Carlore

Open-Source Licenses

Version 2026-10-02 · Effective October 2, 2026 · Permanent link to this version

The open-source software and fonts that Carlore's apps and website include, the licenses they come under, and the notices those licenses ask us to pass on.

The short version

Carlore is built with the help of open-source software and fonts, and we're grateful to the people who make them. This page lists what our apps and website include, the licenses they come under, and the notices those licenses ask us to pass on to you. It's also in both apps, under Settings › About.

1. Fonts (apps and website)

Carlore's typefaces are used under the SIL Open Font License, Version 1.1:

  • Outfit. Copyright 2021 The Outfit Project Authors (https://github.com/Outfitio/Outfit-Fonts).
  • Manrope. Copyright 2018 The Manrope Project Authors (https://github.com/googlefonts/manrope).

Both apps include the fonts with their copyright notice and license, carried in the font files' own license fields; the Android app also includes the license text as a file. The website uses smaller subsets of the same fonts, which keep those fields and are covered by the same license, and publishes the license text beside them.

In summary, the Open Font License lets anyone use, study, modify and redistribute the fonts, including bundled with software, as long as the fonts aren't sold on their own, copies keep the copyright notice and the license, modified versions stay under the same license, and the authors' names aren't used to promote a modified version without their permission. The fonts come with no warranty. This summary isn't the license itself: the full text is at openfontlicense.org, and in the Android app under Settings › About › Open-source licenses.

2. The iPhone app

The iPhone app contains no third-party code. Apart from the fonts above, it's built only on Apple's own frameworks, such as SwiftUI, CryptoKit, StoreKit, Vision, VisionKit, PDFKit and WidgetKit, which Apple provides under its own terms. Sign in with Google on iPhone uses Apple's secure web sign-in, not a Google library.

3. The Android app

Open-source components

These components are licensed under the Apache License, Version 2.0 (see section 7):

  • AndroidX libraries, including Jetpack Compose, Material 3, Navigation, Lifecycle, WorkManager, Glance, Credential Manager, Biometric and ExifInterface, by The Android Open Source Project.
  • The Kotlin standard library, kotlinx.coroutines and kotlinx.serialization, by JetBrains s.r.o. and contributors, and JetBrains Java Annotations, by JetBrains s.r.o.
  • OkHttp and Okio, by Square, Inc.
  • Coil, for showing images, by Coil Contributors, and Accompanist Drawable Painter, by The Android Open Source Project.
  • Guava ListenableFuture, by The Guava Authors, and javax.inject, by The JSR-330 Expert Group.
  • Firebase Components, Firebase Encoders and Android Data Transport, by Google LLC, which ML Kit uses.

This component is licensed under the BSD 3-Clause License, reproduced in section 7:

  • Protocol Buffers, which Glance uses for home screen widgets. Copyright 2008 Google Inc. All rights reserved.

OkHttp includes a compiled copy of the Public Suffix List, which is subject to the Mozilla Public License, Version 2.0. Its source is available at publicsuffix.org.

We checked these components for NOTICE files that the Apache License asks us to pass on. The only one is OkHttp's note about the Public Suffix List, which is quoted in section 7.

Google libraries that aren't open source

These components are provided by Google under Google's own terms rather than an open-source license:

  • Google Play Billing Library, under the Android Software Development Kit License Agreement.
  • Google Play services, including the libraries for signing in with Google and for authorizing Google Drive backup, and the Credential Manager Google ID library, under the Android Software Development Kit License Agreement.
  • ML Kit document scanner, barcode scanning and text recognition, under the ML Kit Terms of Service.
  • Google Play Age Signals library, which the app uses to check the age range Google Play provides where state law requires it, under the Android Software Development Kit License Agreement.

Google's libraries themselves include open-source components from others, such as TensorFlow Lite, Abseil, Protocol Buffers, zlib and libpng, under licenses including Apache 2.0, BSD, MIT, zlib and the Mozilla Public License 2.0. Google supplies the notices for those components with its libraries. How these libraries handle information is explained in our Privacy Policy.

4. Both apps

Both apps keep your garage in SQLite, the public-domain database engine that's built into iOS and Android.

5. Our website

The website's pages and scripts are our own code and use the fonts described in section 1. It loads no third-party code.

6. Our servers

Our servers are built with open-source software too: Hono, Zod, @hono/zod-openapi, @hono/zod-validator, zod-to-openapi, openapi3-ts, jose and @noble/hashes, under the MIT License, and yaml, under the ISC License. Our admin console, which only our team uses, is built with React and React Router, under the MIT License. None of this is distributed to you, but we're glad to credit it.

7. License texts and notices

If you'd like a copy of any license, or think we've left out a credit, write to hello@carlore.app.

Vehicle information from NHTSA's vPIC and Recalls services is a work of the US government and isn't covered by copyright in the United States. Manuals you keep belong to their publishers, and aren't part of Carlore.

OkHttp notice

"Note that publicsuffixes.gz is compiled from The Public Suffix List: https://publicsuffix.org/list/public_suffix_list.dat It is subject to the terms of the Mozilla Public License, v. 2.0: https://mozilla.org/MPL/2.0/"

Protobuf license

This is the license of Protocol Buffers, which Glance includes in repackaged form.

Copyright 2008 Google Inc. All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

  • Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
  • Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
  • Neither the name of Google Inc. nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Code generated by the Protocol Buffer compiler is owned by the owner of the input file used when generating it. This code is not standalone and requires a support library to be linked with it. This support library is itself covered by the above license.