ARWrench ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ARWrench mobile application and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information
When you create an account through our authentication provider, we collect:
- Email address
- Display name
- Authentication identifiers
Asset and Maintenance Data
Information you provide about your assets and their maintenance:
- Vehicle details (make, model, year, VIN, mileage)
- Equipment specifications and serial numbers
- Appliance details and model information
- Real estate property information
- Service records, maintenance history, costs, and notes
- Reminders and scheduled maintenance tasks
AI Interaction Data
When you use AI-powered features, we collect:
- Chat messages and conversation threads with our AI assistant
- Photos and images uploaded for AI-powered visual analysis
- AI-generated diagnostics, suggestions, and responses
Device and Technical Data
- Device push notification tokens (for sending maintenance reminders)
- Device identifier (used by Firebase Analytics for anonymous session attribution; consent-gated)
- Device type and operating system version
- Crash reports and performance diagnostics
- Product interaction events (which screens you view and which features you use, used to improve the app; consent-gated)
- Usage analytics (collected only with your explicit consent)
Real Estate Asset Information
If you add a real estate asset (home, rental, commercial property), we collect the physical address you provide so the app can label and reference that asset across reminders, service records, and AI conversations. We do not use addresses for advertising, targeting, or any third-party data sharing. The address is stored encrypted at rest alongside your other asset data and is deleted when you delete the asset or your account.
Session Replay (Error Diagnostics)
To diagnose crashes and rare in-app errors, we use Sentry's Session Replay feature. This captures a low-fidelity recording of the screens you viewed in a session where an error occurred. User text inputs and photos are automatically masked before any frame is recorded — we never see what you typed or which images you uploaded, only the app structure around the failure. Session Replay is consent-gated alongside the rest of analytics and captures at most 10% of normal sessions (100% of sessions where an error fires).
2. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the ARWrench service
- Track and manage your assets and maintenance schedules
- Deliver AI-powered diagnostics and maintenance recommendations
- Send push notifications for upcoming maintenance reminders
- Generate service history reports and PDF exports
- Improve app performance and fix bugs via crash monitoring
- Analyze usage patterns to enhance the user experience (consent-gated)
- Suggest relevant replacement parts through our affiliate marketplace
3. Third-Party Services
We integrate with the following third-party services to deliver our product. Each processes data only as necessary for its stated purpose:
| Service | Purpose | Data Shared |
|---|---|---|
| Convex | Database and real-time sync | All user-entered asset, maintenance, and chat data |
| Clerk | Authentication | Email, name, auth tokens |
| Sentry | Crash monitoring and error tracking | Device info, crash reports, breadcrumbs (no PII) |
| Firebase Analytics | Usage analytics (consent-gated) | Anonymized usage events, screen views |
| xAI (Grok) | AI chat and diagnostics | Chat messages, asset context for AI responses |
| Google Gemini | Vision-based image analysis | Uploaded photos for visual diagnostics |
| Railway | AI backend infrastructure | AI request routing and processing |
We do not sell your personal information to any third party. Third-party services process data solely to provide their stated functionality to you.
4. Data Retention
We retain your data as follows:
- Account and asset data: Retained for the lifetime of your account.
- Chat threads: Automatically deleted after 30 days of inactivity.
- Audit logs: Purged after 90 days.
- Soft-deleted data: Permanently purged by an automated daily cleanup process.
- Uploaded photos: Retained until the associated asset or chat is deleted, or upon account deletion.
5. Your Rights and Choices
Account Deletion
You can delete your account at any time from the Settings screen within the app. Account deletion permanently removes all of your data, including:
- All assets, service records, and reminders
- All chat threads and AI conversation history
- All uploaded photos and files
- Your user profile and authentication credentials
- Push notification tokens
Consent Management
Analytics collection is gated behind your explicit consent. You can manage your consent preferences at any time within the app settings. When analytics consent is not granted, no usage data is collected or transmitted.
GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at legal@arwrench.com.
6. Data Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted via TLS 1.3
- Authentication managed by Clerk with secure token handling
- Web Application Firewall (WAF) protection via Cloudflare
- HSTS preload enabled for all web endpoints
- Server-side audit logging for all data mutations
- Offline data cached securely on-device via SwiftData
While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
7. Children's Privacy
ARWrench is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at legal@arwrench.com.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Effective Date" at the top of this page and, where appropriate, provide in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: legal@arwrench.com