Privacy Policy

LATCH ("LATCH," "we," "our," or "us") is a motion-aware driving safety platform developed and operated by Mendoza Ventures LLC.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information associated with the LATCH website, mobile applications, and related services.

It applies to LATCH Individual, LATCH Family, and LATCH Fleet where those services are available.

The information processed by LATCH depends on the features a user enables and the product being used.

Account Information

When users register or authenticate, we may process:

• Email addresses.
• Account identifiers.
• Display names and profile information.
• Authentication status.
• Email verification status.
• Account security and sign-in information.

LATCH uses Firebase Authentication to support account services.

Authentication credentials are handled through the applicable authentication provider. LATCH does not need to store users' plaintext passwords in its own application database.

Driving and Trip Information

LATCH may process information including:

• Trip start and completion timestamps.
• Trip duration.
• Vehicle movement and motion-detection events.
• Trip authentication events.
• Driving compliance measurements.
• Application restriction events.
• Driver interaction metrics.
• Trip history and reporting statistics.

These measurements are intended to support driving protection, reporting, and product functionality.

Location and Motion Information

LATCH may request device location and motion permissions to determine whether driving-related conditions are present.

Location and motion signals may be used to evaluate vehicle movement and determine when application restrictions should activate.

LATCH's current Individual implementation processes driving information on the device and stores trip history locally.

Current trip-history storage should not be interpreted as a continuous location-tracking service or a guarantee that precise driving routes are recorded.

Additional location-related processing, if introduced in future versions, will be disclosed as appropriate.

Device and Technical Information

We may process technical information necessary to operate and maintain LATCH, including:

• Device and operating-system information.
• Application version.
• Permission and configuration status.
• Error and diagnostic information.
• Service connectivity and authentication errors.

The availability of diagnostic information depends on the services and settings in use.

Website Launch List and Communications

When you join the LATCH launch list, we collect the information you voluntarily provide, such as your name, email address, and product interest. We use this information to send launch announcements, product availability updates, and related communications. Our website currently uses FormSubmit to process launch-list submissions and deliver them to Mendoza Ventures LLC. FormSubmit may process submitted information to provide this service. You may request removal from the launch list by contacting info.latchcompliance@gmail.com.

Website Analytics

Our website uses Vercel Analytics to understand website traffic and interactions, including page visits and engagement with website features. Depending on the service configuration, technical information associated with visits may be processed to generate aggregated website statistics. We use this information to evaluate website performance and improve the visitor experience. Our use of Vercel Analytics does not, by itself, mean that LATCH driving history is uploaded or shared.

We process information to:

1. Operate driving detection and application restriction features.
2. Authenticate users and maintain account security.
3. Support secure trip completion.
4. Generate driving summaries and compliance statistics.
5. Provide enabled Family or Fleet functionality.
6. Diagnose errors and improve application reliability.
7. Detect unauthorized access and misuse.
8. Respond to support and privacy requests.
9. Comply with applicable legal obligations.

We do not represent LATCH statistics as definitive evidence of safe or unsafe driving.

LATCH Individual currently maintains driving history locally on the user's device.

Local information may include trip records, timestamps, compliance metrics, and related application data.

Local data is not automatically accessible to other users merely because an account has been created.

Creating or signing into a Firebase account does not, by itself, mean that historical trip records have been uploaded to Firebase.

Local information may remain on a device until deleted through available application or device mechanisms, subject to the application's storage behavior.

LATCH uses Firebase Authentication, a Google service, to support account registration and sign-in.

Firebase may process account identifiers, authentication information, and associated technical data in accordance with its applicable terms and privacy practices.

LATCH is developing additional capabilities that may support Family and Fleet reporting and synchronization.

Cloud synchronization of trip history and cross-device Family reporting are not part of the current Individual trip-storage implementation.

If those capabilities become available, this Privacy Policy will be updated as necessary to explain the relevant information flows, access controls, and retention practices.

LATCH Family is designed to support parents, guardians, and participating family drivers.

Depending on the features made available, Family functionality may involve:

• Family account relationships.
• Driver identifiers and profile information.
• Driving activity summaries.
• Compliance statistics.
• Family administration and reporting permissions.

Family administrators are responsible for ensuring they have appropriate authority to enroll and administer participating users.

Family reporting and cloud-based sharing should not be assumed to be active until those features are implemented and enabled.

Any future sharing will be governed by the applicable permissions, account relationships, and product configuration.

LATCH Fleet is intended for authorized commercial organizations.

