One Glovebox is designed to be useful even if you never upload a photo of a registration, insurance card, or any other document. You can type as much or as little as you want — even just year, make, model, and an expiration date is enough to get reminders.
If you choose not to upload document photos, the app still tracks your vehicles, sends expiration alerts, and lets you log maintenance. The only thing you give up is having a saved digital copy of the document itself.
Anything you do upload stays in your private storage, visible only to you and to whoever you explicitly share with. See the sections below for the full details.
We use your information to:
We do not sell your personal information. We do not use your data to train AI models. We do not show third-party advertising based on your personal data. (If we later add local sponsor placements, they will be shown based on general region only, never based on your vehicle data or documents.)
Your data is stored locally on your device (in your browser's IndexedDB) and synced to cloud infrastructure provided by:
Your document photos are stored in a private Supabase storage bucket and are only accessible via short-lived signed URLs that we generate for your authenticated session.
When you take a "snap-to-scan" photo of a registration or other document, the image is sent to OpenAI's API (currently GPT-4o-mini) to extract text fields like VIN, plate, expiration date, etc.
Per OpenAI's API terms, OpenAI does not use API inputs to train their models and retains them only briefly for abuse monitoring before deletion. The extracted text is returned to your device and saved to your account. The photo itself is then stored privately in your Supabase storage bucket.
If you do not want to use OCR, you can enter document data manually.
You can create share links that give other people limited access to your vehicle information. When you create a share:
The recipient sees only what you chose to share, only until the link expires (or you revoke it). They can save what you shared as a PDF on their own device — once shared, you cannot control downstream copies, so think before sharing sensitive items like insurance cards.
Regardless of where you live, you can:
To exercise any of these rights, use the in-app controls or email support@oneglovebox.com. We aim to respond within 30 days.
California residents (CCPA/CPRA): You have the rights above plus the right to know what categories of personal info we collect and the right to non-discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
Utah residents (UCPA): You have the same access, deletion, and portability rights described above.
EU/UK residents: Our legal basis for processing is your consent (when you create an account) and contract performance (delivering the service). You can withdraw consent at any time by deleting your account. We are not actively targeting EU users; if you are an EU user and have questions, contact us.
One Glovebox is intended for adults (typically 18+) who own or manage vehicles. We do not knowingly collect information from children under 13. If you believe a child has created an account, contact us and we will delete it.
We use reasonable technical and organizational measures to protect your data, including:
No system is perfectly secure. If we become aware of a security breach affecting your personal information, we will notify you and any required authorities as required by law (see Section 10).
If a security incident results in unauthorized access to your personal information, we will:
The Service is operated from the United States and your data is stored in the United States. By using the Service, you consent to the transfer of your data to the U.S. If you are accessing from outside the U.S., be aware that U.S. privacy laws may differ from those in your country.
We may update this policy as the app evolves. Material changes will be announced in-app or by email. The "Last updated" date at the top will always reflect the current version. Continued use of the Service after a change means you accept the updated policy.
Questions, concerns, or requests:
Email: support@oneglovebox.com
Operator: One Glovebox, LLC, Lehi, Utah, USA