Privacy Policy

Last updated: March 25, 2026

CarXray ("we", "our", "us") operates the CarXray mobile application. This page informs you of our policies regarding the collection, use, and disclosure of personal data.

Data We Collect

• Apple ID identifier — When you sign in with Apple, we receive a unique identifier and optionally your email address. We use this solely for account authentication and report delivery.
• VIN numbers — Vehicle Identification Numbers you enter are sent to our servers to generate reports. We cache VIN data to improve response times.
• Vehicle photos — Photos you upload for AI analysis are stored on our servers during report generation. Photos are deleted 30 days after report generation.
• Device token — If you enable notifications, we store your device push token to send report status updates.
• Device identifier (IDFV) — Used for rate limiting. Not shared with third parties.

How We Use Your Data

• To generate vehicle history and AI damage/repaint detection reports
• To process in-app purchases and deliver report credits
• To send push notifications about report status
• To improve our AI detection accuracy (aggregated, anonymized data only)

Data Coverage

Vehicle history data covers vehicles registered in the United States and Canada. Data is sourced from NMVTIS (National Motor Vehicle Title Information System), NHTSA, insurance companies, auto auctions, salvage yards, and state motor vehicle agencies. For vehicles not registered in these countries, history data may be limited or unavailable.

Data Processors

• Modal (modal.com) — AI inference processing. Photos are sent for analysis and not retained after processing.
• GoodCar / NMVTIS — Vehicle history data providers covering the US and Canada.
• NHTSA — US National Highway Traffic Safety Administration. Provides recall and complaint data.
• Apple — In-app purchase processing via StoreKit.

Data Retention

• Photos: Deleted 30 days after report generation
• Reports: Stored until you delete your account
• Account data: Stored until you request deletion
• VIN cache: Cached for up to 30 days to improve performance

Your Rights

You have the right to:

• Delete your account — Available in Settings. Removes all data including reports, photos, and personal information from all storage.
• Export your data — Contact us to request a copy of your data (GDPR Article 15).
• Opt out — California residents may opt out of data sharing (CCPA). Contact us at the email below.

Third-Party Advertising

We do not use any advertising SDKs. We do not sell your data to advertisers. We do not track you across other apps or websites.

Children's Privacy

CarXray is not directed at children under 13 and we do not knowingly collect data from children under 13 (COPPA compliance).

Contact

For privacy inquiries: privacy@carxray.com