It is your car.It is your data.
We are asking you for your service history, your receipts and what you paid. That is a lot to hand over, so here is exactly what happens to it. This page is the plain-English version; the Privacy Policy is the binding one.
- Lock every row to your account.
Row-level security in the database, not a filter in the app. Another signed-in user cannot read your vehicles even if they try.
- Scope every uploaded file to you.
Receipt storage paths are keyed by user and vehicle. Your invoice is not sitting in a shared bucket.
- Keep AI keys on the server.
Every AI call runs server-side. No key ships inside the app, where anyone could dig it out.
- Let you delete the whole thing.
Account deletion is in Settings, and it takes the records and the files with it.
- Sell your data.
Not to insurers, not to dealers, not to marketers, and not to data brokers. The Privacy Policy says the same.
- Track you around the internet.
No advertising pixels, no analytics trackers, and no ad SDK in the app.
- Scrape anything.
Valuations and guidance are not built by harvesting listings or forum posts behind anyone’s back.
- Pretend the AI is certain.
Every report says how sure it is, says so when the evidence is thin, and always names when to see a professional.
What does the AI
actually get sent?
A deliberately small, deliberately recent slice — enough to be useful about your car and nothing more. Long notes are truncated before they leave.
- Year, make, model, trim, mileageALL
- Service records20 MOST RECENT
- Installed parts30 MOST RECENT
- Receipt summaries10 MOST RECENT
- Your questionSIZE-CAPPED
- Your name or email address
- Your VIN, unless you put it in the question
- Anything belonging to another user
- Payment details — we never hold them
Receipt photos are sent only when you tap Scan on one: that photo goes to the receipt reader named in the Privacy Policy, to read the shop, date, mileage, parts and costs. VINs, phone numbers and email addresses are stripped from what is saved, and nothing is saved until you review it and tap Save.
We test the wall,
not just build it.
Before any feature that touches your records ships, it has to pass a two-user isolation test: a second real account tries to read the first one’s vehicles, records, receipts and reports, and has to fail on every one.
Access rules that are never tested are just comments. This one runs against a real database, not a mock.
Read the Privacy PolicyGive yours a home.
Your car deserves more than a folder of receipts.
Join the beta Free to get started. No credit card needed.