Privacy Policy

Pitstop is built so you can keep track of your cars without handing over your identity. There are no accounts, no sign-ups, no email required. We don’t use analytics SDKs, we don’t track you across apps or sites, and we don’t sell anything to advertisers.

“Pitstop” (the “app”) refers to Pitstop - Car Service Tracker, the iOS application and companion web app operated by Uwais Ishaq (“we”, “us”). You can reach us at hello@getrebrief.com.

The app stores the following, only when you provide it:

• Car details you enter: make, model, year, registration, mileage, colour, nickname, mode (Garage/Viewing), and any optional photo you attach.
• Service records you add or import: date, mileage, summary, items performed, parts replaced, cost, garage name, notes, attached document images.
• MOT records you import from screenshots of the UK government MOT check service.
• AI-generated schedules and gap findings: suggested upcoming services and paperwork gaps that the app derives from the records you’ve entered.
• A random device identifier we generate on first launch and store in the iOS Keychain. It is a UUID tied to your device. It is not linked to your name, email, phone number, Apple ID, or advertising identifier.

The app does not collect your location, contacts, calendar, health data, or any advertising identifier.

Your data lives in two places, both keyed only by the random device identifier described above:

• On your device, in the app’s local SwiftData store. This is the primary copy.
• A cloud backup snapshot stored on our MongoDB Atlas database (EU-West). The snapshot exists so your data survives reinstalling the app or moving to a new iPhone. It is overwritten each time you sync.

Because the snapshot is keyed only by your device identifier, anyone who signs in with the same device ID can read it. That is by design — it is how “no sign-in” restore works. If you want to invalidate the backup, use the “Reset device ID” action in Settings and the old snapshot will no longer be reachable from the app.

When you use an AI feature, the app sends the minimum data needed to our backend, which forwards it to OpenAI for processing:

• Parse service document.The image(s) you uploaded are sent to OpenAI’s vision model to extract date, mileage, items, parts, and cost. Images are not retained by us after the response is returned.
• Parse MOT screenshot. Screenshots of the gov.uk MOT page are sent to OpenAI to extract test results, advisories and failures.
• Schedule research.Your car’s make, model, year and fuel type are sent to OpenAI to estimate manufacturer service intervals.
• Gap analysis.For cars in Viewing mode, a summary of the records you’ve added is sent to OpenAI to flag suspicious gaps for a prospective purchase.

We use OpenAI’s API under their Enterprise Privacy policy, which states that API inputs are not used to train their models. Hosting of our backend is provided by Vercel (USA/EU). The database is MongoDB Atlas (EU region).

• No analytics, telemetry, or crash reporting SDKs.
• No advertising or ad identifiers.
• No selling or sharing of data with third parties for marketing.
• No cross-app or cross-site tracking.
• No access to your contacts, calendar, or location.

Local data stays on your device until you delete it or uninstall the app. The cloud backup snapshot is kept until you delete your cars or use “Delete all cloud data” in Settings, which removes the snapshot from our database. If the app sees no sync activity from a device for 24 months, we purge the associated snapshot automatically.

Under UK GDPR you have the right to access, correct, port, and erase your personal data. Because we do not hold any identifying information about you beyond the random device identifier you control, most of these rights are exercised directly in the app:

• Access & portability. All your records are visible in the app and can be exported from Settings.
• Correction. Every record (car, service, MOT) is editable inline.
• Erasure.Delete individual records in the app, or use “Delete all cloud data” in Settings to wipe the server-side snapshot.

If you want help with any of this, email hello@getrebrief.com and include your device ID (shown in Settings). You can also complain to the UK Information Commissioner’s Office at ico.org.uk.

Pitstop is not directed to children under 13 and we do not knowingly collect data from them.

If we change this policy in a way that materially affects how we handle your data, we will update the “Last updated” date at the top and, for significant changes, surface a notice in the app on the next launch.