Privacy Policy

Last updated October 3, 2026

AutoLingo LLC ("AutoLingo", "we") makes the AutoLingo for BMW app, a diagnostics app for BMW cars, and sells the Bluetooth adapter it works with at autolingo.app. This policy says what personal information we collect through the website and the app, why, who we share it with, how long we keep it, and what you can do about it.

The short version

  • We collect what we need to sell you an adapter, ship it, and let the app confirm it's yours: your email address, your name and shipping address, and your adapter's identifier.
  • Your card details go to Stripe, our payment processor; we never see or store them.
  • The app sends us a summary of each session, linked to your account: your car's model, year and VIN, and which of its modules worked. You can turn this off in the app's settings, and it's deleted from your account when you delete the account. Your fault codes and live values stay on your phone unless you turn on "Help improve compatibility", which sends us full session logs.
  • When you contact support, we keep your request to answer it. We use an AI model (Anthropic's Claude) to help draft our replies; a person reviews and sends every one.
  • We don't sell your personal information, and we don't use advertising or tracking cookies.
  • You can delete your account at any time at autolingo.app/account/delete or in the app.

What we collect on the website, and why

  • Your email address. When you sign up for news, order, or sign in, we send a link to confirm it's yours. Your account is your email address: we use it to sign you in, to send your receipt and shipping updates, and to tie your adapter to you. If you sign up on our home page to hear when AutoLingo for BMW is ready, we also email you news about it; every one has an unsubscribe link, and you can stop them at any time. (You still get the emails you ask for, like sign-in links and order updates.)
  • Your name, shipping address and, if you give it, your phone number, to ship your order. The phone number is only for the carrier.
  • Your order: what you ordered, the amounts, any promo code, and when it was paid and shipped.
  • Your adapter's identifier, the serial number in its Bluetooth name, which we record against your account when we ship it.
  • Support requests. When you contact support (by email, on our support page, or from the app), we keep your messages, our replies and anything you attach, linked to your account, to answer you and fix the problem. We answer confirmed email addresses only: if you email us from an address we haven't confirmed, we keep your email for up to 14 days and may send you one email asking you to confirm the address; if you don't, we delete it.
  • Security records: your IP address and the pages and forms you use (for example sign-in attempts), to keep the site working and to stop abuse such as password guessing and automated sign-ups.
  • Visit counts: we count page visits, and which site sent you, to see how the website is used. This uses no cookies and nothing outside our own servers; we don't store your IP address or browser details, and after two days only daily totals remain.

What the app collects, and why

  • Session summaries (on unless you turn them off in the app's settings). After each session with your car, the app sends us a summary, linked to your account: your car's model, model year and VIN, the app's version, your adapter, and for each control module it talked to, what it tried (reading faults, clearing them, live values, a service function) and whether it worked, with the app's short error message if it didn't. It doesn't include your fault codes, live values or where you are. We use summaries to see what works on which cars, to fix what doesn't, and to show on our compatibility page how well each function works in real cars (as counts, never who).
  • Session logs (only if you turn on "Help improve compatibility"). A log is the full record of a session: every message the app and your car exchanged, which includes the car's fault codes and the values it reported. It's linked to your account. The app asks you once whether to turn this on, and you can change your answer any time in the app's settings; we keep a record of when you turned it on or off. While it's off, we don't accept logs from your phone. We use logs only to fix the app and to make more cars work. The app never sends screenshots.
  • Your account and adapter. When you sign in to the app with your email address, it checks with our servers that the adapter you connect to is registered to your account. To do that it sends your adapter's identifier. The app also sends an ID it makes for itself on your phone and your phone's name, so you can see which phones are signed in to your account and we can limit how many; if an adapter seems to be used in a way that suggests copying (for example from two phones at once), we look into it.
  • Crash reports. If the app crashes or hits an error, it sends a report to Sentry, our crash-reporting service: the error and where in the app it happened, your phone's model and operating system version, and the app's version. Crash reports don't include your name, email address or your car's data.
  • Support requests. When you use Contact support in the app, it sends us your message with what we need to help: your adapter, the app's version, your phone's model and operating system version, your car (its VIN, model and year), and the log of that session (what the app and your car exchanged, which can include fault codes and values). It's sent only when you send the request, and the app says what's included first. It's linked to your account, and our replies come by email.
  • Bluetooth is needed to talk to the adapter. On some Android versions, Android requires location permission for any Bluetooth scanning; the app doesn't collect or use your location.

