GREASEGPT

Privacy Policy

Effective date: 15 February 2026 · Last updated: 15 February 2026

This Privacy Policy explains what information GreaseGPT (the "app", "we") collects, how we use it, who we share it with, and the choices you have. GreaseGPT is a mobile app that helps drivers diagnose car problems using AI.

1. Data we collect

Category	Examples	Purpose
Account	Email, hashed password, Google Sign-In identifier	Sign-in, account recovery
Vehicle profile	Year, make, model, engine, VIN, mileage, nickname	Tailor diagnoses to your car
Diagnosis content	Chat messages, uploaded photos, audio you record for transcription	Provide the AI mechanic feature
Service & maintenance logs	Dates, mileage, cost, notes you enter	Maintenance reminders and history
Subscription	Pro status, RevenueCat purchase receipts (never card numbers)	Unlock Pro features
Usage counters	Number of diagnoses this month	Enforce the free-tier monthly limit
Advertising ID	Android Advertising ID (only if you leave OS-level ad personalization on)	Serve non-personalized banner/interstitial ads to free users

What we do NOT collect: we do not collect precise GPS location, contacts, SMS, call logs, or health data. We do not sell personal data.

2. How we use your data

• Authenticate you and keep your session
• Send your diagnosis prompts to our AI providers (see §3) and return the answer
• Transcribe voice recordings you submit for a diagnosis
• Track free-tier monthly usage and unlock Pro features via RevenueCat
• Display advertising to non-Pro users (with test IDs during review)
• Detect abuse and secure the service

3. Third-party service providers

To deliver the app, we share the minimum data required with these processors:

• OpenAI (via Emergent LLM proxy) — diagnosis text prompts and images, voice transcription. Privacy
• Anthropic (via Emergent LLM proxy) — legacy cost-estimator prompts. Privacy
• Perplexity AI — real-time web search queries built from your vehicle profile + question (used to verify specs). Privacy
• Google AdMob — non-personalized banner & interstitial ads to free users. Privacy
• RevenueCat — subscription entitlement management. Privacy
• Google Sign-In (via Emergent Auth) — optional social sign-in. Privacy
• MongoDB Atlas — encrypted database hosting.
• NHTSA (public U.S. government API) — VIN decoding and recall lookups. No personal data sent.

4. Advertising

Free-tier users see Google AdMob ads. We request non-personalized ads by default (requestNonPersonalizedAdsOnly: true). During Play Console review the app uses Google's test ad IDs.

5. Data retention

• Account, vehicle, and chat data — kept while your account is active.
• Voice audio you submit — transcribed on the fly; the raw audio file is not persisted server-side after the transcription completes.
• Deletion requests — completed within 7 days (usually within 24 hours). Backups are purged within 30 days.

6. Your rights

• Access / export: use the "Export Diagnosis PDF" feature inside the app, or email us.
• Delete: in the app go to Profile → Delete Account, or use our public form at /api/account-deletion.
• Correct / update: edit your vehicle profile and settings inside the app.
• Withdraw consent for ads: upgrade to Pro (ads are hidden for Pro users).

7. Children

GreaseGPT is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

8. Security

Traffic uses HTTPS. Passwords are hashed with bcrypt. API keys and secrets never ship in the mobile app — every third-party call is proxied through our server.

9. Changes to this policy

We will post updates to this page and, for material changes, notify you inside the app. The "Last updated" date at the top reflects the most recent version.

10. Contact

Data controller: GreaseGPT team
Email: greasegpt.app@gmail.com
Account deletion: /api/account-deletion