Privacy
Privacy & permissions
How CrashPricer handles your data, device permissions, marketplace sharing, and in-app notifications.
Last updated: September 10, 2026
Local cases stay on this device unless you explicitly import or publish them. Images are uploaded only when you choose AI analysis, marketplace or repair-handover sharing, a report attachment, or a repair-shop logo.
1. Controller and contact
CrashPricer is the data controller for the processing described in this notice: it determines why and how information is used in the mobile app, accounts, repair marketplace, and related analysis services. For privacy questions or requests, contact support@crashpricer.com.
2. Account data
To create an account we collect your email address, a securely hashed password, your name, your role (customer or repair shop), and optionally your phone number and profile location. We verify your email by sending a six-digit code that you type into the app, and we process password-reset and security emails; the password-reset email carries a link. Authentication tokens are stored in the device keychain or keystore when secure storage is available, and server-side refresh-token records are stored as hashes. Repair-shop accounts also provide a business profile (business name, NUI, address, city, phone, description, specialties, and an optional logo) that is shown to customers.
3. Cases, photos, and where they are stored
Cases shown in My cases — vehicle make, model, year and trim, city, visible damage selections, estimate, notes, and selected photos — are stored locally on the device and do not automatically sync between devices. Local photos are copied into the app’s private document storage. When you explicitly import local cases, CrashPricer sends the case details to your account but does not upload their photos. When you publish a case, a server-side case and marketplace request are created; photos are uploaded only if you enable photo sharing. A repair shop can also upload optional repair-handover notes and photos for the customer. Removing the app or its data can remove local cases and photos.
4. Repair marketplace
Publishing a case is optional. Vehicle make, model, year, and damage selections are included in the marketplace request. You separately choose whether to share the city, estimate range, notes, and selected photos. Repair shops can use the shared information to send offers containing a price, repair duration, earliest start date, and message. If you accept an offer, contact details are exchanged only between you and that repair shop; a shop does not receive your phone number before acceptance. CrashPricer does not process payment. Signed-in users receive account-linked records in the in-app inbox for relevant offer and request changes. If you allow device notifications, CrashPricer stores an Expo Push token for the current account and sends it to Expo’s notification service to deliver marketplace updates while the app is closed. Live banners can appear while the app is open. Alert preferences are stored on the device and control banners only; they do not remove inbox records.
5. Data sent for estimates and AI analysis
To provide an estimate, the backend receives vehicle make, model, year, city, country, and damage selections. Before your first photo analysis under the current disclosure, you are asked whether selected photos, the app language, and limited vehicle context may be securely sent to OpenAI for visible-damage analysis. Your choice is saved on this device so the same notice does not interrupt every analysis. You can reset that choice from this Privacy screen; after resetting it, the app asks again before another photo upload. If you decline, the photos are not uploaded. If AI vision is unavailable, the backend can use a metadata-only fallback. Analysis input files and results are retained only for the configured job period needed for processing, status retrieval, security, and cleanup. Do not include unnecessary people, documents, plates, addresses, or other sensitive information in photos.
6. Analytics, feedback, and diagnostics
When a case is saved or you submit estimate feedback, the backend records analytics on our servers: a case identifier, vehicle make/model/year, AI-suggested and user-saved damage details, estimated range, rating, optional actual repair price, analysis method, timestamps, and technical request identifiers. Anonymous scan events are kept separate and are not used for price or model calibration. Feedback and actual-price submissions require a signed-in account that owns the saved server case. If you report a user, shop, message, case note, or photo, we process the report reason, optional notes, relevant account and marketplace references, and any evidence photos you choose to attach so we can investigate and enforce the rules. Requests may carry a random installation identifier for rate limiting, and infrastructure may process the IP address. When crash reporting is configured, the app and backend may also send technical error and performance diagnostics; the mobile integration disables default personal-data collection.
7. Device permissions and external maps
Camera access is requested when you choose to take a damage photo. Photo-library access is requested when you choose an existing damage photo or a repair-shop logo. Granting access does not upload your whole library; only images you select or capture are processed for the feature you chose. Location is requested only for nearby-shop features. Coordinates are used to rank results and may be sent to a map or business-search provider when needed. Directions open in an external maps service governed by that provider’s terms. You can deny or revoke camera, photo, and location permissions in device settings.
8. Purposes and legal bases
We process account, case, marketplace, estimate, and service-message data because it is necessary to provide the features you request and perform our agreement with you. We use consent for optional device permissions, push notifications, and optional photo or marketplace sharing; you may withdraw that consent through the app or device settings without affecting earlier lawful processing. We rely on legitimate interests to secure the service, prevent abuse and fraud, diagnose errors, measure quality, and improve pricing and AI accuracy where those interests are not overridden by your rights. We process information when necessary to meet legal obligations or establish, exercise, or defend legal claims. We do not sell personal data or use it for third-party behavioral advertising.
9. Service providers and transfers
Information may be processed by providers supporting hosting and databases, OpenAI analysis, email delivery, Expo push notifications, crash and error reporting, maps, and support, only for the purposes described here and under appropriate data-protection terms. Processing may occur outside Kosovo. Where required, we use contractual, technical, organisational, and legal safeguards for international transfers and require service providers to protect the information consistently with this notice and applicable law.
10. Retention and deletion
Local cases and photos remain until you delete them or remove the app data. Deleting a case in My cases deletes only that device’s local copy; it does not erase a case, import, photo, request, or offer already sent to the server. You can cancel an open marketplace request. Choosing Delete account in Settings permanently removes or anonymises the account, sessions, identity links, server-side cases and photos, requests, offers and public contact details, in-app notifications, account-linked analytics, and locally saved cases and photos. Accepted offers are removed as part of the related request; if a repair shop deletes its account, a request pointing to its accepted offer is cancelled. Limited moderation audit records, such as action type, reason, timestamps, and pseudonymous identifiers, may be retained after account deletion where necessary to protect users, prevent repeated abuse, document enforcement, resolve appeals, or meet legal obligations. Deleted data may also remain in encrypted backups for up to 30 days after deletion, until those backups expire. Removed content itself is not retained in the moderation audit trail.
11. Security and children
We protect data with measures such as password hashing, token-based sessions, private photo storage, and encrypted transport, but no storage or transmission method is completely secure. The app is not directed to children, and we do not knowingly collect children’s personal data. A parent or guardian should contact us if a child submitted personal information.
12. Your rights and request process
Subject to applicable law, you may request access to and a copy of your personal data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent and may ask not to be subject to a decision based only on automated processing that has legal or similarly significant effects; CrashPricer estimates are informational and do not make such decisions. Email support@crashpricer.com with the subject “Privacy request” and describe the account and right involved. We may request only the information needed to verify identity, will respond within the period required by applicable law, and will explain any lawful limitation or refusal. You may complain to the Information and Privacy Agency of Kosovo or seek a judicial remedy. You can also avoid optional fields and sharing, revoke device permissions, delete local cases, cancel open requests, and permanently delete your account in Settings. We will revise the effective date when this notice changes.