ARWrench ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the ARWrench mobile application and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information
When you create an account through our authentication provider, we collect:
- Email address
- Display name
- Authentication identifiers
Asset and Maintenance Data
Information you provide about your assets and their maintenance:
- Vehicle details (make, model, year, VIN, mileage)
- Equipment specifications and serial numbers
- Appliance details and model information
- Real estate property information
- Service records, maintenance history, costs, and notes
- Reminders and scheduled maintenance tasks
AI Interaction Data
When you use AI-powered features, we collect:
- Chat messages and conversation threads with our AI assistant
- Photos and images uploaded for AI-powered visual analysis
- AI-generated diagnostics, suggestions, and responses
AI Memory
To give better answers over time, our AI assistant keeps short notes from your conversations and photo analyses. For example, it may note details about an asset (engine size, a symptom you described, a repair you mentioned) and about how you work (tools you own, jobs you like to do yourself). After each AI reply, the conversation is sent to our AI provider to pick out these notes, and saved notes are included with later requests so answers fit your situation. Memory is on by default. You can see what the assistant remembers about each asset on that asset's memory screen. You can turn memory off in Settings → Asset Memory; new notes then stop being saved and saved notes stop being used, but they are not erased. To erase them, tap Purge Memory Now, which permanently deletes all saved memory from our servers. An asset's memory is deleted when the asset is permanently deleted, and all memory is deleted when your account is permanently deleted.
Voice Input
On iPhone, speech is converted to text on your device. On Android, your device's speech service converts it and may process the audio on its provider's servers (typically Google) if no offline speech model is installed. We receive only the text you choose to send.
Device and Technical Data
- Device push notification tokens (for sending maintenance reminders)
- Device identifier (used by Firebase Analytics for anonymous session attribution; consent-gated)
- Device type and operating system version
- Crash reports and performance diagnostics
- Product interaction events (which screens you view and which features you use, used to improve the app; consent-gated)
- Usage analytics (collected only with your explicit consent)
Real Estate Asset Information
If you add a real estate asset (home, rental, commercial property), we collect the physical address you provide so the app can label and reference that asset across reminders, service records, and AI conversations. We do not use addresses for advertising, targeting, or any third-party data sharing. The address is stored encrypted at rest alongside your other asset data and is deleted when you delete the asset or your account.
Session Replay (Error Diagnostics)
To diagnose crashes and rare in-app errors, we use Sentry's Session Replay feature. This captures a low-fidelity recording of the screens you viewed in a session where an error occurred. User text inputs and photos are automatically masked before any frame is recorded — we never see what you typed or which images you uploaded, only the app structure around the failure. Session Replay is consent-gated alongside the rest of analytics and captures at most 10% of normal sessions (100% of sessions where an error fires).
2. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the ARWrench service
- Track and manage your assets and maintenance schedules
- Deliver AI-powered diagnostics and maintenance recommendations
- Send push notifications for upcoming maintenance reminders
- Generate service history reports and PDF exports
- Improve app performance and fix bugs via crash monitoring
- Analyze usage patterns to enhance the user experience (consent-gated)
- Suggest relevant replacement parts through our affiliate partners
3. Third-Party Services
We integrate with the following third-party services to deliver our product. Each processes data only as necessary for its stated purpose:
| Service | Purpose | Data Shared |
|---|---|---|
| Convex | Database and real-time sync | All user-entered asset, maintenance, and chat data |
| Clerk | Authentication | Email, name, auth tokens |
| Sentry | Crash monitoring and error tracking | Device info, crash and error reports, and diagnostic breadcrumbs (a short record of recent app actions before an error). In iOS app versions before 1.9, these breadcrumbs could include the first 80 characters of a message you sent to the in-app AI assistant; version 1.9 removes this. |
| Firebase Analytics | Usage analytics (consent-gated) | Anonymized usage events, screen views |
| Firebase Crashlytics | Crash reporting | Device info and crash reports; in the iOS app, also an account identifier used to attribute crashes. Sent regardless of analytics consent. |
| xAI (Grok) | AI chat and diagnostics | Chat messages, uploaded photos, and asset context for AI responses |
| Google Gemini | Vision-based image analysis | Uploaded photos for visual diagnostics |
| Railway | Former AI backend (retired July 2026) | No longer processes requests. iOS app versions before 1.9 may still send AI chat requests to this host, where no service handles them; version 1.9 stops this. |
We do not sell your personal information to any third party. Third-party services process data solely to provide their stated functionality to you.
4. Data Retention
We retain your data as follows:
- Account and asset data: Retained for the lifetime of your account.
- Chat threads stay until you delete the thread or delete your account. Threads you delete are removed from our systems after 30 days.
- AI memory: Kept until you purge it, delete the asset, or delete your account.
- Audit logs: Purged after 90 days.
- Soft-deleted data: Permanently purged by an automated daily cleanup process.
- Uploaded photos: Retained until the associated asset or chat is deleted, or upon account deletion.
5. Your Rights and Choices
Account Deletion
You can delete your account at any time from the Settings screen within the app. Account deletion permanently removes all of your data, including:
- All assets, service records, and reminders
- All chat threads and AI conversation history
- All uploaded photos and files
- Your user profile and authentication credentials
- Push notification tokens
Consent Management
Analytics collection is gated behind your explicit consent and stays off unless you have granted it. The app does not currently include a setting to change this choice; to withdraw analytics consent, email legal@arwrench.com. When analytics consent is not granted, no analytics usage data is collected. Crash and error diagnostics (Sentry and Firebase Crashlytics) are sent regardless of analytics consent, as described in the table above.
GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at legal@arwrench.com.
6. Data Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted via TLS 1.3
- Authentication managed by Clerk with secure token handling
- Web Application Firewall (WAF) protection via Cloudflare
- HSTS preload enabled for all web endpoints
- Server-side audit logging for all data mutations
- Offline data cached securely on-device via SwiftData
While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
7. Children's Privacy
ARWrench is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at legal@arwrench.com.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Effective Date" at the top of this page and, where appropriate, provide in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: legal@arwrench.com