Privacy Policy

This policy describes what Southmoor Digital LLC collects through the Tappet app and website, why, who else is involved, and how to get rid of it.

Tappet™ is a trademark of Southmoor Digital LLC.

What we collect

Your account. An email address and a password. The password is held by our authentication provider and is never visible to us. A display name is optional, free text, and never required — Tappet does not ask for your legal name.

Your vehicles. Year, make, model, trim, mileage, and — if you provide it — the VIN. On the website you can also type a ZIP code, which is used to fill in a quote request; the app has no ZIP field. Neither reads your location from your device; there is no location permission because nothing asks for one.

What you upload. Vehicle photographs and images of service invoices, plus the text extracted from those invoices. This is worth stating plainly rather than calling it “photos”: a repair invoice routinely carries your name, the shop’s name and address, and sometimes the VIN. All of it is stored.

What you write. Conversations with the advisor, items on Needs, and notes on service records.

Notifications. If you allow them, a push token and a random identifier generated by the app on first install. That identifier is not a hardware ID, is not shared with anyone, cannot be matched to you in any other app, and disappears when you delete the app.

Use of the AI features. One record per request — what it was for, which model answered, and how many tokens it used. These exist to enforce a spending limit on each account. They are not product analytics, and there is no analytics service in this product.

Crash reports. If the app fails unexpectedly, it sends our own server a short report — the error message, where in the app it happened, the app version and part of the technical trace — with your account’s internal identifier if you are signed in. It is written to our server’s log and to no one else.

Before you have an account. The public website records anonymous visit and scan events against a random browser identifier so we can tell whether the site works. There is no account attached, because there is not one yet.

The quote check. If you use the “Is this repair quote fair?” page, the photo or text of your estimate is sent to Google’s Gemini model to read it — and an estimate can carry your name, address, plate or VIN. We do not keep the photo. We keep the answer (the job, the car and the prices) against that random browser identifier, so it can be added to an account you create; answers nobody claims are deleted once they are more than 30 days old.

What we do not collect

No advertising identifier. No third-party analytics, attribution or crash-reporting service. No contacts, browsing history, or search history. No health data. No payment details of any kind — if you subscribe, Apple handles the payment and your card never reaches us. We do not track you across other companies’ apps or websites, and we do not sell or share your information with data brokers.

Who else sees it

Tappet is built on services that necessarily process your data to work:

• Supabase — database, file storage, and account authentication. Everything described above is stored here.
• Netlify — hosting for the website and the app’s backend.
• Google — Tappet’s AI features use Google’s Gemini models: the health score, the advisor, reading invoices, quote requests on the website, the quote check, the research and pictures for your model, and performance figures for a modified car. For the health score and the advisor, Google receives your car’s records — its mileage, service history, invoice line items and the shops named on them — and your question; the advisor also receives what you wrote about how you use the car and what you want out of it. For invoice reading and the quote check it receives the photograph itself, or the text you paste, which can show your name and address as well as the shop’s; a document you attach to an advisor question on the website goes too. A quote request sends the work listed, the mileage, the ZIP code you typed and any note you add. Performance figures send the line items of your car’s service history, to find the modifications among them. The research and the pictures use only the year, make and model; guidance on a modification also sends the performance goal you chose for the car.
• Apple — handles billing if you subscribe, and delivers push notifications to your iPhone.
• Expo — the push service the app is built on. If you allow notifications, your device’s push token and each notification’s text — the car’s name and, for a recall, its summary — pass through Expo on their way to Apple.
• NHTSA — the US National Highway Traffic Safety Administration’s public API. If you provide a VIN, it is sent to NHTSA to decode what the car actually is. Recall checks send the make, model and year only.

Deleting your account

We keep your vehicles, invoices, conversations and records for as long as your account exists, and delete them when you delete it. Nothing is kept on a timer while the account is open, and nothing is kept after it closes except the records described below.

You can delete your account from inside the app or the website, without asking anyone. It is immediate rather than scheduled.

Deletion removes your uploaded files first, then your account and every record attached to it — vehicles, invoices, conversations, Needs, notifications and usage records. What survives is a line in our own operational log recording that an account was deleted, its internal account identifier, how many vehicles it held, and how many files were removed. It carries no name, email, vehicle or file, and exists so we can tell that deletion is working; if a step fails, the error line carries the same identifier.

Operational logs. Our server keeps a running log of what it does — a request that failed, a crash report, a deletion, a phone registering for alerts or taking over another account’s registration on the same phone — so we can find and fix problems. A line may carry your account’s internal identifier, or a vehicle’s identifier or its year, make and model, beside the event it records; we do not write your name or email to it. The log is held by our host, Netlify, and is not removed when you delete your account.

If you had an App Store subscription, we also keep Apple’s transaction identifier for it, with the plan and its expiry date, so that a renewal or refund Apple tells us about after the account is gone can still be matched. It carries no name, email, device or vehicle.

Deleting your account does not cancel an App Store subscription. Only you can do that, through Apple — see the Terms.

Children

Tappet is not directed at children under 13 and we do not knowingly collect information from them.

Changes

If this policy changes in substance, the date at the top changes with it. That date does not move for corrections to wording or layout.

Contact

Questions about any of the above: support@southmoordigital.com.