Privacy Policy

Sentry Guard is an independent app. The service relies on the vehicle manufacturer's connected-vehicle API. Operator: Shlomi Malfuf. Privacy contact: support@sentry-mode-pro.com.

The Service provides real-time vehicle security alerts, notification settings, and optional remote commands (honk, flash).

This policy applies to sentry-mode-pro.com, the Dashboard, API, and the Sentry Guard mobile app (Expo / iOS / Android).

By using the Service you confirm you have read and understood this policy.

We collect only what is needed to operate the Service:

• Account: email, display name, and vehicle-account id — via the manufacturer's sign-in. We never store your vehicle-account password.
• Sign-in tokens: encrypted access/refresh tokens used to call the manufacturer's API.
• Vehicle: VIN, display name, model, region, pairing/telemetry status, last seen.
• Monitoring / telemetry: security-monitoring states, timestamps, and raw telemetry from the vehicle.
• Events & alerts: state transitions, titles, delivery status, suppression reasons, auto-actions.
• Settings: sensitivity, Aware/Panic toggles, auto honk/flash, quiet hours, cooldown.
• Push: Expo push token, platform, device name.
• Subscriptions: App Store original transaction id, subscription status and period dates (to verify an active paid entitlement).
• Command logs: honk_horn, flash_lights, trigger source, API response.
• Consent records: privacy acceptance, version, timestamp, IP, User-Agent.
• Sessions: JWT, cookies (web), Bearer token (mobile).
• Server logs: IP, User-Agent, ingest errors — for operations and security.

Processing is based on contract performance and legitimate interests:

• Vehicle-account authentication and vehicle access.
• Fleet Telemetry ingestion and push notifications.
• Event history in Dashboard and app.
• Vehicle commands per your request or auto-settings.
• Reliability, debugging, abuse prevention.
• Legal compliance.

We do not sell personal data. We share with:

• The vehicle manufacturer — official connected-vehicle API usage.
• Cloud providers: Netlify, Neon, Fly.io, Upstash.
• Expo — push delivery.
• Apple — In-App Purchase / App Store Server API to verify auto-renewable subscriptions.
• Google — Play Billing / Play Developer API to verify Android subscriptions.
• Authorities when required by law.

Sign-in tokens are encrypted (AES-GCM). HTTPS/TLS in transit. Database access is restricted.

Data is kept while your account is active. After deletion request — removed or anonymized within 90 days except where law requires retention.

Subject to applicable law (GDPR, Israeli Privacy Protection Law):

• Access, correction, deletion, restriction, portability.
• Withdraw consent — revoke vehicle-account access or disable push on device.

You are always in control of your data. At any time you may:

• View and update alert settings in the app or Dashboard
• Log out and remove your session from your device
• Revoke access from your vehicle-account settings
• Request complete deletion of your account and all associated data — use https://sentry-mode-pro.com/delete-account or email support@sentry-mode-pro.com with subject "Data deletion request"

After verifying your request, we delete or anonymize:

• Account details (email, name, vehicle-account id)
• Encrypted OAuth tokens
• Vehicles, Sentry events, alert history
• Alert settings, push tokens, command logs
• Consent records and sessions

Dashboard uses session cookie (smp_session). No marketing trackers. Mobile uses SecureStore for tokens.

Service is for users 18+. We do not knowingly collect data from children.

The service relies on the vehicle manufacturer's connected-vehicle API. Sentry Guard is an independent app. Alert timing depends on the manufacturer and network conditions.

Shlomi Malfuf · Sentry Guard · support@sentry-mode-pro.com