Privacy
Last updated 10 October 2026
Draft, pending legal review. Nothing here is final yet.
CarMatter keeps your cars, receipts and documents on your phone. An account is optional: without one, your records are never uploaded to us.
What leaves your phone
Only if you sign in: your records and photos are stored in the EU, with Cloudflare, to back them up, keep your phones in step and share them with the household you join. Clerk handles sign-in and sees your email address.
Anonymous usage events, like “a document was saved”, and crash reports go to PostHog (EU servers). They never include plates, VINs, receipt contents, amounts or photos.
When you look up a VIN or open its recalls, it is sent to the US NHTSA service that answers. Recall watch (Plus) sends only the make, model and year to NHTSA, about once a week.
PDFs and documents you share go only where you send them.
Subscriptions are handled by Apple and RevenueCat. They see an anonymous ID, or your account ID if you sign in, and whether you subscribe.
Only if you use Ask a mechanic: your question, the car’s make, model, year, mileage and fuel type, and its recent services (what was done, when and at what mileage) go through our service to OpenAI, which writes the answer. We don’t keep the conversation.
Only if you share a verified history: anyone with the link sees that car’s services and mileage, and amounts if you include them, never photos, until you stop sharing.
If you signed in: a record you delete is removed from our servers within 6 months, and its photos within 37 days. Deleting your account removes your backup at once, or removes you from a household others still use. Ask a mechanic conversations are never kept.
Deleting your data
Delete a car to remove everything recorded for it, or delete the app to remove what is on this phone. If you signed in, Settings › Back up & sync › Delete account removes your account and its backup. Questions: use the support link on the App Store or Google Play page.
This website
This website sets no advertising or tracking cookies.
The contact form sends us your name, email address, topic and message, with your IP address, through Cloudflare: Cloudflare Turnstile checks that a person is sending it, and Cloudflare’s email routing delivers it to our support inbox. The message is not stored on our servers. It reaches us as an email, which we keep only as long as we need it to help you.
Turnstile is run by Cloudflare under its own privacy policy.
Signing in on the account page uses Clerk, the same sign-in as the app. If you buy Plus here, Paddle.com, our reseller and merchant of record, takes your payment details and address to charge you and handle tax, under its own privacy notice; we never see your card. Paddle shares the order with us: your email address, your country, the plan and its payments, and your CarMatter account’s ID. RevenueCat, which manages Plus for the app, receives the same purchase so that Plus reaches your account.
Contact: support@matterdevelopment.com