Privacy Policy
Short version
The app reads data from your car through an OBD-II adapter and shows it to you. An account is optional: without it the app works, but we cannot help you when something goes wrong.
We do not sell data, do not share it with advertisers and do not use it for advertising. There are no third-party analytics or advertising SDKs in the app.
What stays only on your phone
- Trip recordings — the tables of live readings you record yourself.
- Communication logs with the car (the «exchange log»).
- Parameter snapshots taken before and after a service reset.
- The chosen car profile and app settings.
These files never leave the phone by themselves. You can send one to us from the Files tab — but only if you choose to.
What we store on the server
Only if you create an account:
- Email and, if you gave one, your name.
- Phone model, OS and app version — so we know what the trouble happened on.
- Results of scans: car profile, VIN, which modules answered, fault codes, adapter and protocol, on-board voltage.
- Your messages to support and our replies.
- Licence keys and access dates.
The password is not stored anywhere, in any form: the server keeps only an irreversible fingerprint, from which the password cannot be restored.
Why we need it
- To show your scan history in the app and in your account on the website, and to compare scans with each other.
- To answer you in support with the details in front of us — «it does not work» is impossible to investigate otherwise.
- To fix the app: crashes and adapter failures are reported automatically.
- To manage licences and remind you when access is ending.
Notifications
If you allow notifications, the phone receives a device address from Apple or Google. We store it to send you a reply from support and a reminder before access ends. You can turn notifications off in the app at any time — the address is then switched off on our side too.
Who else sees this
Nobody except us. We do not pass data to third parties, except for two services without which the app cannot work:
- Apple Push Notification service and Firebase Cloud Messaging — delivery of notifications to the phone.
- The mail service that delivers our letters to your inbox.
There are no analytics, advertising or tracking services in the app at all. The website is a separate story — see the next section.
Voice search
The search box has a microphone button. Recognition is done by your browser, not by us: we never receive the audio and never store it. The button only appears in browsers that can do this at all.
⚠️ Where the audio goes depends on the browser, and you should know it: Chrome sends the recording to Google servers for recognition, Safari can do it on the device itself. That happens on the browser's side under its own terms — we do not control it and cannot see the recording.
The microphone turns on only when you press the button, and permission is asked by the browser itself. Nothing is recorded before that. What was recognised appears in the search box, so you can see and correct it before the search runs.
The website: Yandex.Metrica
On the website carscan.app we use Yandex.Metrica to see how many people come, which pages they read and where they leave. Session replay is on: it records mouse movement, scrolling and clicks on the page — we watch these to find the places where people get stuck in the reference.
This data is processed by Yandex LLC on its side and is governed by its terms as well. We do not use it for advertising and do not pass it to anyone else.
It only works with your consent. The panel on the first visit asks separately about analytics, and it is off until you allow it: decline and the counter is not loaded at all. You can change your mind at any time — the «Cookies» link in the footer of any page. Every file by name and lifetime is on the Cookies page.
There is nothing else on the website: no Google Analytics, no advertising networks, no social buttons that watch you.
Your rights
- Take your data. In your account on the website — one file with everything we store about you.
- Delete the account. In the app, on the Account tab. Cars, scans, messages and the notification address are deleted with it; the email is erased. This cannot be undone.
- Ask us. Write to info@carscan.app and we will answer.
Licence keys remain after deletion: money was paid for them, and both sides need a record of what was issued. They are no longer linked to your email.
Children
The app is meant for car owners and is not aimed at children under 13. We do not knowingly collect their data.
Changes
If we start collecting something else, we will change this page on the same day and update the date at the top. We do not make changes retroactively.