Mechy Privacy Policy

This Privacy Policy explains how Pistons LLC (“Pistons,” “we,” “us,” or “our”), the maker of the Mechy mobile application (the “App”), collects, uses, shares, and protects information when you use Mechy. Mechy connects vehicle owners with independent mechanics and repair shops, and includes features such as vehicle diagnostics, an OBD-II Bluetooth scanner integration, an AI-assisted diagnostic tool, in-app messaging, and payment processing for booked services.

By using Mechy, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Account and Identity Information

• Name, email address, phone number, and password (or sign-in token if you use Google Sign-In or Sign in with Apple)
• Home and/or service address
• Driver's license information (name, date of birth, address, and license number) when you scan your license to speed up account setup. This data is read directly from your license's barcode on your device; the photo/scan itself is not required to be retained by us beyond completing the scan, and the extracted fields are transmitted securely to our servers to populate your profile
• Biometric authentication (Face ID / fingerprint), if you enable it, is processed entirely on your device through your device's operating system. We never receive or store your biometric data

1.2 Vehicle and Diagnostic Information

• Vehicle details (make, model, year, VIN, license plate, registration information) that you enter or scan
• Diagnostic trouble codes (DTCs) and other vehicle data read from your vehicle's OBD-II port via a Bluetooth-connected scanner, if you choose to connect one
• Symptom descriptions you type when requesting a repair or using the AI Diagnostic feature

1.3 AI Diagnostic Feature

Mechy includes an optional “AI Diagnosis” tool. When you use it, the symptoms you describe, your vehicle's year/make/model, and any diagnostic trouble codes you provide are sent to our servers and processed using Anthropic's Claude AI models to generate a possible diagnosis, severity assessment, and suggested next steps. This output is AI-generated, may be inaccurate or incomplete, and is provided for informational purposes only — it is not a substitute for inspection by a licensed mechanic. We do not use your other personal information (payment details, driver's license data, etc.) as part of this AI processing.

1.4 Payment Information

When you pay for a service through the App, your payment card details are collected and processed directly by our payment processor, Stripe, Inc. Mechy does not receive or store your full card number. We may retain limited transaction metadata (amount, date, service booked, last four digits of your card) to maintain your service history.

1.5 Photos

If you choose to attach photos of a vehicle issue, a document (e.g., vehicle registration), or a profile picture, we collect the images you select or capture through your camera or photo library.

1.6 Messages

If you message a mechanic or our support team through the in-app chat, we collect and store the content of those messages so the conversation can be delivered and displayed to both parties.

1.7 Location Information

With your permission, we collect your device's precise (GPS) or approximate location to:

• Show you nearby mechanics and service providers
• Set and confirm the location where a service should be performed
• Improve and troubleshoot the App

You can disable location access at any time in your device settings; doing so may limit features like “find nearby mechanics.”

1.8 Device, Usage, and Diagnostic Data

• Device identifiers, operating system, app version, and general device information
• Advertising identifier (Android Advertising ID), used for analytics and measurement — not for third-party advertising, as Mechy does not display ads
• App usage data (screens visited, features used, session length) collected via Firebase Analytics
• Crash reports and performance diagnostics collected via Firebase Crashlytics
• Push notification tokens, used to deliver booking and service updates

2. How We Use Your Information

• To create and manage your account and vehicle profiles
• To connect you with mechanics and facilitate service bookings, quotes, and scheduling
• To process payments for services booked through the App
• To provide the OBD-II diagnostic and AI Diagnostic features
• To send you service updates, receipts, and (with your consent) promotional communications
• To operate, maintain, secure, and improve the App, including through analytics and crash reporting
• To comply with legal obligations and enforce our Terms of Use

3. Third-Party Service Providers

We work with the following categories of third-party service providers, who process data on our behalf or independently under their own privacy policies:

Each of these providers has its own privacy policy governing how they handle data:

• Google Privacy Policy
• Stripe Privacy Policy
• Anthropic Privacy Policy

4. How We Share Information

We do not sell your personal information. We share information only:

• With the mechanic or shop you book, to the extent necessary to complete your service request (e.g., your name, vehicle details, service address, and messages)
• With the service providers listed in Section 3, to operate the App
• As required by law, subpoena, or legal process
• To protect the rights, property, or safety of Pistons LLC, our users, or the public
• In connection with a merger, acquisition, or sale of assets, subject to this policy or a successor policy

5. Data Retention and Deletion

We retain your account and service data for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, or fraud-prevention obligations.

You may request deletion of your account and associated personal data at any time by emailing support@carfix24.com with the subject line “Delete My Account.” We will verify your identity and complete deletion within 30 days, except for information we are required to retain by law (e.g., payment records for tax purposes). See our full account deletion instructions for details on what gets deleted.

6. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to opt out of certain data uses (for example, under the California Consumer Privacy Act (CCPA/CPRA) or the EU/UK General Data Protection Regulation (GDPR)). To exercise these rights, contact us at support@carfix24.com. We do not sell personal information as defined by the CCPA.

7. Children's Privacy

Mechy is not directed to children under 13 (or under 16 in the EU/UK), and we do not knowingly collect personal information from children in these age groups. Because Mechy requires a valid payment method and, in most cases, a driver's license to book vehicle repair services, the App is intended for users who are at least 18 years old. If we learn that we have collected personal information from a child without appropriate consent, we will delete it promptly. Contact us at support@carfix24.com if you believe we have inadvertently collected such information.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and access controls on our systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Mechy is operated from the United States. If you access the App from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

Questions about this Privacy Policy or our data practices can be sent to:

Pistons LLC
Email: support@carfix24.com
Website: https://carfix24.com