Privacy Policy
RACEMEASURE LLC, a Florida, USA company, develops CarDiag AI, an iPhone app that reads a car's fault codes through an OBD adapter and, if you wish, explains them with an AI mechanic. This policy explains what data the app and our server process, why, where and for how long. RACEMEASURE LLC is the controller of this data.
In short
- No sign-up or sign-in is required. We don't ask for your name, email address or phone number.
- Scan reports, the scan history and PDF reports stay on your iPhone.
- Data is sent for the AI features only after you agree. It may pass through our regional relay to our main server in the EU and is processed by Anthropic and OpenAI to generate the answers.
- Purchases are processed by Apple. We never receive your payment details.
- No advertising, no tracking, and we don't sell data.
1. Anonymous IDs for credits, trials and support
CarDiag AI has no sign-up or login. To keep your AI credit balance, the app creates a random account ID (a UUID) and stores it in your iCloud Keychain. If iCloud Keychain is on, the ID, and with it your credit balance, is available on your other devices with the same Apple Account; otherwise it stays on this iPhone. The ID is not derived from your device, your Apple Account or your phone number. We use it to keep your credit balance, purchases, AI spending, remaining free trials and any personal discount. Our server also creates a separate random support ID, displayed in My account. You can copy or share it with support so we can find your profile. It is not a password and does not contain your name, email or vehicle data. The profile exists even if you have not made a purchase. Authorized administrators can view these billing and trial records and apply personal discounts. They can also view the private AI request history described in section 4, linked to your support ID when available.
2. Data that stays on your iPhone
Scan reports and the scan history, PDF reports, the adapter log, the codes saved before and after a clear, and your adapter and app settings are stored only in the app on your iPhone. On your iPhone, your chat with the AI mechanic is kept in memory only and is not saved locally. Our server keeps the private request history described in section 4. You can delete the scan history in the app (Scan history → Clear history); deleting the app removes its data from your iPhone. When you share a PDF report or a technical log, it goes to the recipient you choose.
AI analysis requests awaiting a result and completed AI analyses are also saved on your iPhone alongside scan history. This lets the app retrieve the same result after a connection interruption or restart. Completed analyses can be deleted with scan history; older completed entries may be removed when the local history limit is reached. While an analysis is unresolved, clearing history is temporarily unavailable so its recovery information is not lost.
3. Purchases
CarDiag Pro and the credit packs are sold through Apple's App Store, and Apple processes the payment. We don't receive your card or bank details, your name, your email address or your Apple Account. The app sends our server the transaction information signed by Apple (such as the product, transaction ID, purchase date, price, currency and App Store country) so that the server can verify the purchase, add the credits and add the monthly credits of Pro Monthly. We keep these records with the credit ledger (credits added and spent), linked to your random account ID.
4. AI features: only with your consent
The AI analysis, the chat with the AI mechanic and voice input use our server and third-party AI providers. Before your first AI request, the app asks once for your permission to share this data. If you decline, the AI features stay off and everything else keeps working. You can withdraw your consent in the app at any time; after that, no new data is sent for AI features.
With your consent, an AI request can include:
- the VIN and vehicle details (make, model, year, engine, and mileage if known);
- fault codes with their status and freeze-frame data, and module data: name, address, protocol and identification such as part and serial numbers;
- the symptoms you describe and your chat messages;
- readings the AI asks the app to take during a chat (for example, live values), the adapter name and the connection state;
- for voice input, the audio recording, together with the car's make, model, fault codes and module names to improve recognition;
- the app language, the chosen AI model and your random account ID (to charge credits).
Our server sends the data needed for your request to one or both of these providers:
- Anthropic: Claude models for the analysis and the chat, and correction of recognized speech;
- OpenAI: GPT models for the analysis and the chat, speech-to-text for voice recordings, and web research.
For web research, the AI can search public sources through OpenAI's web search. Only the car's make, model and year and a short search query are sent; the VIN is removed.
The providers process the data to generate the answers. Under their API terms they don't use it to train their models. They may keep it for a limited time, typically up to 30 days, for security and abuse monitoring, and longer only where the law requires it or to investigate misuse. To troubleshoot errors and provide support, our server keeps a private AI request history for up to 30 days: your questions, diagnostic context sent for analysis, answers, model, result and token usage. Where available, it is linked to your random support ID. Only authorized administrators can access it. VINs, access credentials, signed conversation data and audio are excluded from this history. Voice recordings are deleted right after transcription.
To recover an AI analysis after an interrupted connection, our server stores its result or error, a random request ID, timing and status, a hash of the request contents and an account-specific hash. These diagnostic status/error records remain associated with your account for recovery and support. Completed results are available to the same authenticated account for 24 hours after completion; expired result content is removed at the next server storage cleanup. Minimal request IDs, status and hashes remain without the answer content to prevent duplicate execution. This recovery store is separate from the redacted support history described above.
