Privacy Policy

Effective date: 24 October 2026

1. Overview

CarFixMate is operated by Hüseyin Koray Keteci. For enquiries, contact support@carfixmate.app.

This Privacy Policy explains how CarFixMate collects, uses, stores, and protects information when you use the CarFixMate mobile application and related services.

2. Information We Process

Account information, including your account email, user identifier, authentication information, and signed-in session information.
Vehicle information you enter, including make, model, year, engine, transmission, mileage, VIN and service details.
Diagnosis text, relevant recent diagnosis conversation context, relevant vehicle information and AI-generated responses.
A dashboard warning-light image and optional note when you choose image diagnosis.
A short vehicle sound recording and the capture context you provide when you choose sound diagnosis. A recording may incidentally contain speech or environmental sound.
Service invoice or repair quote images you choose to scan, and extracted document information. A document may contain names, addresses, vehicle identifiers or payment information visible in the image.
OBD diagnostic codes, read time and read status when you include them in a diagnosis draft and send that draft.
Subscription transaction and entitlement information used to confirm access to paid features.
Service-operation and usage information, including request identifiers, diagnosis usage records and app interaction events.
Support messages and contact information you provide, and community reviews or reports you submit.
Location information used by the nearby repair shop and distance features when you grant location permission.

3. How We Use Information

To provide AI-assisted diagnosis, sound and image analysis, and invoice or quote extraction that you request.
To maintain your vehicle, maintenance and repair records and provide related app features.
To authenticate users, protect accounts and apply usage limits and subscription entitlements.
To provide VIN identification, nearby repair shop information and community features you choose to use.
To respond to support messages, maintain security, prevent abuse and troubleshoot errors.
To understand feature usage and improve service reliability and user experience.
To comply with applicable legal obligations.

4. Service Providers

CarFixMate uses Apple for application distribution and StoreKit subscription transactions, Supabase for authentication and database services, Railway for server infrastructure, and OpenAI for the AI features described below. Apple Speech is used for speech-to-text. Apple location and map services support location-related features. Where configured, support feedback is delivered using Resend. Google and YouTube are used for related repair or educational videos.

5. AI Processing and Your Choices

After you accept the in-app AI data sharing disclosure, information needed for the feature you request is sent to CarFixMate servers hosted on Railway and to OpenAI. This can include diagnosis text and context, a warning-light image, a short vehicle sound recording and capture context, or an invoice or quote image, depending on the feature you choose.

OBD readings are obtained through a compatible local adapter. If you add diagnostic codes to a diagnosis draft and send it, those codes and the included read information become part of the AI request.

Speech-to-text uses Apple Speech. The app requests on-device recognition when the recognizer supports it; this is not a guarantee that all speech recognition is performed only on your device. You can review and edit the resulting text before sending it for diagnosis.

You may withdraw AI data sharing permission in Settings. Withdrawal removes the app's saved consent and requires permission again before a later gated AI action. It does not itself delete earlier submissions or recall an already submitted request.

Remove unnecessary personal or sensitive details before submitting text, recordings or documents. Check images for names, addresses, plates, VINs and payment information that are not needed for the feature.

6. VIN Lookup

When you save a vehicle, its VIN is stored locally on your device with that vehicle. If you choose VIN identification, the VIN and any model year you provide may be sent directly from the app to NHTSA vPIC or through the authenticated CarFixMate backend, depending on the app configuration. When the backend is used, it queries NHTSA vPIC and may use a configured fallback provider such as Auto.dev when the primary result is incomplete or unavailable. The lookup is user initiated, and manual vehicle entry remains available. When the authenticated backend performs the lookup, provider credentials remain server-side, and the backend may keep decoded results in process memory for repeated lookups. Cache validity is distinct from deletion of memory entries. No fixed retention period for external providers is stated here.

7. Data Storage and Retention

Vehicle, diagnosis, maintenance, invoice and quote records can be saved on your device. Synced invoice, quote and vehicle-memory information is also stored in Supabase. Account, usage and subscription records are associated with your account.

App interaction events are stored with a user hash and session identifier. Moderation records can retain an action, reason and time. These records are not all removed by account deletion, and removing an account reference does not establish that remaining information is anonymous.

External providers, support email systems, logs and backups have separate storage and deletion processes. No immediate or fixed-period deletion of those copies is promised here. Send retention questions or data requests to support@carfixmate.app.

8. Account and Data Deletion

Use Delete Account in Settings or contact support@carfixmate.app. Successful server account deletion triggers removal of linked account, usage, subscription, invoice, quote, warranty, vehicle-memory and community records. The app then attempts to clear local records associated with that account and reports local cleanup failures.

Hashed analytics events are outside this account-deletion chain. Moderation records may remain with account and review references removed. A local record deletion does not establish that all server or provider copies have been deleted; requests about remaining information may be sent to the address above.

Withdrawing AI data sharing permission does not delete earlier submissions or cancel a submitted request. Deleting your CarFixMate account or withdrawing this permission does not cancel your Apple subscription; manage or cancel it separately in your Apple Account subscription settings.

9. Security

Protected server features require authenticated requests. No internet-based system can be guaranteed to be completely secure.

10. Children's Privacy

CarFixMate is intended for adults aged 18 and over. If you believe a person under 18 has provided personal data through the service, contact support@carfixmate.app.

11. International Processing

Service providers may process information in countries other than your country of residence. Questions about processing locations and applicable safeguards may be sent to support@carfixmate.app.

12. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information. Requests may be sent to support@carfixmate.app.

13. Changes

This policy may be updated from time to time. The effective date shown above will be revised when material changes are made.

Contact: support@carfixmate.app