Privacy policy

Effective October 11, 2026

Carblam watches used-car listings for the cars you tell it about and lets you know when one is priced well under what it usually sells for. This policy explains what we keep about you to do that, why, who else handles it, and how to have it deleted. It covers carblam.com and the Carblam iPhone app.

What we collect

What you give us

• Your sign-in: you sign in with Apple or Google. They confirm who you are and pass us your name, your email address and an identifier for your account with them. (With Apple you can hide your email; we then get a relay address.) We never see your password.
• Your scans: the makes and models you're looking for, the years, your highest price and mileage, your ZIP code and how far you'll travel, and how good a deal has to be before we notify you.
• Your settings: notification choices, quiet hours and time zone.
• What you send us when you contact support, and any ad text or photos you paste into "Check a listing".

What we create while running the service

• The listings we find for your scans, our estimate of what each car is worth, and the notifications we sent you.
• Notification addresses: your browser's push subscription, or your iPhone's push token, so we can send alerts to your device.
• Your plan: which plan you're on, when your trial or subscription renews or ends, and an identifier from our payment provider. We never see or store your full card number.
• Technical information: a session cookie that keeps you signed in, your IP address (used to limit abuse, such as too many sign-in attempts), and server logs of requests and errors, kept for a limited time to keep the service running and secure.

How we use it

• To run your scans: search listing sites near your ZIP code for the cars you chose, price what we find, and read the ads.
• To notify you about deals, at the times you allow.
• To sign you in and keep your account secure.
• To bill your subscription and give you the features of your plan.
• To answer your questions, fix problems and improve Carblam.
• To meet legal obligations.

We don't sell your personal information, we don't share it for advertising, and we don't build advertising profiles.

Who else handles it

We use a few service providers to run Carblam. They handle your information only to provide their service to us.

• Hosting: our servers and database run on Railway.
• Sign in with Apple or Google: Apple or Google confirms who you are under their own privacy policies and sends us your name, your email address and an identifier for your account with them. We don't get your password, and they don't get your scans or the cars we found for you.
• Payments: Stripe handles subscriptions bought on carblam.com; Apple handles subscriptions bought in the iPhone app. They receive your payment details directly, under their own privacy policies.
• Notifications: alerts go through Apple's push service for the iPhone app, and through your browser maker's push service (such as Google, Mozilla or Apple) for the website.
• Listings: to find cars, we send search terms (a make and model, a price limit, a ZIP code and a distance) to listing sites and the data providers we use to read public listings, including eBay. These searches don't include your name, email or account.
• Reading ads: the text and photos of public car listings are read by an AI service provider. We don't send your personal information with them. Text you paste into "Check a listing" is read the same way.
• Fonts: our pages load typefaces from Google Fonts, so your browser connects to Google when you open them.

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of the business, in which case this policy would continue to apply to it.

How long we keep it

We keep your account information while you have an account. Listings we found for you are replaced as your scans run, and notification history is trimmed over time. When you delete your account, we delete your name, email, sign-in identifiers, scans, results, settings and notification addresses straight away. Server logs and backups that might still hold some of it are cleared on their own schedule, normally within 30 days. Payment records that Stripe or Apple keep are governed by their policies, and we may keep billing records where the law requires.

Your choices and rights

• Change or remove scans at any time in the app.
• Turn notifications off in the app's settings or in your phone's settings.
• Delete your account in Settings in the iPhone app or on carblam.com, or by emailing us. Deleting your account doesn't cancel an App Store subscription: cancel that in your iPhone's Settings.
• Ask for a copy of the information we keep about you, or ask us to correct it, by emailing us.

Depending on where you live, you may have more rights, such as the right to know what we collect, to delete it, and not to have it sold or shared. California residents have these rights under the CCPA; we don't sell or share personal information as that law defines it. We won't treat you differently for using your rights. To use them, email support@carblam.com from the address on your account, and we'll confirm it's you before acting.

Children

Carblam is meant for adults shopping for a car. It isn't directed to children under 13, and we don't knowingly collect their information. If you think a child has given us information, email us and we'll delete it.

Security

Connections to Carblam are encrypted. Session tokens are stored only in hashed form, access to our systems is limited, and we keep only what we need. No system is perfectly secure, so we can't promise that information will never be accessed without permission, but we work to prevent it and will tell you if something happens that affects you.

Changes

If we change this policy, we'll post the new version here with a new effective date. If a change matters, we'll tell you in the app or by email before it takes effect.

Contact

Questions or requests about your privacy: support@carblam.com.