Privacy Policy

• We collect what a shop needs to quote your repair: your name and email, your vehicle's details, what is wrong with it, and your ZIP code.
• We do not process payments and never see your card. You pay your shop directly.
• Your precise location never leaves your device. The app requests reduced accuracy and we store only a ZIP code.
• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• You can delete your account from inside the app at any time.

Account

Your display name and email address. If you sign in with Apple or Google, we receive the identity token from that provider — we never see your password for it.

Vehicle

Year, make, model, trim, color, mileage, fuel type, an optional nickname, and — if you choose to enter them — the VIN and license plate. VIN and plate are optional. They exist so a shop can quote the right part the first time.

Repair requests

The issue title and description you write, how urgent it is, whether the vehicle is drivable, your ZIP code, and any photos you attach. Photos are optional.

Messages

Messages you exchange with a shop through the app, so both sides have a record of what was agreed.

Device and usage

If you enable notifications, a push token for your device. We also record timestamps for things like when you accepted these terms and when you completed onboarding.

What we do not collect

We do not ask for or store a phone number, a street address, payment card details, or your precise GPS coordinates. We do not track you across other apps or websites.

The app asks for location so it can show you nearby shops. It requests reduced accuracy from iOS, which gives an approximate area rather than a precise point, and that value is used on your device to draw the map. What we store on our servers is a ZIP code — the one you enter or confirm. You can decline the location prompt and use the app by typing a ZIP code instead.

Repair shops

When you submit a request, the shops it is sent to can see the vehicle details, the issue description, any photos you attached, your ZIP code, and your display name. They see your email address only if you contact them or accept a quote. Shops are independent businesses, not Re-Paired employees, and their own handling of your information is governed by their practices.

Service providers

• Supabase — database, authentication, and file storage (United States).
• Vercel — website and API hosting.
• Resend — sends our transactional email.
• Apple — Sign in with Apple, and push notification delivery if you enable it.
• Google — only if you choose Google to sign in.
• NHTSA vPIC— if you enter a VIN, we send that VIN to the U.S. National Highway Traffic Safety Administration's public vehicle database to decode it. Nothing identifying you is sent with it.

Nobody else

We do not sell personal information. We do not share it for cross-context behavioral advertising. We have no advertising or analytics trackers in the app or on this site. We will disclose information if the law requires it, and we will tell you unless we are prohibited from doing so.

Data is encrypted in transit and at rest. Every table carries row-level security, so a request for your data that is not authenticated as you is rejected by the database itself rather than by application code. Access to production data is limited to people who need it to operate the service.

No system is perfectly secure. If we ever discover a breach affecting your information, we will notify you as required by California law.

We keep your account information while your account is open. When you delete your account, we anonymize your profile — your display name and email address are removed, your vehicles are removed from your account, and any open requests are cancelled.

To be precise about what survives, because “deleted” is a word worth being exact about: a deactivated vehicle record is retained alongside the repair history it belongs to, and that record can still contain the VIN or license plate you entered. We keep it so a shop that worked on your car retains an accurate record of the job. We also retain a non-identifying authentication record and a log of administrative actions, so we can investigate abuse and meet our record-keeping obligations. Messages and quotes already exchanged with a shop remain in that shop's record of the job.

If you want the VIN and license plate erased outright rather than deactivated, email us and we will do it.

You can change your name, email, and notification preferences in the app, add or remove vehicles at any time, and delete your account from Profile → Edit Profile → Delete Account.

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what we collect and why, to get a copy of it, to correct it, to delete it, and to not be discriminated against for exercising those rights. Because we do not sell or share personal information, there is nothing to opt out of — but you can still exercise the other rights by emailing us. We will verify your request against the email on your account.

Email baraka@re-pairedauto.com and we will respond within 45 days.

Re-Paired is not directed to children and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

If we change this policy in a way that materially affects you, we will update the date at the top and notify you in the app or by email before the change takes effect.

Questions about this policy, or about your information: baraka@re-pairedauto.com.