivers optional Android project alerts. This involves notification tokens, installation identifiers, routing details and notification content such as a project title and a short update summary.
• Google Workspace/Gmail, which processes business notification emails and support correspondence.

These services also process technical connection and operational information needed to provide their services. When you open an external website or share a file through another app, that service handles the information you provide under its own practices.

Notifications, local controls and security

Project alerts are optional. You can turn them off from Account or Android's notification settings and keep using the portal. Signing out disconnects the app account; it does not erase the shop's service history or saved phone files. Uninstalling the app does not delete portal records, and copies exported elsewhere on the phone remain under your control.

App-to-portal traffic uses HTTPS. Access to private project files requires authentication and project authorization. The Android app protects its stored portal credentials and notification connection secrets with Android Keystore-backed encryption and disables Android app backup. These protections do not make project conversations end-to-end encrypted: Dotson Tuning must be able to read them to provide the service.

Retention and deletion requests

We ordinarily retain identifiable project and service history long term, without a fixed automatic expiration period, to support future work and document the services provided. Completing or archiving a project, signing out, removing a local file, or uninstalling TunerSync does not delete those business records.

To request deletion of your TunerSync account and associated portal data, open Account → Request account deletion in the app, visit Request account and data deletion, or email appsupport@dotsontuning.com. You can make a request without reinstalling the app. Include the email used for your portal account; do not send your password. Opening the page or email draft does not submit a request or delete anything. Review and send the email to make your request.

We verify account ownership and review the request before acting. We then delete the account-associated personal data except specific records that we have a documented legitimate need or requirement to retain. We explain any retained record categories, why they are retained, and their retention periods. We also tell you the expected completion time and confirm the outcome. A request is handled manually; it does not automatically erase a project.

Deleting the app/portal account does not itself delete your separate Shopify store account or change an order. Related records in our business email and service providers are considered as part of the request; we will explain their treatment. We cannot recall copies of messages already delivered to you or files you have exported to another destination.

Contact and updates

Contact appsupport@dotsontuning.com about privacy, your information, or this policy. We will update this page and its effective date when these practices change.