Diagno Privacy Policy

DIAGNO PRIVACY POLICY

Last Updated: September 5, 2026

1. INTRODUCTION

This Privacy Policy describes how Khalil Pady, doing business as Diagno (“Diagno,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use the Diagno mobile application, related websites, and services (collectively, the “Services”).

Diagno is an AI-powered vehicle diagnostic service that allows users to record vehicle sounds, provide vehicle and symptom information, receive AI-generated diagnostic assessments, review diagnosis history, and communicate with an AI-powered vehicle assistant.

Diagno is intended only for individuals who are at least 18 years old.

By using the Services, you acknowledge the practices described in this Privacy Policy.

If you have questions or privacy-related requests, contact us at:

[email protected]

2. INFORMATION WE COLLECT

The information we collect depends on which Diagno features you use.

2.1 Account and Authentication Information

When you create or use a Diagno account, we may process:

Email address
Authentication information
A unique account or user identifier
Session and authentication tokens necessary to keep you signed in

Passwords are processed through our authentication provider. Diagno does not separately store your plaintext password.

If you choose to sign in using Google Sign-In or Sign in with Apple, we may receive information made available by that provider, such as your:

Name
Email address or Apple private relay email
Provider-specific account identifier

We do not receive your Google or Apple account password.

2.2 Vehicle Information

When you add a vehicle, we may collect and store:

Vehicle year
Make
Model
Mileage
Vehicle record identifiers associated with your account

Diagno currently does not require or collect a VIN through its standard vehicle-entry flow.

2.3 Vehicle Sound Recordings

Diagno allows you to record sounds from your vehicle for AI-assisted analysis.

These recordings may include:

The raw audio recording
Recording duration
File type and technical recording information
Recording date/time
An identifier used to associate the recording with a diagnosis

Vehicle sound recordings may be uploaded to and stored using our cloud infrastructure.

Because microphones capture surrounding sound, recordings may unintentionally contain voices, conversations, or other background audio. You should avoid recording private conversations and should obtain any permission required by applicable law before recording other people.

2.4 Vehicle Symptoms and Diagnostic Information

When requesting a diagnosis, you may provide information such as:

A written description of the problem
When the symptom occurs
The type of sound you hear
Where the sound appears to originate
Warning lights
Perceived loudness
Whether the condition is improving, worsening, or unchanged
Other answers you provide during diagnosis intake

We may store diagnostic results including:

Most likely issue
Explanation
AI confidence information
Severity
Driving guidance
Estimated repair-cost range
Recommendations
Follow-up questions and answers
Vehicle and symptom context
Diagnosis history
Associated recording information

These results are generated in part using artificial intelligence and are covered separately by our Terms of Use.

2.5 AI Mechanic Conversations

When you use AI Mechanic, we may process and store:

Messages you send
AI-generated responses
Recent conversation history
Vehicle information relevant to the conversation
Diagnosis identifiers or diagnosis context when using diagnosis-specific chat
Conversation identifiers and timestamps

This information is used to provide contextually relevant responses and allow you to access conversation history.

You should avoid submitting unnecessary personal, confidential, or sensitive information in AI conversations.

2.6 Purchase and Subscription Information

Purchases within Diagno are processed through the Apple App Store.

Diagno does not receive your full payment-card number, CVV, or other full payment-card credentials.

We and our subscription-management provider, RevenueCat, may process information necessary to provide and verify purchases, including:

Diagno user identifier
Product purchased
Subscription status
Purchase history
Transaction identifiers
Purchase dates
Apple receipt information
Entitlement status
Limited device, operating-system, app, and storefront information used to operate the purchase service

This information allows us to determine whether you have access to Diagno Pro or an individually purchased diagnosis.

Deleting your Diagno account does not necessarily cancel an active App Store subscription. Subscriptions can be managed through your Apple account.

2.7 Analytics and Product Usage Information

We use PostHog to help understand how users interact with Diagno and to improve reliability and product functionality.

Depending on our configuration, analytics information may include:

Features or screens used
Events such as starting or completing a diagnosis
Purchase or paywall events
App version
Platform or operating-system information
Anonymous or account-linked analytics identifiers
Technical information associated with product usage

We use analytics for product operation, measurement, troubleshooting, and improvement.

We do not use PostHog or other analytics providers to serve targeted advertisements to you. If we materially expand our analytics practices, including enabling additional data-collection features, we will update this Privacy Policy and our applicable App Store disclosures.

2.8 Technical and Network Information

When you connect to an online service, our infrastructure and service providers may automatically receive technical information necessary to process the request, such as:

Internet Protocol (IP) address
Request timestamps
Operating system or platform information
App version
Technical request and security information

Diagno does not currently request access to your precise or approximate GPS location for its core diagnosis functionality.

