CaRX is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when using our smart car control application.

• Account information (email, name) for authentication
• Device identifiers for Bluetooth pairing
• Vehicle status data (lock state, alarm status)
• App usage preferences and settings
• Location data (only when GPS module is enabled by user)

• Provide car control via Bluetooth
• Authenticate your identity and secure your vehicle
• Send alerts about vehicle status
• Improve app performance and experience
• Provide OTA firmware updates

All Bluetooth communications are encrypted using ECDH key exchange and authenticated with HMAC-SHA256. No Bluetooth data is stored on external servers. Pairing keys are stored locally using secure storage.

Location data is collected only when the GPS module is installed and explicitly enabled. Used for vehicle tracking, geofencing, and trip history. You can disable it at any time from app settings.

• End-to-end ECDH encryption for device communications
• HMAC-SHA256 authentication for commands
• Biometric and PIN authentication for app access
• Secure local storage for sensitive data
• No data transmission to third-party servers

The app uses Firebase for authentication and Google Maps for GPS tracking. We do not sell or share your personal data with any third parties for advertising.

• Access and review your personal data
• Delete your account and data — Delete Account
• Disable location tracking at any time
• Unpair and remove device data
• Export your data upon request