Root Cause Mechanic — Privacy Policy

Root Cause Mechanic ("we," "us," the "app") helps vehicle owners diagnose problems using their vehicle's own data. This policy explains what we collect, why, and the choices you have. We built the app to be evidence-based and privacy-preserving: we do not sell your data, we do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites.

1. Information you provide and we store

To provide the service, we store the data you create in the app, associated with your account:

• Account: your email address, used only to sign you in (one-time codes) and for account/support communication.
• Vehicles: details you add — VIN, year/make/model, engine, mileage, nickname.
• Diagnostics: the complaints you describe, case history, trouble codes (DTCs), and maintenance/repair records you keep.
• Vehicle data from your OBD adapter: live and drive readings the app reads over Bluetooth from a scan tool you connect (e.g. engine data, trouble codes). These reads are read-only; the app does not write to or modify your vehicle.

This data is stored on our managed cloud backend and is access-controlled to your account. It is used to run the diagnostic features you request — not for advertising.

2. Diagnostic processing (AI)

When you run a consult, the relevant case details (your complaint and the vehicle/diagnostic data for that case) are sent to our backend and an AI language model to generate a structured diagnosis. This data is used to produce your result and is not used to train third-party advertising models or sold to anyone.

3. Recall & vehicle lookups

To surface recalls and vehicle specifications, your VIN or year/make/model may be sent to public government/manufacturer data services (e.g. the U.S. NHTSA APIs). These lookups return public safety information and are used only to show it to you.

4. Anonymous diagnostics & usage data

To keep the app reliable, we collect first-party, anonymous product-usage and error information:

• A random, app-generated identifier for the install (not your name, email, IDFA, or any hardware identifier).
• The name of an action or error, the app version, and crash/performance signals.

5. Sharing with a repair shop (only if you choose)

You may generate a one-vehicle share code to let a specific repair shop view that vehicle's history (maintenance, trouble codes, drives) and add repair records. Sharing is per-vehicle, consent-based, and revocable — you can cancel access at any time, and a shop can only add records, never edit or delete your data. We never share your data with a shop unless you create a share.

6. Service providers

We use a small number of processors strictly to run the service: cloud database/authentication hosting, the AI diagnostic model provider, government recall/VIN data services, email delivery, and the Apple App Store. They process data only to provide their function to us. We do not use data brokers, ad networks, or cross-app tracking partners.

7. Your choices & rights

• Access, correct, or delete your vehicles, cases, and records in the app.
• Request account deletion by emailing us; we remove your account data (some records may be retained briefly where required for security or law).
• Opt out of anonymous diagnostics (full-price users), and revoke any shop share at any time.

8. Data security & retention

Data is transmitted over encrypted connections (HTTPS/TLS) and access-controlled to your account. We keep your data while your account is active and delete or archive it on account deletion.

9. Children

The app is not directed to children under 13 and we do not knowingly collect their data.

10. Changes

We may update this policy; we will change the effective date above and, for material changes, notify you in the app or by email.

11. Contact

Questions or requests: support@rcmechanic.shop.