We also do not currently request access to:

Contacts
Bluetooth
Camera
Photo library
Motion or accelerometer information

unless a future feature specifically requires such permission and this Privacy Policy is updated accordingly.

2.9 Information Stored on Your Device

Certain information may be stored locally on your device to operate Diagno, including:

Authentication/session information
Recording files and recording metadata
Pending diagnosis information
Pending symptom answers
App acknowledgments or preferences
Temporary files used for exports

Some locally stored information is removed when it is replaced, discarded, you sign out, or your account is successfully deleted, depending on the type of data.

2.10 Reports and User-Requested Exports

If you export diagnosis information or account information, Diagno may create temporary:

PDF reports
JSON or other data-export files

These files may contain account, vehicle, and diagnosis information.

When you choose to share or save an exported file using iOS, the destination you select may retain its own copy. Data retained by another app or service after you intentionally share it is subject to that provider's practices.

3. MICROPHONE ACCESS

Diagno requests microphone permission when you use the vehicle sound-recording feature.

Microphone access is used to capture recordings you intentionally initiate for diagnosis.

You can revoke microphone permission at any time through your device settings. Doing so will prevent sound-recording features from functioning until permission is restored.

Diagno does not continuously record through your microphone in the background as part of its normal diagnosis flow.

4. HOW WE USE YOUR INFORMATION

We use information described in this Privacy Policy to:

Create and maintain your account
Authenticate users
Save your vehicles
Record and process vehicle sounds
Generate AI-assisted vehicle assessments
Provide AI Mechanic conversations
Maintain diagnosis and conversation history
Provide purchased features
Verify subscriptions and one-time purchases
Restore purchase access
Generate reports and user-requested exports
Provide support
Send account and security communications
Provide password recovery
Detect fraud, abuse, and security threats
Troubleshoot errors
Analyze use of the Services
Improve Diagno
Comply with legal obligations
Protect our users, rights, and Services

We may also process information for another purpose when you direct us to do so or where permitted by applicable law.

5. ARTIFICIAL INTELLIGENCE PROCESSING

Diagno uses third-party artificial-intelligence services, including OpenAI, to provide AI-powered functionality.

Depending on the feature you use, information processed to provide an AI response may include:

Vehicle information
Vehicle sound recordings
Symptom information
Diagnostic context
AI Mechanic messages
Recent conversation context

Information may first pass through Diagno's cloud infrastructure before being processed by an AI service provider.

AI-generated output may also be stored in your Diagno account so that you can view diagnosis and conversation history.

Our use of AI services is subject to our agreements with those providers and their applicable data-protection practices.

Diagno does not sell vehicle recordings or AI conversations to third parties for advertising purposes.

6. SERVICE PROVIDERS AND THIRD PARTIES

We use service providers to operate Diagno.

These may include:

Supabase

We use Supabase for services such as:

Authentication
Database services
Cloud storage
Server-side functions
Account and application infrastructure

Information processed through Supabase may include account information, vehicle information, recordings, symptom information, diagnoses, chats, and transaction-related records.

OpenAI

We use OpenAI to provide artificial-intelligence functionality used by Diagno's diagnosis and AI Mechanic features.

RevenueCat

We use RevenueCat for:

Subscription management
One-time purchase management
Entitlement verification
Purchase restoration
Transaction validation and related purchase functionality

Apple

Apple provides:

App distribution
StoreKit/App Store payment processing
Subscription management
Sign in with Apple, when used

Apple maintains its own privacy practices for information it processes.

Google If you choose Google Sign-In, Google processes authentication and provides limited account information to Diagno according to the permissions involved.

PostHog

We use PostHog for product analytics and service-improvement purposes.

Notion

We may use Notion to publicly host documents such as this Privacy Policy and our Terms of Use. Notion may process ordinary technical information when you access pages hosted using its service.

7. WHEN WE MAY DISCLOSE INFORMATION

We may disclose information:

To service providers described in this Privacy Policy
When necessary to provide a feature you request
To comply with law, legal process, court orders, or lawful government requests
To investigate fraud, abuse, security incidents, or violations of our Terms
To protect the safety, property, or rights of Diagno, our users, or others
In connection with a merger, acquisition, financing, restructuring, bankruptcy, or sale of some or all of our business or assets
With your direction or consent

8. SALE, ADVERTISING, AND TRACKING

We do not sell your personal information.

We do not share personal information with third parties for their own independent direct-marketing purposes.

Diagno does not currently operate an advertising network or use personal information to deliver targeted behavioral advertisements. If these practices materially change, we will update this Privacy Policy and provide any choices required by applicable law.

9. LEGAL BASES FOR PROCESSING — EEA AND UK

Where the GDPR or UK GDPR applies, our legal bases may include:

Performance of a Contract

We process information where necessary to provide the Services you request, including accounts, diagnoses, AI features, saved information, and purchased functionality.

