Draft for legal review. Not yet in effect.
Privacy policy
Last updated: November 1, 2026 (draft). This policy is published at https://onewrenchpro.com/privacy.
One Wrench Pro is an iPhone app for independent and mobile mechanics, made by Llambes Studios ("we", "us"). In this policy, "you" is the shop that uses the app, and "your customers" are the people whose cars you work on.
The short version
- Your shop's records (customers, vehicles, inspections, quotes, invoices and your books) are kept on your iPhone and in your own iCloud. We don't have a copy and we can't see them.
- A small server we run, the relay, passes along the few things a phone can't do alone: a page a customer opens from a link, a request from your website, a payment, an email that goes out at a set time. It keeps each of them only for as long as the job needs, listed below, and then deletes it.
- Card payments are handled by Stripe, on your own Stripe account. Card numbers never reach us.
- No ads, no analytics, no tracking, and we never sell or rent data about you or your customers.
1. What stays on your phone and in your iCloud
Everything you enter or create in the app is stored on your iPhone: your customers and their contact details, vehicles and VINs, jobs and visits, inspections and their photos, quotes, invoices, payments you record, expenses and receipt photos, your books and reports, your settings and your brand.
When iCloud sync is on (the app asks during setup, and you can change it under More), Apple copies these records to your private iCloud database under your Apple ID, so they sync to your other devices and come back on a new phone. Apple stores that data under Apple's privacy policy; we have no access to your iCloud.
Backup and export files you make (for example, the files for your accountant) are created on your phone and go only where you send them.
Some features use your phone's permissions, which iOS asks you for the first time, and what they read stays on the phone: the camera (VIN scan, inspection and receipt photos) and your photo library (to attach or save photos). Where the app offers to import a customer from Contacts, put a visit on your calendar or use your location for an arrival estimate in a text you send, that too stays on the phone. You can turn each permission off in iOS Settings.
Texts to your customers are written by the app and opened in Messages; you send them from your own number. They don't pass through us. (The one exception is a shop on our optional business-number add-on, described in section 3.)
2. What passes through our relay, and for how long
The relay is a small service we run on a cloud platform. It has no database of your shop. It holds the items below only for as long as listed; when the time is up, or as soon as your phone has picked an item up, it is deleted.
| What | What it contains | How long |
|---|---|---|
| Your shop's public profile | Business name, page address, colors, logo, public phone, website, the reply-to email for your emails, time zone, service areas and services with starting prices. Also your plan and its end date, your Stripe account's id and status, your phone's push notification token, and the key your phone signs its calls with. | While your online account exists. Deleted when you delete it. |
| Your open and full days | Which upcoming days are open, full or closed. No customer details. | 48 hours, refreshed by your phone. |
| Requests from your request page or website form | What the customer typed: name, phone, email, the car's address, the vehicle and plate, what's wrong, and when they're home. | Until your phone fetches it, at most 7 days (24 hours for an urgent request). On a plan with the request page, the customer's name and email are kept apart so you can email your answer, until you confirm or decline, at most 7 days. |
| Events for your phone | A quote approved or declined (with the name and note the customer typed), a payment received (amount, fees, card brand and last four digits, and Stripe's ids for the customer and saved card when the customer chose to save it), a link opened for the first time. | Until your phone fetches it, at most 7 days. |
| Quote links | The quote's number, title, lines and total, any deposit, and your shop's name and brand. No customer name, phone or address. | Until the quote expires (at most 90 days) plus 7 days. |
| Pay and receipt links | The invoice number, title, lines and amount, and your shop's name and brand. A customer email you send to prefill the card form is passed to Stripe and not stored. | Up to 60 days. |
| Inspection report links and their photos | The vehicle's year, make, model, trim and mileage, the items with their readings, notes and photos, the mechanic's first name and summary. Never the customer's name, phone, email, address, plate or VIN. | 60 days by default and never more than 90. You can delete a report sooner from the app. |
| Scheduled emails | The customer's email and first name and what the message needs (for example the visit day and window, or the item to check). | Until it is sent or you cancel it (at most a day past its send time, for retries). |
| Duplicate and abuse guards | One-way hashes and counters with no personal details. IP addresses are counted through a keyed one-way hash that changes daily, and are not stored. | Minutes to 2 days. |
| Old page addresses | Your previous request page address, so old links forward to the new one. | 90 days after a rename or after you delete your account. |
| Fee checks | For a card payment taken in person whose platform fee didn't match your plan: the amounts and Stripe's payment id only. | 90 days. |
If you join the Android list on this website, we keep your email (and your shop name, if you add it) only to tell you when One Wrench Pro is on Android, and we delete it when you ask.
