Privacy Policy

Overwatch Vehicle Diagnostics ("Overwatch", "we", "us") is a United Kingdom–based provider of a vehicle diagnostics assistant used worldwide. For privacy questions, contact overwatchdiagprivacy@gmail.com.

• Account identifier: an email address used to sign you in. We do not store a separate name, username, address, phone number, or marketing profile.
• Vehicles you add to your saved vehicles and the diagnostic reports you generate, saved to your account so you can come back to them.
• Community fixes you choose to submit to the shared community library.
• Token and payment records: which token packs or subscriptions you've purchased and your token usage history. Card details are never seen or stored by us — they are handled directly by our payment provider.
• Basic technical data needed to operate the service (session cookies, request logs, error logs).

We use your data to run your account, show your saved reports, generate diagnostic guidance, and improve the shared community-fix library. We do not sell your personal data.

Diagnostic reports and vehicles in your garage are private to your account and are not viewable by other users. When you choose to submit a fix to the community library, that fix becomes visible to other users; do not include personal information in community submissions.

• Account data is kept only while your account exists and is deleted when you delete the account.
• All data including saved reports are deleted together with the account.
• Community fixes are retained indefinitely as part of the shared library. Duplicate submissions are discarded so that only one canonical entry per issue is kept.

You have the right to access, correct, delete, port, or object to the processing of your personal data. You can delete your account from in-app account settings, or email overwatchdiagprivacy@gmail.com to exercise any of these rights. UK residents can complain to the Information Commissioner's Office (ICO).

We use the following providers to deliver the service:

• Lovable Cloud — managed backend, database, and hosting.
• Stripe — payment processing for token purchases and subscriptions. Stripe receives the payment information you enter at checkout directly; we only store the resulting transaction and subscription records.
• Google and Apple — only if you choose to sign in with them. They confirm and share the email address associated with that account.

These providers process data on our behalf under their own terms and security commitments.

We use session cookies that are strictly necessary to keep you signed in. We do not use advertising cookies.

As a UK operator with worldwide users, your data may be processed outside your region. Where this happens, transfers are protected by standard safeguards required under UK GDPR.

The service is not directed at children under 16. If you believe a child has created an account, contact us and we will remove it.

We may update this policy from time to time. Material changes will be reflected here and the "last updated" date above will change.