Privacy Policy
Last updated: July 16, 2026
This Privacy Policy explains what personal information Car Czar ("we," "us") collects, how we use it, whether we share it, and how you can request it be deleted. It applies to carczar.app and the Car Czar application.
What information we collect
When you create an account, we collect information depending on how you sign up:
- If you sign up with Google or Facebook: the authentication provider (Google or Facebook), your provider account ID, first and last name, email address, email verification status, profile picture URL, and locale — whatever that provider makes available to us for sign-in.
- If you sign up with email and password: your first and last name, email address, and password. Your password is stored and hashed by our authentication provider (Supabase Auth) — we never see or store it in plain text.
- For every account, regardless of sign-up method: your ZIP code and locale, used to tailor recommendations to your region.
Once you're using Car Czar, we also collect the information you give us to run the service:
- Vehicle details you enter (year, make, model, trim, VIN, license plate, mileage, and any label or notes you add).
- Service and repair records you log (service type, date, mileage, shop name, cost, notes, and receipt files).
- Maintenance reminders you set or that we generate for your vehicles.
- Messages you send us through our Contact Us form (name, email, and message content).
We also use privacy-respecting, self-hosted analytics (Umami) to understand aggregate site usage. Umami does not use cross-site cookies and does not sell or share data with third-party advertisers.
How we use your information
- To create and secure your account, and to authenticate you when you log in.
- To operate the core service: tracking your vehicles' maintenance and repair history, sending reminders, and surfacing relevant, timely recommendations for your specific vehicle.
- To personalize recommendations using your locale and ZIP code (e.g., regional pricing or service availability).
- To send you account-related email, such as a welcome email, email verification, and password reset instructions.
- To respond to messages you send us through the Contact Us form.
- To improve and operate the app, including through the use of AI in how we build and run the product.
We do not use your personal information to serve you third-party advertising, and we do not sell your personal information.
Whether we share your information
We share personal information only in these limited circumstances:
- Service providers who run our infrastructure: Supabase (our database and authentication provider) processes and stores your data on our behalf, under its own data processing terms.
- Sign-in providers: if you use Google or Facebook to sign in, those providers process your authentication according to their own privacy policies.
- Affiliate links: Car Czar is free to use and is funded through affiliate links to relevant products and services (not general advertising). If you click an affiliate link, the third-party site's own privacy policy governs any information you provide there — we don't hand over your Car Czar account data as part of that.
- Legal reasons: if required to comply with a law, regulation, or valid legal process.
We do not sell your personal information to data brokers or advertisers.
How to request deletion of your data
To request deletion of your account and associated data (profile, vehicles, service records, and reminders), email us at privacy@carczar.app from the email address associated with your account. We'll confirm your identity and complete the deletion, except for information we're required to retain for legal, security, or fraud-prevention purposes.
How to contact us
Questions about this policy or how your information is handled? Email us at privacy@carczar.app, or use our Contact Us form.
Changes to this policy
We may update this policy as Car Czar's features change. We'll update the "Last updated" date above when we do.