Consent

We may rely on your consent for certain optional permissions or processing activities where required by law.

You may withdraw consent where applicable, although doing so may prevent some features from functioning.

Legitimate Interests

We may process information when reasonably necessary for legitimate interests such as:

Protecting Diagno and its users
Preventing fraud and abuse
Maintaining service reliability
Diagnosing technical issues
Understanding and improving use of the Services

We consider these interests against your rights and freedoms.

Legal Obligations We may process or retain information when necessary to comply with applicable law, regulatory requirements, accounting requirements, or lawful requests.

10. DATA RETENTION

We retain different categories of information for different periods depending on why the information is needed.

Account Information

Generally retained while your account remains active and as necessary to operate your account.

Vehicle, Diagnosis, and Conversation Information

Generally retained while associated with an active account so that features such as diagnosis history and AI conversations remain available to you.

Vehicle Sound Recordings

Uploaded recordings associated with saved diagnoses may remain stored while the corresponding diagnosis or account remains available.

Recordings are not necessarily deleted immediately after AI analysis because they may be retained as part of your saved diagnosis history.

Purchase and Transaction Information

Certain transaction and entitlement records may be retained for longer periods where reasonably necessary to:

Verify purchases
Restore entitlements
Prevent fraud
Resolve disputes
Maintain accounting records
Comply with legal obligations

Technical, Security, and Analytics Information

Retained for periods reasonably necessary for analytics, troubleshooting, security, fraud prevention, and service operation, subject to the retention practices of our providers.

Backups

Information scheduled for deletion may remain temporarily in backups or disaster-recovery systems until those backups are overwritten or expire through normal retention cycles.

When information is no longer reasonably needed, we may delete or de-identify it, subject to applicable legal requirements.

11. ACCOUNT AND DATA DELETION

You may initiate deletion of your Diagno account from within the app.

Following a valid account-deletion request, we take steps to delete or de-identify personal information associated with your account, subject to information we may need to retain for:

Fraud prevention
Security
Transaction verification
Accounting
Legal obligations
Dispute resolution
Enforcement of our agreements
Backup or disaster-recovery processes

Information that you previously exported or intentionally shared with another application or person is outside Diagno's control after that transfer.

Deleting your account does not automatically cancel an active App Store subscription. You should manage subscriptions through Apple's subscription settings.

You may also contact:

[email protected]

for assistance with privacy or deletion requests.

12. SECURITY

We use administrative, technical, and organizational safeguards designed to protect personal information.

These measures may include:

Encryption in transit
Authentication controls
Database access controls
Authorization and ownership checks
Restricted access to production systems
Security rules applied through our infrastructure providers

However, no electronic storage, transmission, or information-security system can be guaranteed to be completely secure.

13. YOUR PRIVACY RIGHTS

Depending on where you live and whether applicable legal requirements are met, you may have rights concerning your personal information, including rights to:

Request access
Request correction
Request deletion
Obtain a copy of certain information
Object to certain processing
Request restriction of certain processing
Withdraw consent where processing relies on consent
Request data portability where applicable
Appeal certain privacy-request decisions
Exercise applicable rights without unlawful discrimination

Privacy rights vary by jurisdiction and may be subject to exceptions.

To submit a request, email:

[email protected]

We may need to verify your identity before fulfilling certain requests.

14. UNITED STATES PRIVACY RIGHTS

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Where those laws apply to Diagno, those rights may include access, correction, deletion, portability, and the ability to opt out of certain uses of personal information.

Diagno does not currently sell personal information or use it for targeted advertising.

The applicability of particular state privacy laws may depend on statutory requirements and thresholds.

Requests may be submitted to:

[email protected]

15. CHILDREN AND AGE REQUIREMENT

Diagno is intended only for individuals who are at least 18 years old.

You must be at least 18 years old to create an account or use the Services.

We do not knowingly collect personal information from individuals under 18. If we learn that an individual under 18 has provided personal information through Diagno, we may deactivate the account and take reasonable steps to delete the information, subject to applicable law.

If you believe someone under 18 has provided us with personal information, contact:

[email protected]

16. INTERNATIONAL DATA TRANSFERS

Diagno and our service providers may process information in the United States and other countries.

Those countries may have privacy laws different from those where you live.

Where applicable law requires additional safeguards for international transfers, we rely on legally recognized transfer mechanisms and safeguards made available through our service providers or otherwise permitted by applicable law.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time as Diagno changes or as required by law.

When we make changes, we will update the Last Updated date at the top of this Policy.

If a change materially affects how we process personal information, we may provide additional notice where appropriate or required.

18. CONTACT US

For questions, privacy requests, or concerns regarding this Privacy Policy:

Diagno

Khalil Pady, doing business as Diagno

Syracuse, New York 13204

United States

Email: [email protected]

19. TERMS OF USE

Your use of Diagno is also governed by our Terms of Use.