Depending on deployment, Fleet services may process:

• Driver and vehicle identifiers.
• Organization or fleet identifiers.
• Driving activity and compliance metrics.
• Trip authentication records.
• NFC verification events.
• PIN fallback events.
• Administrator and reporting information.

Fleet operators are responsible for providing required notices and obtaining any legally necessary authorizations.

Organizations are responsible for their employment-related decisions and lawful use of information made available to them.

Fleet functionality and data-sharing arrangements may be subject to additional commercial agreements and privacy disclosures.

LATCH may support Face ID or other device-provided authentication methods.

When Face ID is used, biometric matching is performed by the device's operating system.

LATCH does not receive or store a user's Face ID facial biometric template through the standard iOS authentication process.

LATCH may process the result of an authentication attempt or related trip-completion event.

PIN-based workflows may be used for trip completion or fallback authentication.

Authentication information is handled according to the applicable security design and product configuration.

LATCH may allow users to generate and share driving summaries, weekly recaps, milestones, and achievement cards.

Sharing is initiated by the user through supported device features.

LATCH does not automatically publish these cards to social media.

Users should review information before sharing it publicly.

Once shared with another application or service, that information may be processed under the receiving service's privacy policy.

We do not sell personal information.

Depending on the service and its enabled functionality, information may be disclosed:

• To service providers supporting authentication, hosting, security, or platform operation.
• To authorized Family or Fleet participants when applicable sharing features are available and enabled.
• When required by law or valid legal process.
• To protect users, investigate security incidents, or enforce applicable terms.
• In connection with a legitimate business transaction, subject to applicable legal requirements.

Planned Family cloud reporting is not an existing automatic data-sharing practice.

LATCH may use third-party technology providers, including:

Google Firebase

Used for account authentication and potentially other infrastructure capabilities as they are implemented.

Apple

Provides operating-system functionality supporting application restrictions, device permissions, biometric authentication, and applicable App Store services.

Additional infrastructure or analytics providers may be used as the platform develops.

Third-party services may process information under their respective policies.

We use reasonable technical and organizational safeguards intended to protect personal information.

These may include platform-supported authentication, access controls, and secure storage mechanisms.

However, no electronic system is completely secure.

Users should protect their devices, account credentials, and authentication information.

Information is retained according to its purpose, storage location, and applicable legal requirements.

Local driving records: May remain on a user's device until removed through supported application or device processes.

Authentication information: May remain with the authentication provider while the account exists or as otherwise required for security and legal purposes.

Support communications: May be retained as reasonably necessary to respond to inquiries and maintain relevant records.

Future Family and Fleet information: Retention arrangements will depend on the implemented services and any applicable organizational agreements.

Website launch-list information: We retain information submitted through our launch-list form for as long as reasonably necessary to provide launch announcements and related communications, unless you request its removal or a longer retention period is required or permitted by applicable law. You may request removal by contacting info.latchcompliance@gmail.com.

We may retain limited information when reasonably necessary for legal compliance, security, fraud prevention, or dispute resolution.

Depending on the product and device, users may be able to:

• Manage account profile information.
• Control application notification preferences.
• Change certain device permissions through iOS Settings.
• Select applications subject to driving restrictions.
• Choose whether to share driving summaries.
• Request assistance regarding personal information or account deletion.

Disabling permissions may affect the operation of driving protection features.

For privacy requests, contact:

info.latchcompliance@gmail.com

We will review requests and respond as required by applicable law.

Users may request account deletion by contacting:

info.latchcompliance@gmail.com

Account deletion may involve information maintained through authentication or other applicable services.

Deleting an account does not necessarily remove locally stored records from every device or information previously shared with third parties.

Certain information may be retained when required or permitted by applicable law.

LATCH is not intended for children under 13.

LATCH Family may support teen drivers, subject to applicable age requirements, parental or guardian authorization, and available product functionality.

Parents and guardians are responsible for ensuring appropriate authorization when administering accounts for minors.

We do not knowingly collect personal information from children under 13 through services directed to them.

If we learn that personal information has been collected from a child under 13 in circumstances requiring deletion, we will take appropriate action consistent with applicable law.

Parents or guardians may contact us with concerns.

LATCH is being developed primarily for users in the United States.

Users accessing LATCH from other jurisdictions should understand that applicable service availability and data-processing practices may differ.

Any international availability will be subject to applicable legal requirements.

We may update this Privacy Policy as our services and data practices evolve.

The current version will be posted on our website with a revised effective date.

Where required by law, we will provide additional notice or obtain consent before material changes take effect.

For privacy questions, account requests, or general inquiries:

Mendoza Ventures LLC

Email: info.latchcompliance@gmail.com

Website: https://www.latchcompliance.com