Privacy Policy

01Who we are

The C.A.R. App ("C.A.R.", "the App", "we", "us", or "our") is a digital vehicle wallet operated under the name Canadian Auto Registry. The App lets you store your vehicle's records, receive reminders and safety-recall alerts, and transfer vehicles securely during private sales.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to your use of the C.A.R. mobile application and this website. We are based in Ontario, Canada, and handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

02Information we collect

We collect only what we need to provide the App's features.

Information you provide

• Account information: your email address, and authentication details when you sign in with Apple, Google, or email and password.
• Profile information: your name, phone number, mailing address, and date of birth, if you choose to add them.
• Vehicle information: details you add about your vehicles, such as VIN, year, make, model, trim, plate, mileage, colour, and whether a vehicle is personally owned, leased, or company-owned.
• Documents: images or files you upload, such as ownership permits, insurance slips, and service invoices.
• Reminders: renewal and service dates you set or that the App extracts from documents you upload.
• Business information: if you sell vehicles under a business, you may optionally add your company name and Registrant Identification Number (RIN).
• Vehicle sale and disposition details: when you record how a vehicle left your possession — for example a private sale, scrap, or write-off — we collect the details you enter for that record. Depending on the type, this can include the sale date and price, odometer reading, the other party's name and contact details, a scrap or tow company's name and address, or an insurer's name. Where you choose to record a private buyer's driver's licence number, we store it as part of that record (see Section 03).

Information collected automatically

• Usage and device data: basic technical information needed to operate and secure the App, such as device type and app version.
• Location: only when you use a location-dependent feature, such as roadside assistance. We do not track your location in the background.

Information from third parties

• Vehicle data services: when you enter a VIN, we query public vehicle databases (such as the U.S. NHTSA vPIC decoder and Transport Canada's recall database) to fill in vehicle details and check for safety recalls. We send the VIN to these services; we do not send your identity.

03Driver's licence scanning

The App offers an optional feature to scan your driver's licence to fill in your profile (such as name and address) more quickly.

Recording a private buyer's licence number

There is one exception. When you sell a vehicle privately to someone who is not a C.A.R. user and choose to record that sale in the App, you may optionally enter the buyer's driver's licence number, in the same way a paper bill of sale often records it. This field is optional. If you enter it, the buyer's licence number is stored as part of that permanent sale record.

04How we use your information

We use your information to:

• Create and maintain your account;
• Store and display your vehicle records, documents, and reminders;
• Send reminders and safety-recall alerts through notifications you have enabled;
• Enable secure vehicle transfers between users;
• Provide customer support;
• Maintain the security and integrity of the App;
• Comply with legal obligations.

We do not sell your personal information. We do not use your documents or vehicle records for advertising.

05Vehicle transfers, dispositions & retained records

When you transfer a vehicle to another user, the vehicle's record and service history move to the buyer's account. To protect your privacy, personal documents you uploaded (such as your insurance slip) are deleted at the moment of transfer and do not carry over to the buyer. Service records carry over intentionally, as they belong to the vehicle's history.

The App also lets you record other ways a vehicle leaves your possession — a private sale to someone who is not a C.A.R. user, sending a vehicle to a scrap or tow company, an insurance write-off, or another outcome. These are called dispositions. When you record one, we store the details you enter for that record (see Section 02).

06When we share information

We share information only in these limited circumstances:

• With another user during a transfer: limited information is shown to the other party so you can verify who you are dealing with — your first name and last initial, whether your email is verified, when you joined, and how many transfers you have completed. Your full name, address, phone number, and documents are not shown.
• With people you share a vehicle with: you can give another C.A.R. user read-only access to a vehicle in your garage (for example, a family member). They can see that vehicle's details, its ownership and insurance documents, and its service history, but cannot edit or transfer it. You control this and can remove their access at any time.
• With service providers: we use trusted providers to operate the App, including Google Firebase (authentication, database, file storage, cloud functions) and Anthropic (AI-assisted reading of documents you upload). These providers process data on our behalf under their own security and privacy obligations.
• For legal reasons: if required by law, regulation, legal process, or to protect the rights, property, or safety of our users or the public.

07Where your data is stored

Your data is stored using Google Firebase infrastructure. Some processing may occur on servers located outside Canada, including in the United States, and may be subject to the laws of those jurisdictions. We take steps to ensure your information is handled securely wherever it is processed.

08How long we keep data

We keep your account and vehicle information for as long as your account is active. When you delete your account, we delete your profile, vehicles, uploaded documents, and reminders, as described below. Transfer records are retained permanently as described in Section 05.

09Your rights & choices

Under Canadian privacy law, you have the right to access the personal information we hold about you, request correction of inaccurate information, withdraw consent and request deletion of your account and associated data (subject to the retained-records exception in Section 05), and ask questions about how your information is handled. Much of this you can do directly in the App; for anything else, contact us below.

10Deleting your account

You can delete your account at any time from within the App, under Settings. When you delete your account, we permanently remove your profile information, your vehicles, your uploaded documents and their files, and your reminders. As noted in Section 05, records of completed vehicle transfers and dispositions are retained. Account deletion is permanent and cannot be undone.

11Security

We use industry-standard safeguards, including encrypted connections and access controls, to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to limit access to it.

12Children

The C.A.R. App is intended for adults who own or manage vehicles. It is not directed to children, and we do not knowingly collect personal information from children under the age of majority in their province of residence.

13Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of the App after changes take effect means you accept the updated policy.

14Contact us