Privacy in plain shop language

Effective July 16, 2026

Device storage

Imported CSV logs, vehicle profiles, modified build sheets, tuning notes, assistant conversation history, your last open workspace, selected graph channels, and layout preferences are stored locally in your browser, installed web app, or native mobile app when available. Clearing site data, clearing app data, or removing the native app may delete them.

Blueprint account

A Blueprint profile is required for the interactive diagnostic and tuning tools; public information, safety guides, policies, and search pages remain available without an account. Supabase Auth processes account email addresses, encrypted password credentials, email verification, password resets, and login sessions. Blueprint Diagnostics receives the verified account id, email address, and profile name but does not receive or store the plain-text password. Saved vehicles, VINs, build sheets, notes, repair history, tune changes, cases, evidence photos, and CSV logs are associated with the verified account. The server checks account ownership before reading, adding, changing, downloading, or deleting private records.

Verified Fix Intelligence

Detailed verified-fix records are saved on the device and, when you are signed in, privately with your account and VIN. Anonymous community sharing is separate, optional, and off until you select it. A shared pattern contains only the year, make, model, engine description, trouble code, broad repair category, mileage band, modified/stock status, and evidence score. It does not include the VIN, symptom description, proven-cause notes, repair notes, parts notes, name, or account email.

VIN and public lookups

A decoded VIN is sent to the U.S. NHTSA vPIC service. Year, make, and model may be sent to NHTSA public safety services. Blueprint Diagnostics does not request owner name, registration, address, title, insurance, or location history.

Mechanic AI

The built-in evidence engine runs in the app. If secure cloud AI is activated, the question and the vehicle, case, build-sheet, or log context shown in the chat are sent through the Blueprint Diagnostics server to OpenAI. API credentials remain server-side. Do not enter unnecessary personal information.

Simple Mode, build sheets, and evidence quality

Your Simple/Pro workspace preference, stock-or-modified confirmation, guided test results, and evidence-quality inputs are stored on your device unless a feature clearly offers account saving or sharing. Build-sheet text is used to adapt requested tests and data channels. The evidence-quality score measures how complete the recorded context is; it does not determine whether the vehicle is safe, healthy, or repaired.

Camera and files

Camera access is requested only when VIN scanning or photo capture opens. Live camera video is not intentionally recorded. Imported tuning logs are analyzed in the app, cached locally when supported, and privately stored with the signed-in account so they can be restored on another supported device. Diagnostic-case evidence photos are stored privately with the account. If you choose a scan-report photo or PDF for text extraction, it may be sent through the Blueprint Diagnostics server to OpenAI and is not intentionally retained unless the interface clearly says it will be saved. Remove customer names, addresses, phone numbers, and unrelated personal information before uploading.

Native mobile app and reminders

The iPhone and Android app stores saved vehicle profiles, recent mechanic-chat messages, and maintenance reminder details in the app storage on that device. A local maintenance notification is scheduled only after you choose a vehicle, enter a reminder, and allow notifications. The reminder can be removed inside the app or through the phone's notification settings. The native app connects to blueprintsdiagnostics.com over an encrypted connection for Mechanic AI and opens the public website for optional Cloud Garage, support, and policy pages.

Voice-assisted testing

Hands-free test commands use the speech feature supplied by the browser or operating system. Blueprint Diagnostics does not intentionally record, store, or add microphone audio to a diagnostic report. The recognized command may be used on the device to advance a step, create a bookmark, or stop a capture. You can deny microphone access and use the large manual controls instead.

Black-box event clips and repair proof

Rolling event clips and before/after repair snapshots are stored on the device by default. A downloaded event or repair-proof file includes the active VIN and selected measurements because you explicitly requested the local export. Before/after summaries are sent to the server only when you choose to create an unlisted diagnostic report; the server removes the VIN and raw sample rows from that shared payload.

Unlisted diagnostic report links

Creating a report link is optional. The server stores a random link token, an expiration date, the vehicle description, selected code/title, and sanitized evidence such as channel summaries, event bookmarks, readiness status, freeze-frame values, explicitly decoded Mode $06 rows, and a completed before/after repair comparison. Blueprint removes the VIN, build sheet, customer details, raw CSV or event rows, account identity, and adapter identifiers from that report payload. Anyone with the random link can view it until it expires or is revoked, so treat the link as unlisted—not as an authenticated medical- or banking-style vault.

Adapter compatibility reports

Optional compatibility reporting stores the adapter brand/model entered, device platform, connection type, result, and a random one-way contributor key so one device cannot repeatedly inflate the same combination. It does not include a VIN, location, account email, vehicle data, or scan contents. Public badges require multiple independent successful reports and remain community evidence, not a manufacturer endorsement.

Privacy-friendly usage counts

The site keeps daily totals for a small set of actions such as opening the site, starting a VIN scan, importing a tuning log or full-system scan, tapping install, or beginning an AI question. To estimate daily unique devices, the app creates a random identifier on the device and turns it into a different one-way code each day. The server stores only that daily code. It does not store analytics cookies, the VIN, question, file contents, advertising identifiers, or a permanent cross-day visitor profile. Global Privacy Control is honored.

Technical data and choices

Supabase provides account authentication, and hosting and security providers may process normal request data needed to deliver and protect the service. Blueprint Diagnostics does not sell vehicle or personal information. You can deny camera or microphone access, avoid optional cloud AI, avoid anonymous fix or adapter sharing, let unlisted reports expire, delete private vehicle and verified-fix records, delete saved logs and notes, sign out, and clear device site data.