← Back to CAR AI
Privacy Policy
Effective: March 9, 2026
1. Overview
CAR AI ("we", "us", "the App") takes your privacy seriously. This policy explains what data we collect, why, and how we protect it.
2. Data We Collect
| Data Type | Purpose | Linked to You |
|---|
| Email address | Account authentication | Yes |
| Photos & Videos | Vehicle inspection analysis | Yes |
| Audio recordings | Engine sound analysis | Yes |
| Sensor data (magnetometer, accelerometer, gyroscope) | Body scan & driving test | Yes |
| Location (GPS) | Speed measurement during driving test | Yes |
| Device identifiers | App functionality (UserDefaults) | No |
3. How We Use Your Data
- AI Analysis: Photos, videos, and audio are sent to our servers and processed by AI models (Google Gemini) to generate vehicle diagnostics. This data is used solely for analysis and is not used to train AI models.
- Cloud Storage: Scan results, vehicle information, and photos are stored in Supabase (hosted on AWS) to provide scan history and garage features.
- Lemon Board: If you submit to the Lemon Board, your vehicle scan results (score, car details, photo, roast) are visible to other users. No personal information is shared.
4. Data We Do NOT Collect
- We do not collect contacts, browsing history, or financial information.
- We do not use tracking or advertising frameworks.
- We do not sell your data to third parties.
5. Third-Party Services
- Supabase (database & authentication) — Privacy Policy
- Google Gemini API (AI analysis) — Terms
- Apple StoreKit (in-app purchases) — Managed entirely by Apple
6. Data Retention
Your data is retained as long as your account is active. When you delete your account (Settings → Delete Account), all associated data — including scan history, vehicle data, photos, and profile information — is permanently deleted from our servers within 30 days.
7. Data Security
All data transmission uses TLS encryption. Data at rest is encrypted via Supabase's infrastructure. Access to user data is restricted by Row-Level Security (RLS) policies ensuring users can only access their own data.
8. Children's Privacy
CAR AI is not intended for users under 17 years of age. We do not knowingly collect data from children.
9. Your Rights
- Access: You can view all your data within the App (garage, scan history).
- Deletion: You can delete your account and all associated data at any time.
- Portability: Contact us to request an export of your data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by the "Effective" date above.
11. Contact Us
Questions about your privacy? Contact us at support@carai.to.