Privacy Policy

1. Information We Collect

We collect information to provide a better experience and more accurate car analysis. This includes:

• User Content: Photos you upload for car inspection and expert analysis. These are stored securely to provide you with your inspection history.
• Device Information: Unique Device IDs (UUID), device model, OS version, and language settings to manage your account and subscription without requiring a traditional login.
• Usage Data: We collect information about how you interact with our app (clicks, navigation) via Firebase and PostHog. This includes **Session Replay** (visual recordings) used exclusively for debugging and improving user experience.
• Push Notifications: We collect your Firebase Cloud Messaging (FCM) token to send you analysis results and app updates.

2. AI Technology and Data Processing

Carso uses third-party artificial intelligence services to analyze your car photos. By using the “Analyze” feature, you explicitly consent to the following:

• Service Provider: We use Google Gemini (via Google Cloud Vertex AI) as our AI processing partner.
• Data Shared: When you tap “Analyze”, the photos you selected and the car details you entered (model, year, etc.) are securely transmitted to Google’s servers.
• Purpose: This data is processed solely to generate the car inspection report, condition assessment, and valuation.
• Data Retention: Google processes this data transiently to provide the response. We store the results and your photos in our own secure database (Supabase) to show you your history.

3. Data Storage and Security

Your privacy is our priority. We implement appropriate technical measures to protect your data:

• Secure Cloud: We use **Supabase** (backed by AWS/Google Cloud infrastructure) for secure database and image storage.
• Encryption: All data in transit is protected using SSL/TLS encryption.
• Local Storage: Some data like chat history is stored locally on your device for faster access and offline use.

4. Data Sharing

We do not sell your personal information. We only share data with service providers who help us operate:

• Google Cloud: For AI analysis (Gemini) and infrastructure.
• PostHog & Firebase: For analytics and crash reporting.
• RevenueCat: For managing in-app subscriptions and payments.

5. Your Privacy Rights

In accordance with applicable data protection laws (including GDPR and Moroccan Law No. 09-08), you have the right to access, rectify, and oppose the processing of your personal data. You can:

• Request Access: See what data we have associated with your device.
• Request Deletion: Use the "Delete All Data" feature in the App settings to immediately remove your history and profile.
• Opt-out: Disable analytics tracking via the app settings.

6. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 13, we will delete it promptly.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own (where our cloud providers operate). We ensure that these transfers comply with standard data protection clauses and safeguard your privacy.

8. Contact Us

If you have any questions or concerns about this policy or our data practices, please contact us at:

Email: support@wakil.cc