TracePDRPrivacy Policy
The short version
- TracePDR has no accounts, no ads, no analytics and no tracking.
- Everything you enter — customers, vehicles, estimates, photos, prices — is stored only on your device. We never receive it.
- The app sends only two kinds of information over the internet: a vehicle's VIN, to the U.S. government's free VIN-decoding service when you look one up, and subscription status checks, to our payment-management provider RevenueCat, using an anonymous ID.
- PDFs and backups leave your device only when you choose to share them.
1. Who we are
TracePDR is developed and published by Roberto Neamtu, an individual developer based in Romania (“we”, “us”). For any question about this policy or your data, contact rneamtu297@gmail.com.
2. What the app stores, and where
To create estimates and invoices, the app stores the following locally in the app’s private storage on your device:
| Information | Why |
|---|---|
| Your customers’ names, email addresses and phone numbers | To prepare and address estimates and invoices |
| Vehicle details: VIN, make, model, year | To identify the vehicle being repaired |
| Estimates, line items, prices, tax and currency settings, pricing profiles | To calculate and record quotes |
| Photos of vehicle damage that you take or choose | To document the work; resized and saved inside the app |
| Your business name, phone, email and address | Printed at the top of your PDFs |
| App preferences (appearance, last-opened estimate) | To remember your settings |
We do not operate any server for TracePDR, and none of this information is sent to us or to anyone else. We cannot see, access, recover or delete it.
3. VIN decoding
When you type or scan a 17-character VIN, the app sends only that VIN over an encrypted (HTTPS) connection to the vPIC service of the U.S. National Highway Traffic Safety Administration (NHTSA) at vpic.nhtsa.dot.gov, which returns the vehicle’s make, model and year. No customer, business or estimate information is sent. As with any internet request, NHTSA’s servers will see your device’s IP address. NHTSA is a U.S. government agency; its handling of requests is described in the NHTSA privacy policy. If you are offline, or prefer not to use this, you can type the vehicle details yourself — the lookup is optional.
4. Subscriptions (RevenueCat)
TracePDR Pro is sold through the Apple App Store and Google Play. Apple or Google handle the payment; we never receive your card or bank details. To know whether your subscription is active, the app uses RevenueCat, Inc. (USA), which acts as our processor. When the app starts, and when you view plans, buy or restore a subscription, it exchanges with RevenueCat:
- a random, anonymous app user ID created on your device (not your name, email or Apple/Google account);
- your purchase receipts and subscription history for TracePDR from the App Store or Google Play (product, dates, price, currency, country, trial and renewal status);
- basic technical data: app version, device operating system and version, language and region settings, and your IP address.
No estimates, customer details, vehicle data, photos or business details are sent. We use this information only to unlock Pro, restore purchases on a new device, handle support requests and see aggregate subscription figures. The legal basis is performance of our contract with you (GDPR Art. 6(1)(b)). RevenueCat processes data in the United States; transfers are protected by the safeguards GDPR requires, such as the European Commission’s Standard Contractual Clauses. Purchase records are kept while needed to provide the subscription and to meet tax and accounting obligations. See the RevenueCat privacy policy. Apple and Google process your purchase under their own privacy policies.
5. Device permissions
- Camera — only when you tap to scan a VIN barcode or take a damage photo.
- Photos — the system photo picker gives the app only the photos you select. The app does not browse or read the rest of your library.
You can withdraw these permissions at any time in your device settings; the rest of the app keeps working.
6. When information leaves your device
- Sharing PDFs. When you tap “Share”, the estimate or invoice PDF is handed to the app you pick (email, messages, cloud storage, printing). From then on, that service’s own privacy policy applies.
- Backups you create. “Back up now” creates a single file containing all of your app data, including customer details and photos. The file is not encrypted. Store and share it as carefully as you would a customer list.
- Your device’s own backup. If you have iCloud Backup (iOS) or Google/Android device backup turned on, your phone may include TracePDR’s data in that backup. This is handled by Apple or Google under your account with them, not by us.
7. Your customers’ personal data
When you use TracePDR to record information about your customers, you decide what is collected and why, so for the purposes of the EU General Data Protection Regulation (GDPR) you are the controller of that data. Because the data never reaches us, we do not act as your processor. Please make sure you have a lawful basis to record your customers’ details (usually the steps needed to provide a quote or perform a repair contract), keep only what you need, and delete estimates you no longer have to keep.
8. How long data is kept
Data stays on your device until you delete it — deleting an estimate also deletes its line items and photos — or until you uninstall the app, which removes all of its data. Copies you shared or backed up are not affected.
9. Your rights
The only personal data about you that we control is the subscription information described in section 4, linked to an anonymous ID. You can ask us to access or erase it by writing to us; because the ID is anonymous, we may ask you for a purchase receipt from Apple or Google so we can find it. Everything else stays under your control inside the app. You stay in full control inside the app. Under the GDPR you nevertheless have the right to contact us with questions and to lodge a complaint with a supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP), or the authority in your own EU country.
If you are a customer of a business that uses TracePDR, please contact that business about your data; we have no access to it.
10. Children
TracePDR is a business tool and is not directed at children under 16. We do not knowingly process children’s data.
11. Security
Data is kept in the app’s private storage, which other apps cannot read, and the VIN lookup uses HTTPS. Protecting the device itself (screen lock, device encryption) and any backups or PDFs you share is your responsibility.
12. Changes to this policy
If the app’s handling of data changes — for example, if a feature ever sends new information off your device — we will update this page and its effective date before that change ships.
13. Contact
Roberto Neamtu · Romania · rneamtu297@gmail.com