Privacy Policy

1. Information We Collect

1.1 Account & Profile Information

When you create a vehicle profile, we collect information such as your vehicle's make, model, year, and engine specifications. If you create a website community account, we collect your email address, chosen username, and authentication credentials (securely hashed — we never store plain-text passwords).

1.2 Vehicle Telemetry & Diagnostic Data

To provide our diagnostic services, we process data transmitted via your OBD-II adapter, including:

• Diagnostic Trouble Codes (DTCs): Fault codes stored in your vehicle's ECU, including pending, confirmed, and permanent codes.
• Freeze Frame Data: Snapshot conditions captured when a fault code was set.
• Live Sensor Data: Real-time metrics including RPM, speed, fuel trims, coolant temperature, battery voltage, oxygen sensor readings, and other OBD-II PIDs.
• Vehicle Identification Number (VIN): Used solely to identify your vehicle's configuration for accurate AI analysis.
• ECU Information: Module identifiers and calibration data.
• Scan History: Records of previous diagnostic scans performed through the app.

1.3 Performance & Safety Test Data

If you use our brake test, dyno/horsepower estimation, suspension test, or 0–100/quarter-mile timing features, we collect phone sensor data (accelerometer, gyroscope, GPS) used to generate test results. This data is processed locally on your device and is not transmitted to our servers unless you choose to share results.

1.4 AI Diagnostic Interactions

When you use the AI diagnostic assistant, your vehicle's diagnostic data (DTCs, live sensor snapshots, scan history, and vehicle profile) may be sent to external AI service providers to generate human-readable diagnostic insights. We disclose this in Section 3.

1.5 Sentinel / Background Health Checks

If you enable Sentinel (background health monitoring), the app may periodically reconnect to your OBD-II adapter via Bluetooth to perform automated health checks. Data collected during these checks (battery health, baseline deviations, charging system status) is stored locally and may generate push notifications.

1.6 Health Index / OBDIndex Data

If you opt in to the OBDIndex programme, anonymised and aggregated diagnostic data may be contributed to our regional vehicle health database. See Section 7 for details on what data is contributed and how it is anonymised.

1.7 Technical & Usage Data

We collect anonymised technical data including device type, operating system version, app version, and interaction events (via Google Tag Manager / Google Analytics) to improve app stability and performance.

1.8 Website Community Data

If you participate in the community forum, we store your username, email address, posts, comments, and moderation history. Your community identity is separate from any anonymised vehicle health data.

2. How We Use Your Information

• AI Diagnostics: Processing vehicle data through AI models to provide human-readable diagnostic insights and repair guidance.
• Predictive Maintenance: Analysing telemetry patterns to warn you of potential failures.
• Performance Testing: Generating brake, dyno, suspension, and acceleration test results from phone sensor data.
• Background Monitoring: Providing Sentinel health check notifications and baseline comparisons.
• Report Generation: Creating diagnostic reports and summaries for your records.
• Community Services: Enabling forum participation, moderation, and user identity management.
• Service Improvement: Aggregating anonymised data to improve diagnostic algorithms.
• Legal Compliance: Meeting obligations under applicable law.

3. Data Sharing & Third Parties

We do not sell your personal data to third parties. We share data only in the following contexts:

• AI Service Providers: Vehicle diagnostic data (DTCs, sensor readings, vehicle profile) is sent to external AI providers (such as Google Gemini, OpenAI, or Groq) to generate diagnostic insights. No personally identifiable information (name, email, address) is included in AI prompts. These providers may process data under their own privacy policies.
• Analytics: We use Google Analytics / Google Tag Manager to track anonymised app and website usage metrics.
• Payment Processing: All in-app purchases and subscriptions are handled through Google Play Billing. We do not store your credit card or payment information.
• Firebase Services: We use Google Firebase for authentication, cloud functions, and limited data storage. Firebase processes data under Google Cloud's privacy terms.
• Law Enforcement: We may disclose data if required by law, court order, or to protect the safety of our users.

4. Data Security & Retention

Your data is protected using industry-standard encryption both in transit (TLS/HTTPS) and at rest. Diagnostic data is retained for as long as necessary to provide the service. You can request deletion of your account and all associated data at any time (see our Account Deletion page).

Community forum posts may be retained in anonymised form after account deletion to preserve discussion integrity.

5. Subscriptions & Purchases

Android subscriptions and purchases are managed entirely through Google Play Billing. We receive confirmation of your subscription status but do not have access to your payment method details. Cancellation, refunds, and billing inquiries are handled through Google Play. See our Terms of Service for full subscription terms.

6. Reports & Exports

Diagnostic reports generated by the app are based on available OBD-II data and AI analysis. These reports are informational only and are not certified inspection reports, WOF certificates, insurance documents, emissions compliance certificates, vehicle valuations, or manufacturer diagnostic reports.

7. Health Index / OBDIndex Programme

The OBDIndex programme aggregates anonymised vehicle health data to create regional health profiles. Participation is opt-in.

7.1 What Data May Be Contributed

• Anonymised diagnostic trouble codes and their frequency
• Vehicle make, model, year, and engine type (no VIN)
• General geographic region (country/state level — no precise location)
• Component failure patterns and emissions readiness data

7.2 What Is Excluded

• Vehicle Identification Number (VIN) — excluded or cryptographically hashed
• Precise GPS coordinates — only general region is retained
• User email, name, or other personal identifiers
• Registration plate or ownership details

7.3 Opt-In / Opt-Out

You can enable or disable OBDIndex data contribution at any time in the app settings. Opting out does not affect your access to other app features.

7.4 Use of Aggregated Data

Anonymised, aggregated OBDIndex data may be used for analytics, research, and to improve our products. We do not sell individual user data. Aggregated statistical insights (e.g., "40% of 2018 Mazda 3s in Auckland show catalyst efficiency DTCs") may be displayed publicly on the Health Index page or used in reports.

8. Your Rights

Depending on your location, you may have rights under the New Zealand Privacy Act 2020, GDPR, CCPA, or other applicable legislation, including the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with a supervisory authority

To exercise these rights, please contact us at the email below or use the Account Deletion page.

9. Children's Privacy

OBDAssistant is not intended for use by children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the app or website after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this policy or our data practices:

Mellers Tech Limited
New Zealand
Email: support@obd2assistant.com