This Privacy Policy describes how MECH.AI LLC ("we," "us," or "our") collects, uses, and shares information when you use MECH AI (the "Service"). Questions? Email alex@mechai.app.

1. Information we collect

Account info. Name, email, and login credentials.
Vehicle & usage data. VINs, year/make/model/trim, engine type, mileage, service history, and questions, photos, and answers you submit to the AI Mechanic, Diagnostics, Vehicle Health, Support Assist, Repair Guides, and Maintenance Schedule features.
Device & diagnostic data. Standard app diagnostics (crashes, performance) used to keep the product stable.
Payment info. Handled by Apple, Google, or Stripe — we never see your card.

2. How we use information

Deliver and improve the Service
Provide customer support
Communicate product updates (you can opt out of marketing emails)
Comply with legal obligations

3. AI processing & third-party AI providers

The AI features in MECH AI — including AI Mechanic chat, Diagnostics, Vehicle Health analysis, Support Assist, Repair Guides, and Maintenance Schedule optimization — are powered by Google's Gemini large language models, operated by Google LLC ("Google"). To answer your question, the following data is transmitted to Google for processing on our behalf:

The text of your question, message, or symptom description.
Vehicle context you have entered: year, make, model, trim, engine type, mileage, and (where you provide it) VIN.
Any photos or images you attach (for example diagnostic photos of a component, dashboard light, or wear pattern).
Your previous turns in the same conversation (so the AI can keep context), your selected expertise level (DIY / experienced / pro), and your interface language.

We do not transmit your name, email address, password, payment information, or precise device location to Google. Your account ID is not attached to AI requests.

Google processes this data as our service provider under the Google Cloud / Vertex AI data processing terms (Cloud Data Processing Addendum) and Google's Gemini for Google Cloud data governance. Under those terms, Google does not use your prompts, photos, or responses to train its foundation models, retains the data only as long as needed to deliver the response (plus a short abuse-monitoring window), and provides protections substantially equivalent to those described in this policy.

Before the first time MECH AI sends any of your data to Google's Gemini service, the app shows you an in-app disclosure explaining what will be sent and asks for your explicit consent. You can decline at any time, in which case the AI feature will not run and no data will be transmitted. You can also revoke consent later under Settings → Privacy → AI Assistance, which will stop further AI requests from your account until consent is granted again.

4. Sharing

In addition to the AI processing described in Section 3 and advertising measurement described below, we share information with service providers (hosting, analytics, payments, email delivery) who are contractually bound to protect it. Each provider is engaged under a data processing agreement that requires confidentiality, security, and use of your data only to deliver the service to us. We do not exchange your personal information for money. Advertising-related sharing is described below.

Optional Facebook and Instagram web-trial measurement

Where this feature is available, visitors arriving from a Meta ad can choose whether to allow optional measurement in the web app. If you allow it and start a confirmed web subscription trial, MECH AI sends Meta Platforms your ad-click identifier, a browser identifier, browser type, trial start time, an opaque event identifier, and the app's website address. We use this to measure and improve Facebook and Instagram advertising. This event does not include your name, email, phone number, IP address, payment details, repair content, vehicle details, or private page address.

Meta may combine event information with information it already holds to measure advertising, personalize ads and other content, and improve its services. Its processing is described in the Meta Privacy Policy and Meta Business Tools Terms. The service-provider-only description above does not describe all of Meta's uses.

You can decline without losing access to MECH AI, or revoke future web-trial sharing through Ad measurement preferences in the web app. The browser's measurement choice and identifiers expire after 90 days. This feature honors Global Privacy Control and does not send events when that browser signal is enabled. Revoking consent stops future sharing through this feature; it does not recall information already sent to Meta. You can also review advertising choices in Meta's ad preferences. These controls apply to this optional web-trial feature, not to every analytics or mobile attribution service.

Facebook and Instagram links to the mobile app

Our mobile download links use AppsFlyer to route you to the appropriate app store and attribute installs. For eligible Facebook and Instagram campaign clicks, AppsFlyer can send Meta the campaign and click identifiers, eligible device attribution identifiers, IP address, browser/device type, install events and trial-start events. Our Meta Web trial mapping excludes extra event values and revenue, and advanced matching is disabled. iOS Advanced Privacy remains enabled: this integration does not send postbacks for non-consenting iOS 14.5+ users. The website does not forward the Meta click identifier to this mobile download link when Global Privacy Control is enabled. The separate web-trial preference above does not control the mobile app's operating-system tracking permission.

5. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your data. Email alex@mechai.app and we'll walk you through it.

6. Retention

We keep your account data for as long as your account is active, plus a short period after deletion to comply with legal obligations.

7. Children

MECH AI is not directed to children under 13. We do not knowingly collect personal information from children.

8. International transfers

Data may be processed in the United States and other countries. We rely on standard contractual clauses where required.

9. Changes to this policy

We'll notify you of material changes via the app or email.