Legal
Privacy Policy
Last updated: 2026-10-09
Overview
TunedRides takes your privacy seriously. This policy explains what personal data we collect, why we collect it, how it is processed, and your rights under the General Data Protection Regulation (GDPR). We are an EU-based operation and designed this policy to reflect our legal obligations and our commitment to data minimization. Plain English throughout — no deliberate vagueness.
1. Email Address
What we collect: Your email address, if you try it free or create an account.
Why: To notify you of early access, product updates, and account-related communications.
Where it goes: Contact-form messages are routed through Formsubmit and our Cloudflare email routing. Account and billing records are stored in our database (Neon Postgres) and with our payment processor (Stripe). We do not sell or share your email with third parties for marketing purposes.
Retention: Until you request deletion.
2. Car Photos You Upload
What we collect: Photographs you upload for AI rendering.
Why: To generate your requested AI visualization.
Where it goes: Your photo is sent to Replicate (our AI model provider) for processing. Replicate processes your image to produce the render and does not store inputs beyond the active generation request. Source photos are not retained long-term by TunedRides after the render has been delivered. Generated renders are temporarily stored in Cloudflare R2 so you can download them; they are deleted after 30 days unless you save them to your account gallery.
We do not use your photos to train AI models.
3. Payment Data
What we collect: Nothing. Stripe handles all payment processing.
How it works: When you subscribe, you enter your payment details directly into Stripe's secure form. TunedRides never sees, stores, or processes raw card numbers, bank details, or CVV codes. We store only a Stripe customer ID and subscription status to manage your account.
For Stripe's privacy practices, see stripe.com/privacy.
4. Analytics
What we collect: Anonymized usage data — which pages are visited, how long sessions last, what features are used.
How: We use Google Analytics with IP anonymization enabled. No full IP addresses are stored. We do not use analytics data to build individual profiles or run targeted advertising.
Why: To understand which features are working, which pages are confusing, and where to focus development effort.
5. Cookies
We use two categories of cookies:
- Functional cookies: Required for the Service to work — session management, authentication state, render job tracking. These cannot be disabled without breaking the Service.
- Analytics cookies: Google Analytics tracking. You can disable these via your browser settings or a browser extension without affecting Service functionality.
We do not use advertising, retargeting, or cross-site tracking cookies.
6. Third-Party Services
TunedRides uses the following third-party processors. Each handles your data under their own privacy policy:
| Service | Purpose | Data shared |
|---|---|---|
| Replicate | AI image generation | Uploaded photos (not retained) |
| Cloudflare R2 | Render storage | Generated render images |
| Stripe | Payment processing | Payment info (not seen by us) |
| Google Analytics | Usage analytics | Anonymized page/event data |
| Formsubmit | Contact-form messages | Email address |
| Anthropic | Car identification + image safety check | Uploaded photos (not used for training) |
| Vercel (hosting, Blob storage) | Website, app API and render storage | Requests, uploaded photos, renders |
| RevenueCat | Mobile app subscription status | Anonymous app user ID, purchase records |
| Google Play | Mobile app billing | Purchase records (handled by Google) |
7. Your Rights (GDPR)
Under GDPR, you have the right to: access the data we hold about you; correct inaccurate data; request deletion of your data; object to processing; and lodge a complaint with a supervisory authority.
To exercise any of these rights, email hello@tunedrides.com with the subject "Data request." We will respond within 30 days.
Right to deletion (self-serve): Signed-in users can delete their account immediately at tunedrides.com/account/ (open the "Danger zone" section). Deletion wipes your saved cars, render history, public profile, and account login right away. Anonymized analytics data cannot be linked back to you and therefore cannot be individually deleted. For deletion requests by email (eg. you've lost access), email hello@tunedrides.com and we will process within 14 days.
8. Data We Do Not Collect
We do not collect: real names (your display name can be a handle), physical addresses, phone numbers, or any sensitive personal categories as defined by GDPR Article 9. IP addresses are used only inside short-lived abuse-prevention counters (for example "free renders from this network this week"), which expire within 7 days. We do not sell data to any third party.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email. The "Last updated" date at the top of this page always reflects the current version.
10. Contact
Privacy questions or requests: hello@tunedrides.com
11. TunedRides mobile app (Android, iOS)
The TunedRides app works without an account. This section covers what the app handles; everything above about photos, processors and your rights applies too.
Photos you choose: the app uploads only the photo you pick or take (Android's photo picker gives the app no access to the rest of your gallery). Before any processing we strip all photo metadata, including location. The photo is sent to Replicate (image model) and Anthropic (car identification and a safety check) to make your render, and stored in our cloud storage only until the render finishes — then it is deleted. Your finished render is kept on our servers for up to 90 days so the app can re-download it, and on your phone in "My garage" until you delete it. We never use your photos to train AI models.
Device identifiers: a random install ID created by the app, and a one-way hash of your device's Android ID. We use them only to give each phone exactly one free render, to keep your renders together, and to stop abuse. They are not used for advertising or tracking across apps. The app has no ads and does not use the advertising ID.
Purchases: subscriptions and render packs are sold and charged by Google Play (Apple App Store on iOS). We never see your payment details. RevenueCat tells our server which plan an anonymous app user ID has, so the server can unlock your renders.
App usage events: the app records what happens in it — for example "render started", "render failed (reason)", "plans screen shown", app version and crash messages — linked to the install ID, plus your country (derived from the request, the IP itself is not stored with them). We use this to fix problems and improve the app. No third-party analytics or advertising SDK is in the app.
Reports: if you report a render as offensive or wrong, we store that report with the render so we can review it.
12. Deleting your app data
In the app: Settings → "Delete my data". This immediately deletes your renders and photos from our servers and from your phone, and your app usage events.
Without the app: email support@tunedrides.com with the subject "Delete my TunedRides app data" and the approximate date of your renders; we delete what we can match within 30 days and confirm by email.
What we keep: the one-way device hash that records the free render was used (it identifies no one, and without it deleting data would unlock unlimited free renders), and purchase records held by Google Play / Apple and RevenueCat, which they keep for billing and legal reasons under their own policies. Deleting data does not cancel a subscription — cancel in Google Play (Payments & subscriptions) or your Apple ID settings.