What we collect. What we don't.

VINly is built to need as little of your data as possible. There are no accounts. There is no tracking. Reports stay on your phone. This page explains exactly what happens to a screenshot when you upload it, and what we keep afterward (nothing).

1. What we collect

• Screenshots and listing text you upload, for the duration of a single report-generation request (typically 60–90 seconds). These are processed through several AI vendors — see §3 below for the full list.
• Anonymous in-app usage data — which screens you opened, which sections you tapped, and basic crash/performance diagnostics. Not linked to a user identity.
• Purchase transactions, handled by Apple's App Store. We receive a receipt token to verify entitlement; we never see card data.

2. What we don't collect

• No name, email, phone number, or address.
• No contact list, location, or photos beyond the ones you choose.
• No advertising identifier. No third-party ad pixels (no Meta pixel, no Google Ads tag).
• No session recordings or replays.

3. Where data goes when you generate a report

Every AI call happens server-side, from a Supabase Edge Function we operate. Your phone never holds API keys for any AI vendor — your screenshots leave the device, hit our server, and our server is the one that calls each vendor below on your behalf:

• OpenAI (model gpt-4o-mini), for vision-based extraction of details from your screenshots — what car it is, the price, the mileage, the description text, which photos are present.
• Anthropic Claude (Sonnet 4.6) for the buyer-report analysis — the verdict, red flags, known-issue reasoning, and the message to send the seller.
• DeepSeek as a critic model that double-checks Claude's output before it reaches you.
• NHTSA's public APIs for VIN decode, recalls, and complaints. These calls never include your screenshots — only listing text like VIN, year, make, model.

After the report is returned to your device, your screenshots and listing text are not retained on our servers. The finished report lives in local storage on your phone. We don't have a copy.

4. How long we keep things

• Screenshots / listing text: the duration of one request (~60–90s), then discarded.
• Anonymous usage analytics: 90 days.
• Crash logs: 30 days.
• Apple purchase receipts: as long as needed to honor your entitlement.

5. Deleting your data

Delete the VINly app to delete every report on your device. Because we don't retain screenshots or store reports server-side, there is no server-side account to delete.

To request that any server-side logs referencing your purchase be scrubbed, email support@vinly.dev. We'll respond within one business day.

6. Children's privacy

VINly is rated 4+ but is intended for adults making a vehicle purchase decision. We do not knowingly collect data from children under 13. If you believe a child has used VINly and you'd like us to scrub any related logs, email support@vinly.dev.

7. Changes to this policy

If we change this policy, we'll update the date at the top and post a note in the app's settings screen on next launch.

8. Contact

Questions about privacy? Email support@vinly.dev or use the form at vinly.dev/support.

---

Trademark notice. VINly is not affiliated with, endorsed by, or partnered with Facebook, Marketplace, Meta, Cars.com, AutoTrader, CarGurus, or any other listing platform. We work with screenshots you choose to upload.