Privacy Policy — Martyr
Effective date: 7 November 2026 · Operator: Zerostat LLC, San Jose, California · Contact: [email protected]
Martyr keeps the records, papers and reminders for your cars, motorcycles, RVs, trailers and boats. This policy explains what information the app handles, where it goes, and your choices. It is written to meet the California Online Privacy Protection Act (CalOPPA) and the Apple App Store and Google Play privacy requirements.
1. Information that stays on your phone
Everything you enter stays on your phone unless you choose to send it (section 3) or export it (section 5), apart from the usage stats in section 4:
- Vehicle details: type, year, make, model, trim, VIN or hull ID, license plate or registration number, color, odometer or engine-hour readings, body style, tire sizes, oil weight and specification, storage status, and the modifications you list.
- A photo of each vehicle, and photos of your registration and insurance cards and their expiry dates, if you add them. The photos are kept inside the app on this phone; they are not added to your photo library and are never uploaded.
- Service records and reminders: what was done, when, at what odometer reading, optional cost, shop name, notes, and optional details (for example tire size or part numbers).
- Your contact details for quote requests (name, phone, email, ZIP), saved so you do not retype them.
- Your ZIP code, used on this phone to pick a shop near you, and included in usage stats unless you opt out (section 4).
- Settings: color palette, appearance, notification choices.
There are no accounts, and we cannot see this information, except what you choose to send (sections 3 and 3a) and usage stats (section 4). If you delete the app, this information is deleted with it. Your phone's own backup (iCloud or Google backup) may include the app's data, according to your device settings.
2. Vehicle lookups (NHTSA)
When you add a vehicle by VIN, the app sends the VIN to the U.S. National Highway Traffic Safety Administration's public vehicle database (vPIC) to look up the year, make, model and body style. NHTSA handles that request under its own policies. Nothing else is sent, and we receive nothing.
2a. Camera
The camera is used only when you scan a VIN barcode, photograph a VIN label, photograph your vehicle, or photograph a registration or insurance card. Picking an existing photo uses your phone's own photo picker, which shares only the photo you choose.
When you add a vehicle from its registration or insurance card, your phone reads the VIN, plate, plate state and expiry date from the photo, on the phone. Your name, your address and anything else on the card are not kept apart from the photo itself, and are never sent to us or to your assistant. The card's photo stays on your phone. Only the VIN goes on: to NHTSA (section 2) and, in Agent mode, to your assistant (section 3a).
3. Quote requests you choose to send
If you use "Get a quote," the request goes to your Martyr shop: the shop in the Martyr network that serves your ZIP code, named on the car's screen and on the Send button. Nothing goes until you tap Send. The screen lists what will be sent directly above the Send button, and you can remove the plate and any service record before sending.
- TDW Auto, San Jose, California (ProdigiumX LLC dba TDW Auto): the app sends the request through the quote service on tdwauto.com.
- Any other Martyr shop: the app opens an email from you to the shop in your own mail app, with the request written out, and you send it. It goes from your email account to the shop, not through Zerostat or TDW Auto, and the shop handles it under its own privacy policy.
The list of Martyr shops comes from Zerostat's server, which the app checks now and then; that request carries nothing about you, and the app picks your shop on the phone from your ZIP.
What is sent: your first and last name, phone, email, ZIP code (if you give it) and how you would like to be contacted; the car's year, make, model, trim, body style, powertrain, VIN and plate; the modifications you list for it, unless you remove them; its odometer reading; the services you asked about, your description, how soon you need the work, any options you ticked (for example "I'm bringing my own parts"), and your preferred days and time; up to six recent service records for that car; and a random identifier the app creates on your phone to prevent spam. The server also records your IP address with the request, to limit abuse. This version of the app does not send photos.
How TDW Auto uses and keeps it: the request is stored on the shop's server and emailed to the shop's support inbox (Google's Gmail is the email provider). The shop uses it only to answer and carry out your request, contacts you only by the method you chose, and does not use it for marketing or send texts you did not ask for. Requests are deleted after 24 months. To have one deleted sooner, email [email protected] with the reference number the app shows for it.
