Privacy Policy

What we collect

An account code (no email or password required), an optional PIN, vehicle details you add (VIN, make, model, mileage), maintenance schedules, and service history you log. If you opt in to text message features, we also collect your mobile phone number.

How we use it

Solely to run the app: showing your vehicles and reminders, sending maintenance notifications, and processing subscription payments through Stripe. We don't sell your data or share it with advertisers.

Payment data

Subscription payments are handled by Stripe. Carvitals never sees or stores your card details — Stripe's own privacy policy governs that data.

SMS / text message notifications

If you opt in to SMS two-factor authentication (2FA), we use your mobile phone number to send one-time verification codes that confirm your identity and protect your account. If you opt in to the text alerts add-on, we use your mobile phone number to send maintenance reminders for your vehicles. These messages are transactional — we do not send marketing or promotional text messages.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. The information collected as part of SMS opt-in — including your phone number and your consent — is never shared with third parties for their own marketing.

We share your mobile number only with our messaging service provider (Telnyx) solely to deliver the messages you request, and only to the extent necessary to provide that service.

Message frequency varies based on your account activity, authentication requests, and upcoming maintenance. Message and data rates may apply, depending on your mobile carrier and plan. Reply STOP to any message to opt out at any time, or reply HELP for assistance. You can also disable SMS messaging at any time in your account's Privacy & Security settings. Full SMS program terms are in our Text Message Policy.

Third-party services

We use a small number of third-party services to run Carvitals, and only share what's necessary for each to do its job:

• Stripe — subscription billing and payment processing.
• Telnyx — delivery of SMS verification codes and text alerts.
• Anthropic — powers the optional AI assistant, insights, and log-parsing add-on; vehicle data you ask about is sent to Anthropic to generate a response.
• Vaya — product analytics, so we can see how Carvitals is used and improve it.
• Google Fonts — delivers the fonts used on this site.
• NHTSA vPIC — the U.S. government's free vehicle database, used to decode a VIN into year/make/model.

Data retention

Your data stays until you delete your account, at which point it's permanently removed from our database.

Security

Account identifiers and PINs are stored hashed, not in plaintext. Access to your data requires your account code and, if enabled, your PIN.

Contact

Questions about this policy? Reach out at support@carvitals.org.