Privacy Policy

Introduction

CarAppraisal ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Services").

By using CarAppraisal, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

When you create an account, we collect:

• Email address
• Name
• Dealership information (if applicable)
• Phone number (optional)

Vehicle Appraisal Data

When you create appraisals, we collect:

• Vehicle identification information (VIN, registration, make, model, year)
• Vehicle condition data (odometer, exterior/interior condition, mechanical notes)
• Photos of vehicles
• Location data (when permitted) to tag appraisals geographically

Photos and Camera Access

Our mobile app requests camera and photo library access to:

• Take photos of vehicles during appraisals
• Select existing photos from your device library
• Upload photos to our secure cloud storage (Vercel Blob CDN)

Biometric Information

If you enable biometric authentication (Face ID, Touch ID, or fingerprint):

• We do not collect or store biometric data
• Biometric authentication is handled entirely by your device's operating system
• We only receive a success/failure response from your device

Usage Data

We automatically collect:

• Device information (model, operating system, app version)
• Log data (IP address, access times, pages viewed)
• App usage statistics (features used, session duration)
• Crash reports and error logs for debugging

How We Use Your Information

We use your information to:

• Provide and maintain the Services
• Authenticate your identity and secure your account
• Store and sync your appraisal data across devices
• Process and display vehicle photos in appraisals
• Enable offline functionality with automatic sync
• Send you notifications about sync status and app updates
• Improve and optimize the Services
• Respond to customer support requests
• Detect and prevent fraud or security issues

Data Storage and Security

Where We Store Data

• Supabase (PostgreSQL): User accounts, appraisal data, settings
• Vercel Blob CDN: Vehicle photos with secure, signed URLs
• Local Device Storage: Offline appraisal data (encrypted on device)

Security Measures

We implement industry-standard security measures:

• HTTPS encryption for all data transmission
• Encrypted storage of sensitive data
• Secure authentication with Supabase
• Optional biometric authentication
• Row-level security (RLS) in database
• Regular security audits

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share your information with:

• Service Providers: Supabase (database), Vercel (hosting, CDN), Resend (email notifications)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, sale, or acquisition

Your Rights and Choices

Access and Control

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your appraisal data
• Opt out of promotional communications

Permissions

You can manage app permissions in your device settings:

• Camera: Required for taking vehicle photos
• Photo Library: Required for selecting photos from library
• Location: Optional, used to tag appraisals geographically
• Biometric: Optional, for secure authentication
• Notifications: Optional, for sync status alerts

Children's Privacy

Our Services are not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

Data Retention

We retain your information:

• For as long as your account is active
• As necessary to provide the Services
• To comply with legal obligations
• To resolve disputes and enforce agreements

You can request deletion of your account and data at any time through the app settings or by contacting support.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date
• Posting the new policy in the app and on our website
• Sending you an email notification (for material changes)

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Compliance

This Privacy Policy complies with:

• Australian Privacy Principles (APPs)
• General Data Protection Regulation (GDPR) for EU users
• California Consumer Privacy Act (CCPA) for California users
• Apple App Store Review Guidelines
• Google Play Developer Policy