Privacy Policy
AutoRecords is made by Joyride Software LLC ("we", "us"). This policy explains what we collect when you use the AutoRecords iPhone app and the autorecords.ai website, why we collect it, and the choices you have. The short version: we collect what we need to keep your car's records, we don't run ads, and we never sell your data.
What we collect
- Account details. Your email address, a user ID and the username you choose. When you sign in with Apple or Google we receive your email address (or Apple's private relay address, if you hide it) and never see your password. If you sign in with email and a password instead, the password is stored only as a salted hash by our sign-in provider; we can't read it.
- Your records. The vehicles you add (including VIN, year, make, model and photos), the receipts, invoices and documents you capture or upload, the details extracted from them (vendor, date, amount, odometer, work performed), the shops you use and their contact details, notes, ratings and reminders. This includes vehicle history reports (such as a Carfax report) and spreadsheets you choose to import.
- Email you forward. If you send or forward email to your personal @in.autorecords.ai address, we keep the message, its attachments and the sender address so we can file the record and show you the original. If your account is on the free plan and past its limits, the message is kept unread and is only processed if you subscribe.
- Questions you ask. Questions typed into Ask, and the answers, so you can revisit them.
- Waitlist details. Name, email and optional survey answers if you join the waitlist on our website.
- Notification details. If you allow notifications, a device token from Apple so we can send them, and your choices about which kinds you want.
- Purchase status. Whether your account has an active AutoRecords Pro subscription and when it renews or ends. Apple handles the payment; we never receive your card details.
- Reading accuracy. When you correct a field the app read from a receipt, we note which field was corrected (not what you typed) so we can see when reading gets worse. The app has no advertising or third-party analytics software in it. Website analytics are aggregated and don't use cookies.
How we use it
- To run the product: store your records, parse receipts, answer questions about your records, send reminders and notifications, and create the share links and vehicle transfers you ask for.
- To look up a vehicle from its VIN, we send the VIN (and nothing else about you) to the U.S. National Highway Traffic Safety Administration's public decoder.
- To read receipts and answer questions, we send the relevant receipt image or record text to an AI provider (Anthropic) from our servers. Your data is used only to produce the result you requested and is not used to train their models.
- To email you about your account, your waitlist status, or a reply to something you sent us.
- To keep the service secure and to understand which features people use.
We don't show ads, we don't sell or rent your data, and we don't use it for advertising or tracking across other apps and websites.
Sharing
Nothing you store is public unless you share it. When you create a share link, only the fields you choose are included, and your name, address, phone, email and card digits are redacted from receipts by default. You can set links to expire and revoke them at any time from Settings. If you send a record or a history from the app's share sheet instead, it goes wherever you send it and we have no control over that copy.
When you transfer a vehicle to another AutoRecords user, that vehicle, its records, their documents and the shops on them move to the new owner's account once they accept. A VIN can belong to one account at a time; if you add a VIN that's already in someone else's garage, we tell you it's taken but never who has it.
We use a small number of service providers to run AutoRecords, each bound by their own confidentiality terms: Supabase (database, file storage and sign-in), Anthropic (AI receipt reading and answers), Resend (transactional email and inbound email), Vercel (website hosting and analytics), and Apple (App Store purchases, sign-in and notification delivery). Google provides sign-in if you choose it. We may also disclose information if required by law.
Your choices
- Export. You can export every record as a spreadsheet, and every stored document as a PDF, at any time, on any plan, including after you cancel. An export can be restored into a new account.
- Delete. You can delete individual records, vehicles, and your whole account from inside the app. Account deletion removes your records, documents and email-in address from our systems within 30 days, except where we must keep a copy for legal or accounting reasons.
- Notifications. You can turn each kind of notification off in the app's Settings, or all of them in iOS Settings.
- Email. You can stop forwarding to your @in.autorecords.ai address at any time. Unsubscribe links appear in any non-essential email we send.
- Access and correction. Email us and we'll help you access, correct or remove your information.
Retention and security
We keep your records for as long as you have an account. Data is stored on servers in the United States, encrypted in transit and at rest. Access is restricted to what the product needs; receipt originals are never reachable through a share link.
Children
AutoRecords is not directed at children under 13 and we don't knowingly collect their information.
Changes
If we make meaningful changes to this policy we'll update the date above and, for significant changes, let you know in the app or by email.
Contact
Questions about privacy: mail@autorecords.ai.