Privacy Policy

Last updated: July 19, 2026

This Privacy Policy describes how InflectionPeak ("we", "us") processes personal data when you use the AI-RentalCarCheck mobile application (also referred to as RentCheck) and related services.

AI-RentalCarCheck is a consumer assistance tool that helps you inspect and document a rental vehicle — mainly at pickup and return. It is not legal advice and does not create court- or insurer-ready proof for claims. See our Terms of Service for details.

1. Controller

InflectionPeak
Email: support@inflectionpeak.com

2. What the app does (processing context)

Typical use of the app includes:

• Starting a manual checklist inspection or an optional AI-assisted walk-around.
• Entering or scanning a license plate (on-device OCR), plus rental company and vehicle details.
• Documenting the vehicle with checklist items, photos, optional walk-around video, and notes.
• Optionally attaching GPS location to captures if you enable that in settings.
• Optional Pro features: cloud AI (damage detection, vehicle identity, plate reading), cloud sync/backup, PDF export, and car history.

The license plate is a primary identifier in the app: it is stored with inspections, used to look up prior inspections of the same vehicle (car history), and may appear in lists, reports, and assistant context.

3. Personal data we process

Depending on how you use the app, we may process:

• Account data: email address and authentication data (via Supabase Auth).
• Inspection content: vehicle details, rental company, checklist answers, notes, photos, videos, timestamps, and related metadata.
• License plate numbers (vehicle registration marks): text you enter or that is read by on-device OCR / optional cloud AI. Under the GDPR (Art. 4(1)), we treat license plates as personal data in this app, because they are identifiers that can relate to an identifiable person (for example the registered keeper) and, in our service, are linked to your account, photos/videos, timestamps, optional location, rental details, and inspection history.
• Location data: approximate GPS coordinates, only if you enable location attachment in settings.
• Subscription / purchase data: entitlement and purchase status via Apple App Store and RevenueCat (we do not receive your full payment card details).
• Technical / diagnostic data: device type, app version, and logs needed to operate and secure the service.

4. Purposes and legal bases (GDPR)

We process personal data for the following purposes:

• Provide the app and contracted features (inspections, local storage, optional sync, history by plate, PDF export, subscriptions) — Art. 6(1)(b) GDPR (performance of a contract / steps at your request).
• Optional cloud AI analysis you enable (selected frames sent to our gateway and processed by third-party models) — Art. 6(1)(b) and, where required for certain processing, Art. 6(1)(a) (consent). You can turn cloud AI off in settings.
• Optional location attachment — Art. 6(1)(a) (consent via settings). You can disable this at any time.
• Security, abuse prevention, and service reliability — Art. 6(1)(f) GDPR (legitimate interests).
• Legal compliance (for example responding to lawful requests) — Art. 6(1)(c) GDPR.

Where we rely on consent, you may withdraw it at any time in the app settings (or by contacting us), without affecting the lawfulness of processing before withdrawal.

5. Where data is stored and who receives it

• On your device: inspections and media are stored locally (offline-first).
• Supabase: if you sign in, account data, inspection records, and media metadata/files may sync to our Supabase project (database and storage).
• Cloudflare Worker: if you use cloud AI, selected photos or video frames are sent to our AI gateway.
• Google Gemini: cloud AI processing may be performed by Google's models via that gateway.
• RevenueCat / Apple: subscription and entitlement processing for paid features.

Some providers may process data outside the European Economic Area. Where required, we rely on appropriate safeguards (for example Standard Contractual Clauses) and provider terms. Do not use cloud AI or cloud sync if you do not accept those transfers.

6. Retention

We retain personal data while your account is active and as needed to provide the service, comply with law, resolve disputes, and enforce our agreements. Local data remains on your device until you delete it or uninstall the app (device backups may persist separately). You may request account deletion from within the app where available, or by contacting us.

7. Your rights (EEA / UK / similar laws)

Subject to applicable law, you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data ("right to be forgotten")
• Restrict or object to certain processing
• Data portability
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

To exercise these rights, contact support@inflectionpeak.com.

8. Your choices in the app

• Disable location attachment in Account / settings.
• Disable cloud AI features in Account / settings.
• Use the app without signing in (local-only mode; sync and some Pro features unavailable).
• Manage or cancel App Store subscriptions in your Apple ID settings.

9. Security

We use industry-standard measures appropriate to the nature of the data (including transport encryption and access controls on our backends). No method of transmission or storage is completely secure.

10. Children

The app is not directed to children under 16 (or under 13 where required by local law), and we do not knowingly collect their personal data.

11. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update means you acknowledge the revised policy.

12. Contact

Privacy questions: support@inflectionpeak.com

This page is provided for transparency and is not legal advice. For regulated launches, we recommend review with qualified counsel.