Privacy Policy

Brimly (“Brimly”, “we”, “us”) makes a car and fuel tracking app for iPhone and operates the website brimlyauto.com. We built Brimly to be private by design. This Privacy Policy explains what data the app and the website process, why, and the choices you have.

Our privacy principles

• No account. There is no registration or login. You are identified only by an anonymous, random device token.
• Your data stays yours. Your vehicles, fill-ups, expenses and photos live on your device and sync through your own private iCloud — we cannot read them.
• On-device where it matters. Gas-receipt scanning runs entirely on your iPhone; receipt photos never leave the device.
• No ads, no data sales. We do not sell or rent your personal information, and we do not run advertising.

Information we process

Data you create in the app

Vehicle details, odometer readings, fuel and expense entries, reminders, trips and documents you add are stored locally on your device and, if you enable iCloud, in your personal iCloud account under Apple’s terms. This data is not transmitted to or stored on Brimly’s servers. We have no access to your iCloud contents.

AI features (optional)

Some features are powered by AI and require a network connection. When you use the AI assistant, add a car by photo, identify a car, or request an AI trip briefing or diagnostic-code explanation, the relevant input (your question and the specific vehicle context you choose to share, or a photo) is sent through our backend to our AI provider (Google) to generate a response. Photos sent for recognition are downscaled on-device and stripped of EXIF location data before they leave your phone. We do not store the content of these AI requests or the photos on our servers.

Analytics (opt-out)

To understand how the app is used and improve it, we collect anonymized product analytics through Mixpanel. These events are tied only to your random device token and never include your name, VIN, location, photos, AI request content, or text you type. You can turn analytics off completely in the app’s Settings.

Purchases

Purchases and subscriptions are processed by Apple through the App Store. We use Adapty to manage entitlements and validate receipts. We receive purchase and subscription status (not your payment card details, which only Apple handles).

Security & abuse prevention

To protect the AI backend from abuse, we use Apple’s App Attest and keep content-free rate-limit counters and a content-free usage log (counts and timestamps, no personal data). Push notifications, if you enable them, are delivered via Apple’s Push Notification service.

This website

If you request a TestFlight beta invite, the email address you submit is sent to our form provider, Formspree, and used solely to send you a beta invitation and launch updates. You can unsubscribe at any time.

We use privacy-respecting product analytics (Mixpanel) to understand how the website is used — for example, how many people view a page or join the beta. These events are anonymous, carry no personal data (we never send your email address to analytics), and set no advertising cookies. We honour your browser's “Do Not Track” / Global Privacy Control signal: if it is enabled, the site loads no analytics at all.

How we use information

• To provide the app’s features and sync your data through your iCloud.
• To generate AI responses you request.
• To keep the service secure and prevent abuse.
• To measure and improve the product (anonymized analytics you can disable).
• To contact you about the beta if you asked us to.

Third-party services

We share the limited data described above only with providers that help us run the service:

• Apple — iCloud sync, App Store purchases, and push notifications.
• Google — the AI provider that generates responses for AI features.
• Adapty — subscription and entitlement management.
• Mixpanel — anonymized, opt-out analytics.
• Formspree — processing beta-signup emails from this website.

Data retention

Your app data is retained in your device and iCloud until you delete it — deleting a record or removing the app removes it. We do not retain your app content on our servers. Anonymized analytics are retained by Mixpanel per its retention settings. Beta-signup emails are kept until launch or until you unsubscribe.

Your rights and choices

• Access & deletion. Because your data lives in your device and iCloud, you can view, edit or delete it directly in the app at any time.
• Analytics opt-out. Disable analytics in Settings.
• Beta emails. Unsubscribe from any message, or email us to be removed.
• Regional rights. Depending on where you live (e.g. the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or port personal data, and to object to certain processing. Contact us to exercise them.

International users

Brimly is offered in the United States, Europe and other regions. The third-party providers above may process data in the United States and elsewhere. Where required, such transfers rely on appropriate safeguards.

Children

Brimly is not directed to children and is not intended for use by children under the age of 13 (or the minimum age required in your country). We do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy as the app evolves. Material changes will be reflected here with a new “Last updated” date.

Contact

Questions about privacy? Email us at hello@brimlyauto.com.