Wheelbase

Privacy Policy

Effective October 26, 2026 · Applies to the Wheelbase apps and wheelbase website

The short version

Your drawings stay on your device. Wheelbase works without an account. We don't show ads, we don't sell or share personal information, and we don't track you across other apps or websites. If you choose to create an account, we keep only what we need to sign you in and restore your purchases.

DataCollected?Why
Drawings, projects, settingsNo. Stored on your device only.So the app works offline
Name and email (only if you create an account)YesSign-in, purchase restore, support
Purchase recordsYes. Product and transaction ID, never card numbers.Unlock what you bought
Location, contacts, camera, microphoneNoNot used
Advertising IDs, analytics, crash trackingNoNot used

Who we are

Wheelbase is made by JC Goodworks, a sole proprietorship based in the United States ("we", "us"). We are the data controller for the information described here. You can reach us at support@jcgoodworks.com.

Your drawings and settings

Wheelbase is a drawing app that runs on your device. Your drawings, layers, project files (.wbs), wheel and tire packs (.wbpack), autosave copies, colours, brush choices and other preferences are stored locally, in the app's storage or wherever you choose to save them. They are not uploaded to us.

When you export or save a picture, it goes to the folder or photo gallery you pick (or, in Kids mode, to a Wheelbase Kids folder in your Pictures). Deleting the app removes its local storage. Files you saved elsewhere stay where you put them.

If we later offer optional cloud sync, it will be off until you turn it on, and this policy will be updated before it launches.

Accounts and sign-in

You don't need an account to draw. An optional account lets you restore purchases on another device and receive packs included with a pass. You can sign in with:

  • Google. We receive your name, email address, Google account ID and, if available, your profile picture.
  • Microsoft. We receive your name, email address and Microsoft account ID.
  • Email and password. We store your email address, an optional display name, and a salted, hashed version of your password. We never store the password itself.

We never see your Google or Microsoft password. We use account information only to sign you in, link your purchases to you, answer support requests and send essential service messages (for example, a password reset). We don't send marketing email unless you opt in.

Accounts are for people 13 and older (16 and older where local law requires it). Kids mode never asks for or offers an account.

Google user data

Wheelbase's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only the basic sign-in scopes (openid, email, profile). We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI or machine-learning models. People can read it only with your permission, for security, or when the law requires.

Purchases

Purchases and subscriptions are processed by the store you buy from: Google Play, the Apple App Store or the Microsoft Store. They handle your payment details under their own privacy policies, and we never receive your card number. We receive a transaction or order ID, the product you bought, the purchase date, its status (active, refunded or expired) and your country or currency. We use these only to unlock and restore what you bought and to keep the records tax law requires.

Device permissions

  • Photos and storage, only when you save or open a file, so the picture can go to your gallery or chosen folder.
  • Pen and touch input, including pressure and tilt, used on your device to draw. It is never recorded or sent anywhere.

Wheelbase does not use your location, contacts, camera, microphone, calendar or health data.

Ads, analytics and tracking

Wheelbase has no advertising, no third-party analytics, no advertising identifiers and no cross-app tracking. We don't sell or "share" personal information as California law defines those words, and we don't build profiles about you.

This website

This site uses no cookies, no analytics and no third-party fonts or trackers. Our host, Microsoft Azure, keeps standard server logs (IP address, browser type, page requested and time) for security and to keep the site running. They are kept only briefly. The browser preview of the app stores your drawings in your browser's local storage, on your computer only.

Who we share with

We share personal information only with providers who help us run Wheelbase, and only for that purpose:

  • Microsoft Azure: hosting for this website and account data
  • Google and Microsoft: as sign-in providers, only if you choose them
  • Google Play, Apple and Microsoft Store: purchase processing
  • Our email provider: to send account messages and answer support email

We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or transfer of the business. If the business is sold or transferred, this policy will continue to protect your information.

Our providers process data in the United States. Where the law requires, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers.

How long we keep data

  • Account data: until you delete your account, then removed within 30 days (backups roll off within a further 30 days).
  • Purchase records: as long as tax and accounting law requires, usually up to 7 years.
  • Support email: up to 2 years after the conversation ends.
  • Website server logs: about 30 days.

Your rights and choices

Wherever you live, you can ask us to access, correct, export or delete your personal information. You can also withdraw consent or object to processing. Residents of California and other US states with privacy laws, and people in the EU, UK and similar places, have these rights by law. We won't treat you differently for using them.

  • Delete your account: in the app, or by following these steps.
  • Any other request: email support@jcgoodworks.com from the address on your account. We reply within 30 days (45 days where state law allows), and may need to confirm it's you first.
  • You can also complain to your local data protection authority.

Where the GDPR applies, our legal bases are: contract (to provide your account and purchases), legal obligation (tax records) and legitimate interests (security and support).

Children

Wheelbase includes a Kids mode for ages 8 to 12. Kids mode does not collect any personal information. It has no accounts, chat, ads or analytics, and pictures save only to the device. Purchases and links that leave the app sit behind a parental gate. See the Kids Privacy Notice for details.

We do not knowingly collect personal information from children under 13 (or the age required in your country). If you think a child has created an account or sent us personal information, email us and we will delete it.

Security

We use encryption in transit (HTTPS/TLS), hashed passwords and access limited to the people who need it. No system is perfectly secure. If a breach affects your information, we'll notify you as the law requires.

Changes

If we change this policy, we'll update the date at the top. If a change is material, we'll also tell you in the app or by email before it takes effect.

Contact us

JC Goodworks
Email: support@jcgoodworks.com