Privacy Policy
CarEKG by EKG Diagnostics LLC — Effective date: May 4, 2026 — Last Updated: May 26, 2026
Overview
CarEKG is operated by EKG Diagnostics LLC ("we," "our," or "us"), an Oregon limited liability company. This policy explains what data we collect when you use the CarEKG mobile app and website, how we use it, and your rights regarding that data. By using CarEKG, you also agree to our Terms of Service.
1. Data We Collect
Account information
- Email address (required for account creation)
- Password (hashed — never stored in plaintext)
- Subscription tier and billing status
Vehicle information
- Year, make, model, and optional VIN you provide for your vehicles
- Symptom descriptions and OBD-II diagnostic trouble codes (DTCs) you submit
Diagnostic session data
- Free-text symptom descriptions you type
- Audio recordings captured during a session — processed locally on your device and sent to our AI model; raw audio is not stored on our servers
- Photos and video frames captured during a session — sent to our AI model for analysis; raw files are not stored on our servers
- AI-generated diagnosis results (possible causes, repair steps, cost estimates) — stored in your account history
- Feedback you submit after a diagnosis (star rating, outcome, notes)
Location
- Approximate device location — accessed only when you tap “Find shops near me.” Not stored on CarEKG servers.
Usage data
- Number of diagnostic sessions used (for free-tier credit tracking)
- Fix Points balance earned through submitted feedback
- App crash reports and performance logs (anonymized)
2. How We Use Your Data
- Diagnosis generation — vehicle info, symptoms, audio findings, and visual frame data are sent to the Anthropic API to generate your diagnosis. This data is transmitted solely to produce your result and is not used to train AI models (see Section 3).
- Account management — email is used for login, password reset, and subscription communications.
- Service improvement — anonymized diagnostic outcomes and feedback help us improve diagnosis accuracy over time.
- Billing — subscription and payment data is processed by Stripe (see Section 3).
3. Third-Party Services
We share data with the following third parties only as necessary to operate the service:
Symptom text, vehicle context, audio findings, and photo/video frames are sent to Anthropic's Claude API to generate diagnoses. Anthropic's API usage policy states that data submitted via the API is not used to train their models. See Anthropic's Privacy Policy.
Subscription and payment information is handled by Stripe. We do not store your full credit card number. See Stripe's Privacy Policy.
Your account data, vehicle records, and diagnosis history are stored in Supabase (PostgreSQL). Data is stored in the US. See Supabase's Privacy Policy.
When you tap “Find shops near me,” your approximate device location is sent to Google Places API to return nearby repair shops. We do not store your location. See Google's Privacy Policy.
CarEKG displays links to AutoZone, O'Reilly Auto Parts, and Amazon to help you purchase parts identified in your diagnosis. Part recommendations are generated solely by the AI diagnostic engine — affiliate relationships do not influence which parts are shown.
AutoZone and O'Reilly Auto Parts: Links are provided for convenience only. These links contain no affiliate tracking and CarEKG earns no commission from AutoZone or O'Reilly purchases.
Amazon: Amazon is the only parts vendor with which CarEKG has an affiliate relationship. When the Amazon Associates link is active, CarEKG may earn a commission on qualifying purchases at no additional cost to you, and your click is recorded by Amazon Associates for commission attribution. CarEKG does not share personally identifiable information with Amazon. If you prefer not to use affiliate-tracked links, you can search for parts directly on the retailer's website.
Click logging: CarEKG logs which vendor links you tap (vendor name, part name, session ID, timestamp) to measure traffic volume. This data is stored in your account and is not sold or shared with third parties.
We do not sell your personal data to any third party. We do not use your data for advertising purposes.
4. Data Retention
- Diagnosis history is retained for as long as your account is active.
- Audio recordings and video frames are processed in transit and are not persistently stored on CarEKG servers.
- When you delete your account, all personal data is removed from our systems within 30 days, subject to legal or billing retention requirements.
5. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your account and all associated data (GDPR Article 17 / CCPA “right to delete”)
- Portability — request an export of your data in a machine-readable format
- Opt-out of sale — we do not sell personal data, so no opt-out is required
To exercise any of these rights, email us at privacy@carekg.app. We will respond within 30 days.
6. Security
We use industry-standard measures to protect your data: HTTPS in transit, hashed passwords (via Supabase Auth), and row-level security policies on our database. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
Vehicle identification numbers (VINs) are stored in your account and are readable only by you. They are protected by row-level security policies on our database and encryption in transit — they are not shared with third parties.
7. Children
CarEKG is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@carekg.app.
8. Changes to This Policy
We may update this policy periodically. When we do, we will update the effective date at the top of this page. Continued use of CarEKG after changes constitutes acceptance of the updated policy.
9. Contact
Questions about this policy? Contact us at privacy@carekg.app.