Privacy Policy

1.The short version

• Your car's data stays with you. VINs, fault codes, live data, and coding values/backups are stored locally on your iPhone or Mac. We never receive, transmit, or store them.
• No account. You don't sign in or give us your name to use the App.
• No analytics, no tracking. The App contains no advertising or analytics SDKs. Besides the local Bluetooth or WiFi link to your OBD2 adapter, it connects only to Apple (for purchases and to confirm the App is a genuine copy) and to our own key server, which unlocks the App's built in reference data and, if you code a module, supplies that module's key. Those requests carry your App Store receipt, so we can confirm the App is a genuine, licensed copy, and when you code a module they also carry that module's model line and the one time challenge value it returns. They never carry your VIN, your fault codes, your live data, or your coding backups.
• Optional on device diagnostics. You can turn on crash/diagnostic logging to help you troubleshoot. It's off by default, stays on your device, and you can export or delete it anytime.
• We don't sell your personal information.

2.Your vehicle data stays on your device

When you connect through a Bluetooth (or WiFi) OBD2 adapter, the App communicates directly between your iPhone and your car. VINs, diagnostic trouble codes, live sensor values, control unit (coding) values, and the automatic backups the App creates before a coding change are all stored locally on your device, in the app's private storage (excluded from iCloud backup). We do not receive, transmit, or store this information. Deleting the App removes this on device data, except a small licensing record (which vehicles you have used a paid feature with) that the device Keychain keeps so your purchases keep working if you reinstall; it holds no fault codes, live data, or coding values.

3.Optional on device diagnostics

To help you troubleshoot, the App includes an optional diagnostics feature that can keep technical logs (and, separately, crash/hang reports) about the App's own operation. This feature is:

• Off by default and opt in. It only runs if you turn it on after a clear consent prompt, and turning it off stops collection immediately;
• Stored only on your device. These logs stay in the App's private storage. Nothing sends them automatically, and we have no way to reach them;
• VIN redacted. Your VIN is removed from anything stored, unless you deliberately include it in an export;
• Fully under your control. You can view, export, and permanently delete this data at any time from within the App.

You can also send us a log yourself at any time: the App has an "Email log to FlatDiag" button, and Settings can share a log through the usual iOS or macOS share sheet. You see the contents before either one goes.

Sending diagnostics to us during the beta

If you turn on Send logs to FlatDiag, the App sends that diagnostic report to us automatically when you disconnect from the car. This is off until you switch it on, and you can switch it off again at any time in Settings.

We ask for this because FlatDiag is developed against a single car. Every other model is built from the factory diagnostic data and tested against a simulator, so the first time the App meets your car is on your driveway. Seeing how it actually behaved there is what lets us fix it for your model.

What we receive is the App talking to the car: which control units answered, how long things took, the raw request and response bytes, and any crash or hang report. Your VIN is removed before any of it is written down, and security unlock exchanges are left out entirely, so a report tells us what happened without telling us whose car it was. We keep these reports for 30 days and then they delete themselves.

4.Information you provide

If you join our waitlist or email us (for example, at nick@flatdiag.com), we receive the email address and any message you send. We use it only to respond and, if you asked for them, to send you FlatDiag updates. You can ask us to delete it anytime.

5.Website & purchases

Website

The Site is hosted on Cloudflare. As with most websites, our hosting provider automatically logs basic technical data (such as IP address, browser type, and pages requested) for security, abuse prevention, and performance. We do not run advertising or analytics trackers on the Site. Fonts are served from our own domain, so loading a page does not call out to any third party.

Purchases

The App is a free download. Its paid features are unlocked by one time in app purchases, and there is no subscription. Apple processes all payments. We never receive your payment card or billing details. Apple may provide us with limited, aggregated sales and download statistics.

6.How we use information

• To operate, maintain, and improve the App and Site;
• To respond to your inquiries and provide support, using only what you choose to send us (such as an email or a diagnostics file you export);
• To send you updates you have requested, which you can opt out of at any time;
• To protect against security issues, abuse, or fraud, and to comply with legal obligations.

7.How we share information

We do not sell your personal information. Your vehicle data never reaches us, so there is none of it to share. For the limited data described above, we share only:

• Service providers. Cloudflare hosts both our website and our key server, so it processes the technical data described above and the receipt check the App makes. If you contact us or join the waitlist, our email provider (Google Workspace) processes that message on our behalf.
• Apple. In connection with App Store distribution and purchases, as described above.
• Legal & safety. When required by law, or to protect the rights, safety, or property of FlatDiag, our users, or others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

8.Affiliate links & third parties

The Site and App may contain links to third party products and websites, including affiliate links to OBD2 adapters (such as the OBDLink CX). If you click an affiliate link and make a purchase, we may earn a commission at no additional cost to you. Those third party sites and merchants have their own privacy policies, and we are not responsible for their practices. See our Disclaimers & Disclosures.

9.Data retention

On device vehicle data and diagnostic logs remain on your device until you delete them or uninstall the App. We never receive them unless you send us a log yourself, in which case we keep that email like any other. The key server keeps the App Store transaction identifier from a receipt check in a short lived counter, used only to rate limit abuse; it expires by itself in about an hour. Waitlist and contact emails are kept until you ask us to remove them or they are no longer needed for the purpose you contacted us about.

10.Security

Because your data stays on your device, its security depends largely on the security of your iPhone (passcode, Face ID/Touch ID, OS updates). We take reasonable measures to protect the limited information we do handle (such as contact emails). No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

11.Your privacy rights

Depending on where you live, you may have rights over your personal information, including to access, correct, delete, or port it, and to opt out of certain processing. This includes residents of the EU/UK (GDPR), California (CCPA/CPRA), Colorado (CPA), and other US states with comprehensive privacy laws.

• Most data lives on your device, so you can view, export, and delete it directly in the App, or remove everything by uninstalling.
• For waitlist/contact emails, email nick@flatdiag.com and we will honor applicable requests.
• We will not discriminate against you for exercising your rights. We do not "sell" or "share" personal information for cross context behavioral advertising.

12.Children

FlatDiag is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

13.International users

FlatDiag is operated from the United States. Your vehicle data stays on your device, so none of it crosses a border. The receipt check the App makes runs on Cloudflare's global network and is normally answered close to you. If you contact us or join the waitlist from outside the US, the limited information you send (such as your email) may be processed in the US, which may have different data protection laws than your country. Where required, we rely on appropriate safeguards for such processing.

Our key server does not answer requests from a small number of countries and regions that we are not permitted to serve. If you are in one of them, the App will tell you it is unavailable in your region and its built in reference data will not unlock.

14.Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes (for example, if we ever add a feature that sends data off your device), provide a more prominent notice. Your continued use of FlatDiag after changes take effect means you accept the update.

15.Contact us

Questions about this policy or your data? Email nick@flatdiag.com.