Legal
Privacy Policy
Last updated: June 24, 2026
This policy explains what information Athrun collects, how we use it, and the choices you have. Athrun is an AI-powered automotive diagnostic assistant operated by Caelus Labs ("Athrun," "we," "us"). It applies to the Athrun mobile app and the website at driveathrun.com (together, the "Service").
1. Information we collect
Information you provide
- Account details. If you create an account, your email address and a password (which we store only as a securely salted hash — we never store your password in readable form).
- Vehicle information. Vehicles you add to your garage, including VIN, year, make, model, trim, and engine. If you decode a vehicle, we send the VIN to a vehicle-data service to retrieve specifications.
- Diagnostic conversations. The messages and trouble codes you submit to the diagnostic chat, and the diagnostic context we build from them.
- Vehicle stats. Maintenance and ownership details you choose to track, such as mileage, oil-change timing, registration expiration, and service history.
- Community content. Threads, replies, your chosen display name, and votes you post in the community forum.
Vehicle & diagnostic data
- Trouble codes (DTCs) you type in, or — in the mobile app — read from your vehicle's OBD-II port over Bluetooth.
- OBD-II data (mobile app). When you connect a Bluetooth adapter, the app reads diagnostic data from your vehicle, such as stored codes, the VIN, and battery voltage.
- License-plate & camera VIN lookups (mobile app). If you use plate or camera-based lookup, the plate or scanned VIN is used to retrieve vehicle specifications.
Location information
To find nearby auto services, the Service uses either your device's location (with your permission) or a ZIP code you enter, and sends approximate coordinates to a mapping provider to return nearby results. You can decline location access and use a ZIP code instead, or simply not use the "Near Me" feature.
Information collected automatically
- A device identifier. On first use we generate an anonymous identifier so the Service works before (and without) you signing in.
- Usage and technical data. Your IP address, request counts, and timestamps, which we use for rate limiting, abuse prevention, and per-user usage limits.
- Advertising identifiers. If ads are shown, our advertising partner (Google) may process advertising identifiers and related data — see "Advertising and cookies" below.
2. How we use your information
- To provide the core features — answer diagnostic questions, look up codes, find parts and nearby services, and run the community forum.
- To maintain your garage, sessions, and tracked stats across visits.
- To keep the Service reliable and fair — rate limiting, usage caps, security, and abuse prevention.
- To moderate community content and respond to reports.
- To communicate with you about your account or the Service.
- To improve the Service.
3. AI processing of your conversations
4. How we share your information
We do not sell your personal information. We share information only with the service providers that power Athrun's features, and only as needed for them to perform their function:
| Provider | Purpose |
|---|---|
| Anthropic | AI processing of diagnostic conversations |
| Nearby-services search (Places & Maps); advertising (see below) | |
| eBay | Parts search and affiliate links (see below) |
| NHTSA vPIC | Public VIN decoding |
| Vehicle-data provider | License-plate to VIN lookup (mobile app) |
| Supabase | Database hosting (stores your account, garage, and content) |
| Railway | Backend application hosting |
| Cloudflare | Website hosting and storage |
We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer.
5. Parts search and affiliate links
Parts results come from eBay's API. When you tap a listing, you may be taken to eBay through an affiliate link, and we may earn a commission on qualifying purchases at no extra cost to you. We do not store eBay listing content — listings are shown to you live and are not retained on our systems. We do record limited, non-listing engagement data (such as which result position was tapped) to understand how the feature is used.
6. Advertising and cookies
Athrun may display ads served by Google (AdMob in the mobile app, AdSense on the website). Google may use cookies, device identifiers, and similar technologies to serve and measure ads, including personalized ads where permitted.
- Where required (for example, in the EEA and UK), we present a consent choice before personalized ads or non-essential cookies are used.
- You can learn about and control Google's use of data at policies.google.com/technologies/partner-sites and manage ad personalization in your device or Google account settings.
7. Data retention and deletion
We keep information for as long as needed to provide the Service. When you delete diagnostic conversations, the related derived data is removed on an ongoing basis. You can request deletion of your account and associated personal data by emailing us (see "Contact"). Some records may be retained where required for legal, security, or fraud-prevention reasons.
8. Security
We protect your information with measures including encrypted connections (HTTPS), salted password hashing, access controls on our API, and per-identity usage limits. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
9. Your choices and rights
You can review and edit your garage and stats in the app, choose whether to share location, post in the community under a display name or anonymously, and request access to or deletion of your personal data by contacting us.
Depending on where you live, you may have additional rights — such as to access, correct, delete, or limit the use of your personal information. To exercise any of these, email us and we'll respond as required by applicable law.
10. Children
Athrun is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
11. Where your information is processed
Athrun and its providers are based in the United States, and your information is processed there. If you access the Service from outside the U.S., you understand your information will be processed in the U.S.
12. Changes to this policy
We may update this policy from time to time. When we do, we'll revise the "Last updated" date above, and for material changes we'll provide a more prominent notice.
13. Contact
Questions or requests about this policy or your data:
Caelus Labs · michael@caeluslabs.com