0Summary
1Data Controller
This Privacy Policy is prepared by SiberCoder, which develops and operates the CarCoding application ("Application", "We").
| Information | Details |
|---|---|
| App Name | CarCoding |
| Bundle ID | com.sibercoder.carcoding |
| Contact | [email protected] |
| Web | https://carcoding.app |
2Data We Collect
The application collects data in the following categories:
| Data Category | Scope | Storage |
|---|---|---|
| Vehicle Diagnostic Data | RPM, speed, coolant temperature, engine load, fuel level, DTC fault codes, and other OBD2 parameters | On-device only (RAM); deleted when connection closes |
| Vehicle Profile | Brand, model, year, engine code (user-entered) | On-device (AsyncStorage); user can delete |
| AI Chat History | Messages entered in AI Mechanic feature and vehicle status | Transmitted to server on per-session basis; not retained on server after session closes |
| App Settings | Language preference, theme mode, Pro membership status | On-device (AsyncStorage) |
| Purchase Information | Subscription/purchase status managed by Apple StoreKit (receipts) | In Apple infrastructure; we never see raw payment card data |
| Consumption Data (only on a refund request) | Only when you open a refund request: consumption indicators summarising how much you have used the app, for example the level of use of Pro features, the time elapsed since purchase and the delivery status of the content. Does NOT include name, e-mail, location, VIN or vehicle data. | Sent to Apple or Google, which assesses the request; not stored by us. |
| Anonymous Usage Counters | Adapter model, OBD protocol number, connection success/failure, which screen was opened, error code. VIN, location and free text are NOT SENT. | On the server only as daily aggregate counters; cannot be linked to a person, deleted after 180 days. Can be turned off via Settings > Anonymous usage data. |
| Adapter Communication Log | Commands sent to the OBD2 adapter and the responses returned by the vehicle; vehicle make/model/year and adapter model. This log is used so the app can also be developed for vehicles of other makes. The vehicle identification number (VIN) is converted into an irreversible code WITHOUT LEAVING your device and removed from the log; location data is never collected. | Stored on the server for 21 days, then deleted automatically. Can be turned off via Settings > Anonymous usage data. |
| Problem Report (optional) | Only when you press the "Send log" button: app log lines (including the communication with the adapter), vehicle make/model/year and adapter information | Stored on the server for 30 days, then deleted automatically. It is never sent on its own. |
3Data Usage & Purpose
- Display vehicle diagnostic data in real-time via OBD2 adapter connection
- Interpret DTC fault codes and provide explanation to user
- Generate repair suggestions via AI Mechanic feature
- Remember user's language, theme, and vehicle profile choices
- Identify technical errors and improve app quality (anonymously)
- Verify Pro subscription status via Apple StoreKit
4Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Apple StoreKit / App Store | In-App Purchase, subscription verification | apple.com/legal/privacy |
| Railway (Backend) | AI Mechanic API, vehicle database | railway.app/legal/privacy |
| TikTok Business SDK | Ad measurement: Counting installs and purchases from TikTok ads. Device/ad identifiers, app launches, and purchase events are transmitted to TikTok; on iOS, the advertising identifier (IDFA) is shared only if you select "Allow". | tiktok.com/privacy |
Your data is never sold or rented under any circumstances. Limited data sharing occurs solely for ad measurement via the TikTok SDK mentioned above. On iOS, you can revoke this permission at any time via Settings > Privacy & Security > Tracking. On Android, you can disable or reset the advertising ID at any time via Settings > Privacy > Ads.
5Website Analytics
This section applies only to the carcoding.app website; the CarCoding app does not use these tools.
- Google Analytics 4: This service provided by Google measures page views and aggregate usage statistics (pages visited, visit duration, referrer, device and browser type, approximate country). For this purpose, it places cookies in your browser (for example _ga, _ga_*).
- Microsoft Clarity: By recording clicks, scrolls, and mouse movements on the site, it creates session replays and heatmaps; this allows us to see how pages are being used. It places cookies in your browser (for example _clck, _clsk). The collected data is processed and stored by Microsoft.
Opt out: You can block or delete these cookies from your browser's settings.
Google's browser add-on to turn off Google Analytics on all websites: tools.google.com/dlpage/gaoptout
For details on how the data is processed, see the privacy statements: Google · Microsoft
6Bluetooth & Location Permissions
On iPhone and iPad, the app uses the following iOS system permissions:
| Permission | Usage Purpose | Data Stored? |
|---|---|---|
NSBluetoothAlwaysUsageDescription |
Connect to ELM327 OBD2 adapter via BLE | No |
NSBluetoothPeripheralUsageDescription |
Exchange data with OBD2 adapter | No |
NSLocationWhenInUseUsageDescription |
Permission required by iOS for BLE scanning; location data is used only for BLE discovery, not recorded | No |
The Windows desktop version does not use this permission model: location permission is never used, and no background device scanning occurs. USB or Bluetooth adapters become available only when you select them from the device list shown by the program; no access is made to devices you do not select.
7Data Security
- All server communication is encrypted with HTTPS / TLS 1.2+.
- On iOS and Android, data stored on the device benefits from the operating system's keychain and system-level encryption; on Windows, data is kept in the app folder within your user profile.
- API connections are made only to https://carproscanner-production.up.railway.app; NSAllowsArbitraryLoads is set to false.
- AI chat data is transmitted using anonymous session ID; not tied to user identity.
8Subscriptions & Paid Features
CarCoding Pro subscription is offered via Apple App Store. Payments are processed entirely on Apple's infrastructure; we never see your credit card or payment method details.
Current prices and plan options are shown on the in-app purchase screen and on the App Store / Google Play. The amount varies by your country and currency.
Refund request: When you open a refund request, consumption data summarising your level of app usage is sent to the store (Apple or Google) so that it can assess the request; you consent to this sharing.
You can cancel your subscription anytime via App Store → Settings → Apple ID → Subscriptions. After cancellation, you retain access to Pro features until the current period ends.
9Children's Privacy
The application is not intended for children under 13 and does not knowingly collect personal data from them. The app's iTunes App Store age rating is 4+; however, the application is a vehicle diagnostic tool generally aimed at adult drivers.
10Your Rights
While using the application, you have the following rights:
- Access: You can view your vehicle profile and preferences stored in the app.
- Deletion: Removing the app from your device deletes all stored data.
- Correction: You can edit your vehicle profile within the app.
- Data Portability: Your vehicle data is stored locally on your device, so no request is needed.
For any privacy request, write to us at: [email protected]
11Policy Changes
We may update this Privacy Policy from time to time. For significant changes, we will update the "Last updated" date at the top of this page. Continuing to use the application means you accept the updated policy.
12Contact
For questions about our privacy policy:
- Email: [email protected]
- Web: https://carcoding.app