Privacy Policy

Effective Date: October 17, 2026

EngineMon ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and retain personal information through our website, mobile application, and connected hardware devices (collectively, the "Service"). Our services are offered exclusively within the United States and are governed by United States law.

1. Information We Collect

We collect personal information from the following sources:

Information you provide directly:

  • Account Information: Email address, password (unless you sign up with Google or Apple), and phone number (optional) when you create an account.
  • Payment Information: Billing and shipping addresses and payment details when you make a purchase. Payment card information is processed by our payment processor and is not stored on our servers.
  • Email Subscriptions: Email addresses voluntarily submitted via notification signup forms.

Information collected automatically:

  • Vehicle Information: Vehicle identification number (VIN), vehicle make, model, year, and related specifications. This information is read automatically from your vehicle by the EngineMon hardware device or entered by you manually.
  • Device and Sensor Data: Automotive diagnostic data collected by your EngineMon hardware device, including engine parameters, fuel system data, electrical system measurements, and performance metrics.
  • Device Information: Hardware device identifiers, network configurations, and device setup data.
  • Usage Data: Device logs, session information, interactions with diagnostic analysis features, and system performance metrics.
  • Technical Data: IP address, browser type, and access timestamps.
  • Location (Optional): Your phone's precise location during your drives (as Section 5 defines them), only if you turn on Location logging in the mobile app, and location columns of log files you upload. See Section 5.

Information from third-party sources:

  • Authentication Providers: If you sign in with Google or Apple, we receive your account identifier, email address, and name from that provider. If you choose to hide your email from Sign in with Apple, Apple shares a private relay address that forwards to you. When your account is deleted, we revoke our access to your Sign in with Apple account.

2. How We Use Your Information

We use collected information to:

  • Provide automotive monitoring services and device management;
  • Analyze vehicle performance and generate diagnostic insights, including through the use of artificial intelligence tools;
  • Save your phone's location with your drives when you turn on Location logging;
  • Process transactions and fulfill orders;
  • Maintain system security and diagnose technical issues;
  • Communicate service updates and important notifications;
  • Improve application functionality and user experience; and
  • Comply with legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share personal information with the following categories of service providers, solely as necessary to operate the Service:

  • Cloud Infrastructure Providers: For hosting, data storage, and backup.
  • Payment Processors: To process transactions. These providers receive your billing information and email address.
  • AI Service Providers: We use third-party AI services to provide our AI features, such as the AI assistant, automatic drive and vehicle health analysis, and username suggestions. We send them the information a feature needs, which may include, for example: vehicle information (such as the VIN, make, model, and the names you give your cars); sensor, diagnostic, and log data; the messages and other content you submit, including anything in them, such as another person's email address; the page you are on, your time zone, and your app settings; usernames of the members of your cars; your account details (such as your email address and phone number) and your orders (including the names and addresses on them) when the assistant looks them up to help you; and, for username suggestions, the part of your email address before the "@". Some of this information identifies you or your vehicle. We never send your password, and we do not store or send payment card numbers. These providers' use of the information is limited by their agreements with us and their own terms and policies. Location data from Location logging and location columns of log files uploaded on or after October 18, 2026 (Section 5) are never sent to AI services.
  • Email Delivery Providers: To send transactional and notification emails.
  • Authentication Providers: If you use third-party sign-in.
  • Content Delivery and Security Providers: For website delivery and protection against attacks.
  • Vehicle Data Services: Vehicle identification information may be queried against third-party databases for vehicle specification lookup.

We may also disclose information if required by law, court order, or governmental request, or to protect the rights, safety, or property of EngineMon or others.

4. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this policy:

  • Account, vehicle, and sensor data: For the duration of your account and a reasonable period thereafter.
  • Location data: 90 days after we receive it, as described in Section 5.
  • Payment and transaction records: As required by applicable tax and financial regulations.
  • Server logs and backups: As long as reasonably necessary for security, debugging, and operational purposes.

You may delete your account at any time in your account settings, or request its deletion without signing in, as described on our account deletion page. An account is deleted thirty (30) days after the request; signing in during that period cancels the deletion.

5. Location Data

Location logging is an optional feature of the mobile app that saves your phone's location with your drives. It is off unless you turn it on. You can download your location data at any time; the app does not show it on a map.