Customer links carry a long random code and are not listed anywhere; report links also ask search engines not to index them. Anyone who has the link can open it while it lives, so treat it like the paper copy you'd hand over.
What the relay never keeps
- Your customer list, your vehicles or your job history
- Your invoices, your books or your ledger
- Card numbers (Stripe handles them; see below)
- Your parts suppliers' logins or tokens
- Your Apple ID or anything in your iCloud
We set the relay up so that it does not keep a log of the web addresses requested, because customer links carry their codes in the address.
3. Who else is involved
Stripe, for card payments
Stripe is the payment processor. When you connect, you open or link your own Stripe account, and your payments are made on that account under Stripe's terms and privacy policy. Card details are entered on Stripe's pages or read by Tap to Pay on iPhone and go straight to Stripe; they never reach the app's records or our relay. We receive what's needed to run the app: the amount, the fees, the card brand and last four digits, and Stripe's ids for the payment, and (when a customer chooses to save a card) for that customer and card, which are kept on your phone. Our platform fee is collected through Stripe.
Apple
- iCloud stores your records, as described in section 1.
- App Store subscriptions: Apple sells and bills plans bought in the app. We don't receive your payment details. The app sends our relay the subscription's transaction id, and the relay asks Apple whether the plan is active, then stores your plan, its end date and that transaction id (so no other shop can claim the same subscription) until you delete your online account.
- Push notifications: to tell you about a new request or a payment, the relay sends a short notice through Apple's push service to your phone's push token. Notices carry the service and area of a request, never the customer's name.
The email provider
Emails the app sends for you (request received, confirmations, reminders, report and quote links, receipts, check-ins) are delivered by a transactional email provider we use. It receives the recipient's address and the message to deliver it, under its own privacy commitments. Emails go out in your shop's name with your email as the reply-to. We do not track whether emails are opened or links are clicked.
Parts suppliers, when you connect them
If you connect PartsTech or WorldPac, your login or token is kept in your iPhone's Keychain and sent with each parts search or order through our relay, which adds our own partner key and passes the request to the supplier. The relay does not store or log your credentials. Orders are placed on your own supplier account, under that supplier's terms and privacy policy, and include the vehicle's VIN and the parts you choose.
A texting provider, only for the business-number add-on
A shop that takes our optional business-number add-on sends its texts from that number through a telephony provider behind the relay. The provider receives the customer's phone number and the text to deliver it. A reply waits in the relay only until the shop's phone fetches it, then it is deleted. No other shop's texts go through us.
The cloud platform that runs the relay
The relay runs on a cloud hosting platform that processes the requests above on our behalf.
4. What we don't do
- No advertising, and no advertising or analytics code in the app or on this website.
- No tracking across other companies' apps or websites.
- We don't sell, rent or trade data about you or your customers, and we don't use it for marketing.
- This website sets no cookies and loads nothing from other companies.
5. Your customers
The shop decides what to record about its customers and what to send them, and is responsible for that information. If you're a customer of a shop that uses One Wrench Pro, your records are with that shop: contact the shop through the phone number or email on the page or message it sent you to see, correct or delete them. We don't hold a shop's customer list, so we can't look you up; if you write to us, we'll point you to the shop, and we can remove a report or other link the relay is holding if you send it to us.
6. Deleting your online account
In the app, open More and choose Delete online account. The relay deletes everything it holds for your shop at once: the profile and request page, waiting requests, scheduled emails, events, and your report, quote and pay links (they stop opening). Your page address stays reserved for 90 days so nobody else can take it, then it's released. Your records on your phone and in your iCloud are not affected; delete them in the app or remove the app's iCloud data in iOS Settings. Your Stripe account is yours and stays open until you close it with Stripe. If you're on a paid plan, cancel it in your Apple subscriptions. You can also write to us to delete the online account for you.
7. Security
Every call from your phone to the relay is signed with a key that stays in your phone's Keychain. Customer links use long random codes and expire. The relay holds our service keys so they never ship in the app.
8. Children
One Wrench Pro is a business tool and is not directed to children under 13. We don't knowingly collect information from children.
9. Your rights
Because your records are on your own devices, you can see, export, change and delete them yourself at any time. For anything the relay holds for your shop, write to us and we'll answer. Depending on where you live, you may have additional rights under local law; contact us to use them.
10. Changes
If we change this policy, we'll update the date at the top and, for a significant change, tell you in the app before it takes effect.
11. Contact
Llambes Studios
hello@onewrenchpro.com