Who we share it with

We share personal information only with the companies that help us run AutoLingo, only what each needs, and only for that purpose:

  • Stripe processes payments. It receives your card details (directly from you, on the payment form), your email address and your shipping address. See Stripe's privacy policy.
  • Google suggests addresses as you type your street on the order page (Google Places). Google receives what you type in that field and your IP address. See Google's privacy policy.
  • USPS (and, if we use one, a shipping label service) receives your name, shipping address and, if you gave it, your phone number, to deliver your order.
  • Sentry receives the app's crash reports.
  • Anthropic provides the AI model (Claude) we use to draft replies to support requests. A person on our team reads, edits and sends every reply; no reply is sent automatically. To draft one, Anthropic receives the support conversation, your email address, your adapter and order status, a summary of your recent sessions and the end of the session log you sent. Anthropic processes it only to provide this service to us and doesn't use it to train its models. See Anthropic's privacy policy.

We may also disclose information when the law requires it, or to protect our rights or someone's safety. If AutoLingo is sold or merged, your information would pass to the new owner under this policy.

We don't sell your personal information, and we don't share it for advertising.

Cookies

The website uses only cookies it needs to work: one that keeps you signed in, and ones that protect forms and show a message after you submit one. On the payment page, Stripe sets its own cookies to prevent fraud; on the order page, Google's address service may too. We don't use analytics, advertising or tracking cookies.

How long we keep it

  • Your account (your email address, and your adapter's link to you): until you delete it.
  • Your orders: as long as tax and accounting law requires, generally seven years. If you delete your account, we remove your name, street address, phone number and email address from them and keep only the order details and the city, state, ZIP code and country it shipped to.
  • Security records (IP addresses, sign-in attempts): 90 days.
  • Crash reports: Sentry keeps them for up to 90 days.
  • Session summaries: until you delete your account; then we delete your VIN, your adapter and the link to you, and keep only the anonymous results (model, year, what worked) for our compatibility statistics.
  • Session logs: 180 days, or until you delete your account, if sooner.
  • Support requests (your messages, our replies, attachments and, if you rate our answer after we close your request, your feedback): until two years after the request is closed, or until you delete your account, if sooner. Emails to support from an address that was never confirmed: 14 days.

Deleting your account

You can delete your account and personal information at any time at autolingo.app/account/delete, or from the app. We confirm it's you with a link to your email address, show you what will be deleted and kept, and delete it when you confirm. If an order of yours hasn't shipped yet, we finish once it ships, because we need your address to send it. Your session logs are deleted, your session summaries lose your VIN, your adapter and any link to you, and your support requests are deleted.

Your rights

You can ask us for a copy of the personal information we have about you, ask us to correct it, or ask us to delete it, by contacting us below; we'll answer within 30 days. We won't treat you differently for asking.

California residents: you have these rights under the California Consumer Privacy Act. We don't sell personal information or share it for cross-context behavioral advertising, and we don't use sensitive personal information to infer anything about you.

Visitors from the European Economic Area or the United Kingdom: we process your information to fulfill your order and provide your account (contract), to keep our records (legal obligation), to keep the site secure, to learn what works on which cars from session summaries, and to answer support requests, including drafting replies with an AI model that a person reviews (legitimate interests; you can turn summaries off), and, for session logs and news emails, with your consent, which you can withdraw at any time. You may also complain to your data protection authority.

Security

Everything between you and our website is encrypted (HTTPS). Sign-in links work once and expire; passwords (for our staff) are stored only as salted hashes; card details never reach our servers. No system is perfectly secure, but we work to protect your information.

Children

AutoLingo for BMW isn't meant for children under 13 (under 16 in the EEA and UK), and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date above; if a change is significant, we'll tell you by email or on the site first.

Contact

AutoLingo LLC · privacy@autolingo.app