  • What we collect: Your phone's precise position from its satellite positioning (GPS) receiver, with the speed, heading, altitude, and accuracy it reports. Your phone records it only during a drive, at the times described in the next paragraph, and only for the cars you turn Location logging on for. You choose whether the app asks you at each drive or records every drive. When it asks, a drive is recorded only if you accept that drive's notification. When you choose every drive, recording starts on its own at each drive, also with the app closed, which needs your permission to use location all the time. Once a drive's recording starts, it continues with the app in the background or closed until the drive ends or you stop it.
  • When it is recorded: A "drive" here is not only time spent driving. It begins when your EngineMon device connects to your phone or sends it data, and ends once 10 minutes pass in which the device neither sends your phone data nor connects or disconnects. During a drive whose recording you accepted or that started on its own, your phone records its location only while all of these are true: it is connected to an EngineMon device you own over Bluetooth and receiving the device's live data, and the device is reading data from your car's control modules. The device can usually read them whenever the ignition is on, so this includes time your car is parked or idling with the ignition on, and time the ignition is on with the engine off, not only time it is moving. When the device stops reading the car or the connection is lost, recording pauses, and it resumes if both are back before the drive ends. The device usually stops reading the car soon after you turn the ignition off, but some cars' control modules keep responding for several minutes or longer after that, and recording continues while the device reads them. While a recording is paused, the app may keep your phone's location service running at low accuracy so that it can resume, but it records nothing.
  • Uploaded log files: If you upload a log file that contains location columns, those columns are kept the same way as Location logging data, under your account.
  • Who can see it: Only you, the person whose phone recorded it or who uploaded it. Other members of the car, people you share a car or log with, a later owner of the car, and EngineMon staff using our administrative tools cannot see it. It is never sent to our AI assistant or to AI service providers, it is not available to automated agents, to AI tools you connect to your account, or through API keys, and it is not included in a log's downloads or exports. Your own download (below) is the only way to get it.
  • Getting a copy: You can download the location data we keep for you as described in this section at any time with Download my location data in the mobile app's Location logging settings (location columns of log files uploaded earlier are not included; see below). You get one GPX file with your phone's recordings and the location columns of log files you uploaded, one track per drive or uploaded file. Only you can download it, in the app while signed in to your own account. We do not keep a copy of the file. On iOS the app deletes its own copy when you return from saving or sharing it. On Android the copy stays on your phone for up to about an hour, so that the app you shared it with can finish reading it, or until you download your data again, whichever comes first.
  • Security: Location data is encrypted in transit and stored encrypted on our servers. Until your phone uploads it, it stays in the app's private storage, excluded from phone backups and from transfers to a new phone.
  • Retention: We delete location data automatically 90 days after we receive it. Our backups are kept for about 90 days, so location data that was deleted can remain in a backup for up to 100 days after its deletion, until that backup expires.
  • Deleting it: You can delete all of your location data at any time with Delete location data in the mobile app's Location logging settings, which deletes it from our servers and from your phone, or by contacting us (Section 14). Deleting a log deletes its location data, and deleting your account deletes all of your location data. Once you delete a log or all of your location data, a later upload from your phone does not bring it back.
  • Your choices: You can turn Location logging off, or choose differently for each car, at any time in the mobile app's settings. You can also revoke the app's location permission at any time in your phone's settings. We collect location data only with your consent, which you give when you turn Location logging on and can withdraw at any time by turning it off.
  • No sale or advertising: We do not sell location data or use it for advertising. We do not share it with anyone except the infrastructure providers that host it for us (Section 3), or when required by law.
  • Log files uploaded earlier: Log files uploaded before October 18, 2026 keep any location columns with the rest of the log's data (Section 1): the car's members can see them, they are included in log downloads and exports, and our AI features may process them (Section 3). Contact us to have that location removed.
  • Location from your vehicle: The EngineMon device does not read your vehicle's own position, such as the GPS position of its navigation system or head unit. No diagnostic test in the app asks for it, the diagnostic requests we know read it are refused for everyone, our staff included, and none of the vehicle data we decode is a position. Raw diagnostic replies recorded earlier, when a navigation module's GPS test could still be run or the device still read a head unit's position, can include the vehicle's position and are kept with the device's raw diagnostic records for as long as those are kept. The position in them is not decoded or shown in the app, but our staff's raw diagnostic downloads include it.

6. Data Security

We implement commercially reasonable security measures including encryption, secure authentication, and access controls to protect your information. Account passwords are cryptographically hashed and never stored in plaintext. However, no method of transmission over the Internet or electronic storage is entirely secure.

Wi-Fi credentials configured on your EngineMon device are encrypted to the device and are not accessible to us in plaintext. However, anyone with physical access to the device may be able to extract stored credentials. We recommend connecting the device to a guest network.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate information;
  • Request deletion of your personal information;
  • Withdraw consent for data processing at any time by deleting your account or contacting us, though this may limit service functionality.

You may manage device configurations, vehicle information, and email subscription preferences through your account settings. You can download and delete your location data yourself in the mobile app (Section 5). To delete your account, see Section 4. For data access or correction requests, contact us using the information below. We will respond to verifiable requests within 45 days.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
  • Right to Delete: You may request that we delete personal information we collected from you, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at [email protected]. We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf.

In the preceding 12 months, we have collected the categories of personal information described in Section 1. We have not sold personal information. We have shared personal information with the categories of service providers described in Section 3 for the business purposes described in Section 2.

Precise location is sensitive personal information under California law. We use it only to provide Location logging to you, as described in Section 5, and never to infer characteristics about you.

We honor Global Privacy Control (GPC) signals as valid opt-out requests. Because we do not sell or share personal information for cross-context behavioral advertising, honoring a GPC signal does not change your experience, but the signal is processed as required by applicable law. We do not respond to Do Not Track browser signals, as there is no industry-wide standard for compliance.

9. Children's Privacy

Our services are intended for users who are at least 18 years of age. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from someone under 18, we will delete that information promptly.

10. Warrant Canary

As of the effective date of this policy, EngineMon has not received any government requests for user data, including national security letters, gag orders, or warrants. If this status changes, this warrant canary will be removed or updated accordingly.

11. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you in accordance with applicable state law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will provide notice of material changes through reasonable means, such as posting a notice on our website, before the changes take effect. Non-material changes take effect upon posting. The "Effective Date" at the top of this policy indicates when it was last updated.

13. Governing Law and Disputes

This Privacy Policy is governed by the laws of the State of Oklahoma, without regard to conflict of law principles. Any disputes arising from this policy will be resolved in accordance with the Governing Law and Disputes provisions of our Terms of Use.

14. Contact

For privacy-related inquiries or to exercise your rights under this policy: [email protected]