5. VIN lookup at NHTSA
When a report contains a VIN, the app first decodes it on your iPhone. If the iPhone is online, the app also sends only the VIN to our server, which asks the vPIC database of the U.S. National Highway Traffic Safety Administration (NHTSA) for more vehicle details. This lookup doesn't depend on the AI consent. The AI analysis can make the same lookup. Our server keeps recent results in memory, not on disk, to avoid repeated requests.
6. Technical logs
Our main server is hosted by DigitalOcean in Amsterdam, the Netherlands (EU). To run and protect the service, it keeps technical logs: for each request, the IP address, the date and time, the requested address and the result; the web server also records the app or browser identification (user agent). For a VIN lookup, the requested address contains the VIN. These technical logs include the AI model and token counts, without questions or answers. The separate private AI request history is described in section 4. Request limits per IP address are kept in memory only. We use the logs only for security, to prevent abuse and to fix errors, and we delete them within 30 days.
Depending on regional settings and network availability, requests may pass through our relay hosted by IHC at ailaptimer.com before reaching the main server. The relay forwards request data over HTTPS and does not keep a separate AI conversation history. The hosting provider may maintain operational access and security logs under its hosting terms.
7. Legal bases (EEA, UK and Switzerland)
- Your consent, for the AI features (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future.
- Performance of a contract, for purchases, credits and Pro (Art. 6(1)(b) GDPR).
- Our legitimate interests in a secure, working service and correct vehicle identification, for technical logs, security and the VIN lookup (Art. 6(1)(f) GDPR).
- Legal obligations, for accounting records (Art. 6(1)(c) GDPR).
8. Who receives data
- Apple: payments, as an independent controller under Apple's privacy policy.
- DigitalOcean: hosting of our server in Amsterdam, the Netherlands.
- IHC: hosting of the regional relay used to forward requests to our main server.
- Anthropic and OpenAI: AI processing, as described in section 4. They may process data in the United States and other countries.
- NHTSA (United States): VIN lookups, as described in section 5.
We don't sell or rent personal data and don't share it for advertising. Transfers outside the EEA rely on the safeguards in the providers' data processing terms, such as the EU Standard Contractual Clauses. We may disclose data where the law requires it.
9. How long we keep data
| Data | How long |
|---|---|
| AI analysis recovery results and errors | Available for recovery for 24 hours after completion; expired content is removed at the next server storage cleanup. Minimal request IDs, status and hashes remain without answer content to prevent duplicates. |
| Content of AI requests (VIN, codes, module data, symptoms, messages) | Private server history: up to 30 days, with VINs, credentials and signed conversation data removed. Audio is not included. At the AI providers: see section 4. |
| Voice recordings | Deleted right after transcription. |
| Technical logs on our main server | Up to 30 days. The relay hosting provider may keep operational logs under its hosting terms. |
| VIN lookup results in server memory | Until the cache is full or the service restarts; never written to disk. |
| Web research results in server memory (no VIN) | Up to 6 hours. |
| Account and support IDs, credit balance, trial usage, personal discount, credit ledger and purchase records | Until you request deletion of your credit account. Purchase and credit-ledger records are retained only as long as accounting and tax laws require. |
| Data in the app on your iPhone | Until you delete it or the app. |
10. Your rights and choices
- Delete the scan history in the app at any time.
- Withdraw your AI consent in the app at any time.
- Ask for access to your data, its correction or deletion, restriction of or objection to its processing, and a copy of it. Email support@racemeasureapp.com with the subject "Privacy request". Include the support ID from My account so we can find your records, including free trial usage without a purchase. For a purchase question, you can also give the date and amount from Apple’s receipt email. Do not send passwords or payment details. We answer within one month.
- When you ask us to delete your data, we delete your credit account, including any unused credits. Purchase and ledger records are kept only as long as accounting and tax laws require.
- In the EEA, the UK and Switzerland, you can also complain to a data protection authority.
- California residents: we don't sell or share personal information and don't use it for cross-context behavioral advertising.
11. No advertising, no tracking
The app contains no advertising and no analytics or tracking SDKs, and it doesn't use the advertising identifier. We don't combine your data with data from other companies.
12. Security
The app talks to our server over HTTPS (TLS). The AI providers' keys are kept only on the server, and access to the server is restricted.
13. Children
CarDiag AI is a tool for car owners and is not directed at children. We don't knowingly collect personal data from children.
14. This website
These pages use Cloudflare Web Analytics to count page views. According to Cloudflare, it doesn't use cookies and doesn't track individual visitors. The pages remember your language choice in your browser's local storage. Our web server keeps standard access logs, as described in section 6.
15. Changes
If the app or our data practices change, we will update this policy and the date above. We will point out material changes in the app.
16. Contact
RACEMEASURE LLC
8380 NW 25TH CT, Sunrise, FL 33322, United States
Email: support@racemeasureapp.com
Phone: +1 954 459 3962