It is your car.
It is your data.
We are asking you for your service history, your receipts and what you paid. That is a lot to hand over, so here is exactly what happens to it. This page is the plain-English version; the Privacy Policy is the binding one.
- Lock every row to your account.
Row-level security in the database, not a filter in the app. Another signed-in user cannot read your vehicles even if they try.
- Scope every uploaded file to you.
Receipt storage paths are keyed by user and vehicle. Your invoice is not sitting in a shared bucket.
- Keep AI keys on the server.
Every AI call runs server-side. No key ships inside the app, where anyone could unzip it out.
- Let you delete the whole thing.
Account deletion is in Settings, and it takes the records and the files with it.
- Sell your data.
Not to insurers, not to dealers, not to marketers. [CONFIRM: this is a policy commitment — the wording must match the Privacy Policy exactly.]
- Track you around the internet.
No advertising pixels following you off the site. [CONFIRM against whatever analytics you end up running.]
- Scrape anything.
Valuations and guidance are not built by harvesting listings or forum posts behind anyone’s back.
- Pretend the AI is certain.
Reports carry a confidence rating that is allowed to say “limited”, and always name when to see a professional.
What does the AI
actually get sent?
A deliberately small, deliberately recent slice — enough to be useful about your car and nothing more. Long notes are truncated before they leave.
- Year, make, model, trim, mileageALL
- Service records20 MOST RECENT
- Installed parts30 MOST RECENT
- Receipt summaries10 MOST RECENT
- Your questionSIZE-CAPPED
- Your name or email address
- Your receipt images themselves
- Your VIN, unless you put it in the question
- Anything belonging to another user
- Payment details — we never hold them
Receipt scanning runs without AI in this version — your invoice images are not sent to a model at all.
We test the wall,
not just build it.
Before any feature that touches your records ships, it has to pass a two-user isolation test: a second real account tries to read the first one’s vehicles, records, receipts and reports, and has to fail on every one.
Access rules that are never tested are just comments. This one runs against a real database, not a mock.
Read the Privacy PolicyGive yours a home.
Your car deserves more than a folder of receipts.
Join the beta Free to get started. No credit card needed.