diagnostic-ai-legal

Privacy Policy

Effective date: May 28, 2026

Application: Diagnostic AI

Application owner: Larisa Kozlova

Contact email: larisakozlova.dev@gmail.com

This Privacy Policy explains what data Diagnostic AI (the “Application”) collects and processes, how that data is used, where it is stored, which third-party services may process it, and how users can request deletion of their account and related data.

By using the Application, you acknowledge that you have read this Privacy Policy.

1. Data We Collect

The Application may collect and process the following categories of data.

1.1. Account Data

When you register, sign in, or use the Application, we may process:

Registration and authentication are provided through Supabase.

1.2. Vehicle Data

The Application may process vehicle data, including the vehicle identification number (VIN).

The VIN is not stored on the server in plain text. A SHA-256 hash of the VIN may be stored instead. This helps associate diagnostic history with a vehicle without storing the full VIN in a readable form.

However, a VIN hash may still be considered data linked to a user or vehicle when it is stored together with a user account or diagnostic history.

1.3. Diagnostic Data

The Application may collect and store data received from a vehicle through an OBD adapter, including:

This data is used to display diagnostic history, analyze trouble codes, and provide reference information about possible causes of vehicle issues.

1.4. Subscription and Purchase Data

To manage paid features, the Application may process:

Payments are processed through Apple App Store. Subscription status and entitlement management may be handled through RevenueCat.

The Application does not receive, process, or store full payment card details.

1.5. OBD Adapter Connection Data

The Application may use Bluetooth or Wi-Fi to connect to a vehicle OBD adapter.

Bluetooth and Wi-Fi connection data is used locally on the user’s device to establish a connection to the adapter and read diagnostic information.

The Application does not send Bluetooth or Wi-Fi connection data for the OBD adapter to the Application server unless it is part of diagnostic information that the user explicitly sends for analysis or diagnostic history.

1.6. Technical Data and Logs

To operate the Application, maintain security, and diagnose errors, the Application and third-party services may process technical data, including:

This data is used for Application functionality, security, error correction, and service quality improvement.

2. How We Use Data

We use collected data to:

3. AI-Assisted Diagnostics

To generate AI-assisted diagnostic explanations, the Application may send diagnostic data to OpenAI, including DTC codes, technical vehicle parameters, and symptom descriptions if provided by the user.

When sending data to OpenAI, the Application does not send the VIN in plain text, the user’s email address, or Bluetooth/Wi-Fi connection data for the OBD adapter.

AI-assisted diagnostics are provided for informational reference only and may contain errors, inaccuracies, or incomplete information. They are not professional vehicle diagnostics, a technical conclusion, a repair recommendation, or a basis for driving safety decisions.

If your vehicle shows warnings, unusual behavior, or any signs of unsafe operation, contact a qualified mechanic, service center, or official dealer.

4. Third-Party Services

The Application uses third-party services to operate. We share only the data necessary for the relevant function.

Third-party services that process user data are expected to provide protections comparable to this Privacy Policy and applicable law.

Supabase

Supabase is used for:

OpenAI

OpenAI is used to generate reference AI explanations of diagnostic trouble codes and possible causes.

Only data necessary to analyze the request and prepare a response is sent to OpenAI. The Application does not send the VIN in plain text, the user’s email address, or Bluetooth/Wi-Fi OBD adapter connection data to OpenAI.

RevenueCat

RevenueCat is used for:

Apple App Store

Apple App Store is used to process payments, subscriptions, cancellations, and refunds according to Apple’s rules.

The Application does not store or process full payment card details.

5. Data Storage and Security

Application data is stored in the infrastructure of Supabase and the other third-party services described above, as required for Application functionality.

We take reasonable technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

6. Local Processing

Some data is processed locally on the user’s device, including Bluetooth and Wi-Fi connection data for the OBD adapter.

This data is used to connect to the OBD adapter and read diagnostic information. It is not sent to the Application server unless the user uses a feature that requires diagnostic data to be sent for analysis, history storage, or account synchronization.

7. International Data Processing

Diagnostic AI may be available to users in different countries.

The Application uses third-party services including Supabase, OpenAI, RevenueCat, and Apple App Store. Data may be processed and stored on servers located in different jurisdictions depending on those services’ infrastructure.

By using the Application, you understand that your data may be transferred to and processed outside your country of residence when necessary for Application functionality, authentication, diagnostic history storage, subscription management, and AI-assisted diagnostics.

8. Data Retention

Account data, diagnostic history, DTC codes, scan results, and related data are stored while the user has an account in the Application or until the user deletes the account.

Some technical data may be retained longer if necessary for security, abuse prevention, legal obligations, payment processing, dispute resolution, or protection of the Application owner’s legitimate interests.

Purchase and subscription data may be retained by Apple, RevenueCat, or other payment infrastructure providers according to their own rules, terms, and legal obligations.

9. Account and Data Deletion

The user may delete their account and related data through the Application if this feature is available in the current version.

When an account is deleted, data linked to that user account is deleted or anonymized, including:

Some data may remain after account deletion if required for legal obligations, security, abuse prevention, payment processing, dispute resolution, or if it is stored by Apple, RevenueCat, or other third-party services under their own rules.

If the user cannot delete the account through the Application, they may request deletion by contacting larisakozlova.dev@gmail.com.

10. Subscriptions and Purchases

Paid features may be provided through subscriptions.

Payments are processed through Apple App Store. Subscription status may be managed through RevenueCat.

The Application does not receive or store full payment card details.

Users can manage or cancel subscriptions through Apple ID / App Store settings.

Deleting the account in the Application or deleting the Application from the device does not always cancel an active subscription. To cancel a subscription, the user must use Apple ID / App Store settings.

11. User Rights

Users may contact us at larisakozlova.dev@gmail.com to:

Depending on the user’s country of residence, additional rights may apply, including rights of access, correction, deletion, restriction of processing, data portability, or objection to processing.

We may request additional information to verify the user’s identity before fulfilling a request.

12. Age Restrictions

The Application is intended for users who are legally allowed to operate or maintain a vehicle under the laws of their country.

The Application is not intended for children under 13 and is not intended to knowingly collect children’s data. If we become aware that we have received data from a child without required parental or guardian consent, we will take reasonable steps to delete such data.

13. User Safety

The user is responsible for safe use of the OBD adapter, compliance with vehicle diagnostic safety rules, and using the Application only in safe conditions.

Do not use the Application while driving if it distracts from the road or violates traffic laws.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify users through the Application or by another available method.

The current version of this Privacy Policy is available at: https://LARIkoz.github.io/diagnostic-ai-legal/privacy-policy.

15. Contact

For questions about this Privacy Policy or data processing, contact us:

Email: larisakozlova.dev@gmail.com

Application owner: Larisa Kozlova