Privacy Policy
Last updated: September 22, 2026
This policy explains what data Autofy collects, why, and who it is shared with. Autofy is published by an individual developer; for any question, write to karim.halli@icloud.com.
Data we collect
- Account: email address and password (encrypted) when you create an account.
- Profile: username, bio, profile and cover photo, social links you choose to display.
- Vehicles: make, model, year, mileage, maintenance history you enter, with the receipt photo you choose to attach.
- Glovebox: registration, license, inspection certificate you choose to store there. Protected by Face ID and kept in a private space only you can access.
- Community content: reviews, SOS Breakdown questions and answers, follows, if you use those features.
- Usage statistics: the screens you open and key actions (adding a car, a maintenance entry…), plus session recordings in which text fields and images are masked. They are used only to understand where the app is hard to use, so we can improve it. They are tied to a technical identifier, never to your email or name, and are never used for advertising or cross-app tracking. You can turn them off at any time: Settings → Privacy → Share usage statistics.
Who we share data with
- Supabase (hosting, database, authentication, document storage): the infrastructure Autofy runs on, hosted in Europe.
- RevenueCat (Autofy + subscription management): receives the information needed to verify your subscription status, never your payment details.
- Apple (App Store): processes subscription payments and may provide purchase information to RevenueCat for verification.
- PostHog (usage statistics): receives the statistics described above, hosted in Europe (Frankfurt).
Autofy does not use any artificial intelligence: the photos you attach (invoice, expense ticket) remain plain attachments, never analyzed or sent to a third party for processing. We do not sell any personal data.
Security
Every table in our database enforces strict access rules (Row Level Security): you can only see your own private data. The glovebox is protected by Face ID and temporary, 5-minute access links.
Your rights
You can delete your account and all your data directly from the app (Profile → Settings → Delete my account). You can also write to us at karim.halli@icloud.com to access, correct, or delete your data.
Children
Autofy is not directed at children under 16.
Changes
If this policy changes, the updated date at the top of this page will be revised.