Privacy Policy

Effective September 23, 2026

Tankful is built so that your car records stay with you. There is no account and no sign-in.

Data stored on your device

Unless you turn on sync, your vehicles, fill-ups, services, reminders, photos and mechanic conversations are stored only on your device, including a daily automatic backup kept for 7 days. We do not have a copy. Backups you export go wherever you choose to save them (for example iCloud Drive or Google Drive).

Optional sync

Sync is off unless you turn it on. When on, your vehicles, log entries, reminders, mechanic conversations and receipt photos are stored on our servers (Vercel and Upstash, in the United States) so your other devices and people you share your sync code with can read and edit them. Sync uses a random code instead of an account; we don’t know who you are. Anyone with the code can access that data, so share it only with people you trust. Stop syncing on a device any time; email us to delete a synced data set entirely.

Community MPG

Off unless you turn it on for a vehicle. When on, we store that vehicle’s average MPG under its EPA model with a random identifier, and show the average of all participating vehicles. Nothing else from your log is shared. MPG ratings and driver data come from fueleconomy.gov (U.S. DOE/EPA).

AI features

When you use Snap to log, the maintenance plan, quote check or the mechanic chat, the app sends what that feature needs to our server: the photo you took, your vehicle details (year, make, model, engine, VIN if entered, odometer), and your service history lines. Our server passes it to Anthropic’s Claude API to produce the answer and returns it to your phone. We do not store the photos, your history or your questions after the response is returned. Anthropic processes this data under its commercial terms and does not use it to train models.

To enforce the monthly AI allowance, the server keeps a random device identifier created by the app and a monthly usage count. It is not linked to your name, email or Apple ID.

Other services

If you use VIN decode, the VIN is sent to the U.S. National Highway Traffic Safety Administration’s public vPIC service. Subscriptions, when offered, are processed by Apple or Google; we receive only whether your subscription is active.

What we don’t do

No advertising, no tracking across apps or websites, no selling or sharing of data, no analytics SDKs.

Children

Tankful is not directed at children under 13.

Deleting your data

Without sync, deleting a vehicle or the app removes your data. With sync on, deletions sync to your other devices; to erase a synced data set from our servers, email us your sync code. Anonymous usage counts expire after 40 days.

Contact

support@santosandhalp.com