Privacy Policy

• Account info — email, password hash, display name.
• Insurance card data — carrier, policy number, NAIC, expiration, claims phone, scanned card images.
• Policy PDF uploads — full policy documents you upload, plus AI-extracted summaries.
• Vehicle data — VIN, plate, year/make/model, mileage, lienholder.
• Incident records — dates, locations, descriptions, fault notes, photos, claim numbers, adjuster info.
• Photos and videos — pre-loss walkaround photos, scene photos, damage photos, documents.
• Location data — used for SOS broadcast and "where did this happen" tagging. Used only when you trigger it.
• Emergency contact data — names and phone numbers you choose to add for SOS.
• Witness contact data — names and phone numbers you collect at a scene.
• Medical / symptom journal data — body diagram entries and symptom notes.
• Usage data — pages viewed, features used, device/browser, IP — to improve the product.

• To provide the features you use (display your card, summarize your policy, track your claim).
• To send AI-generated explanations of policies and rights you ask about.
• To support you when you ask for help.
• To improve product quality and fix bugs.
• To comply with the law.

When you upload a policy PDF and ask questions, the document text (and your question) are sent to a third-party large-language-model provider to generate an answer. We do not allow AI providers to use your data to train their models. See the AI Disclosure page.

We use trusted vendors to operate AfterCrash:

• Hosting and database (Lovable Cloud / Supabase)
• AI providers (OpenAI, Google Gemini)
• Email and SMS providers (for account and notification messages)
• Maps and geolocation providers (when you use SOS or scene tagging)
• Analytics (privacy-respecting product analytics)
• Payment processors (when paid plans launch)

Vendors only get the minimum data they need to perform their function.

No. We do not sell or rent your personal information. We do not share it with insurance companies, attorneys, or repair shops without your explicit action (e.g., generating a letter and sending it yourself).

We keep your data for as long as your account is active. You can delete individual records at any time inside the app, or delete your entire account from the Delete My Data page. Deleted data is removed from our active systems within 30 days; encrypted backups roll off within 90 days.

You can delete records yourself from inside the app, or email us a deletion request — see Delete My Data.

Encryption in transit (HTTPS/TLS), encryption at rest at the database and storage layer, scoped access controls, and database row-level security so one user can't read another user's records. Details on the Security page.

AfterCrash is intended for users 18+. Adults may use Family Mode to organize a teen driver's insurance card, vehicle, and incident records — but the account and records remain owned by the adult account holder. We do not knowingly collect data directly from anyone under 13.

Depending on where you live, you may have the right to access, correct, delete, or export your personal data. Contact us through the Contact page to exercise these rights.

If we make material changes, we'll notify you in the app or by email before they take effect.