Who we are to the shops: Martyr is published by Zerostat LLC. Zerostat LLC and TDW Auto have the same owner. Other shops may pay Zerostat to be listed in the Martyr network; the app labels them "Sponsored" wherever it offers them. Zerostat is not paid per request, never sells your details, and never receives the requests you email to a shop.
The app keeps a copy of each request on your phone, in the car's History.
3a. Your own AI assistant (optional)
If you use "Connect an agent," Martyr gives you a link to add to an assistant you already use (for example Claude, ChatGPT, Muse or Codex). The link is not a password: it only lets an assistant ask to connect. When one asks, Martyr shows you its name, the website or app it returns to, and what it wants to do, and nothing connects unless you approve it on your phone. You choose what each assistant may do (send entries, read and answer your notepad, draft quote requests, see your vehicles' names), you can change that or disconnect any one of them at any time, and you can see what each did recently.
When you ask a connected assistant to log something, it sends the entry — the vehicle as you described it, the services, date, odometer reading, cost, shop, notes and details you mentioned — to Zerostat's connector service, where it waits in an inbox only your phone can open. Your phone collects it when you open the app; you review it and save or discard it, and it is then deleted from the service. Entries not collected are deleted after 30 days, and an inbox unused for 180 days is deleted with everything in it.
When you add a vehicle in Agent mode (the default once an assistant is connected; switch to Manual to skip it), the VIN and any photo you took of the VIN label go through the connector service to your assistant, so it can look the vehicle up and fill in the page. They are held the same way as your other notes: a photo is deleted when your assistant is done with it or after 7 days, and a note not collected is deleted after 30 days. What your assistant finds comes back the same way, and nothing is saved until you tap Save. If you ask your assistant to pass on feedback about Martyr, it waits in the app as an email to [email protected], and goes only if you send it.
To keep each assistant connected, the service keeps, for each one: the name and return address it gave when it signed in, the permissions you chose, when it connected and was last used, a short list of what it did recently (the action, the time and whether it worked, never the content), and codes that let it back in, stored only in a scrambled (hashed) form that cannot be turned back into the code. Disconnecting an assistant deletes all of this for it. An "agent key" you make for an assistant that cannot sign in is shown to you once and stored the same way.
If you leave "Share my vehicles and what's coming up" on, the service also keeps your vehicles' year, make, model, trim and nicknames, the name of the garage each one is in once you have more than one garage (the names you give them, such as "Dad's house"), and which services are due or overdue on each with their due dates, so assistants you allow to see them can name the right one and remind you — never the VIN, plate, odometer readings, photos, past records or contact details. The codes that link your phone to its inbox are random, made on your phone, not linked to your name, and not included in exports. The service uses IP addresses only to limit how often one address can set up an inbox or sign in, and does not store them with anything.
Notes to your assistant. The garage's notepad lets you write to your assistant ("did the oil change on the M3, odo at 91,231"). Each note is kept on your phone and, once your inbox is set up, sent to the connector service, where assistants you allowed to use your notepad can read it; it is deleted from the service when an assistant marks it done, and notes not marked done are deleted after 30 days. You can add up to four photos to a note (for example a receipt, an invoice or your dashboard) for your assistant to read: the app makes each one smaller and re-saves it first, which removes the location and other details your camera stores in the file, and the photo is kept on your phone with the note. The copy sent to the connector service is deleted when your assistant marks the note done, or after 7 days, whichever comes first. A receipt can show your name, address or the last digits of a card, so send only what you are happy for your assistant to read. Your assistant can write back (for example to ask which oil you used); its replies wait on the service until your phone collects them, then are deleted there and kept on your phone. Your assistant can also draft a quote request: it arrives in the app like an entry, and nothing goes to the shop unless you send it yourself (section 3). An assistant that can receive messages may ask to be pinged when you write a note: the connector service then sends the address it gave a short notice that a note is waiting, never the note itself, and the assistant reads the note as above. The service keeps that address with the assistant's connection; you can see where pings go and turn them off under that assistant, and disconnecting it deletes the address.
What you say to your assistant is handled by the company that provides it, under its own privacy policy; Martyr receives only what the assistant sends to the connector. Settings → Connect an agent → Disconnect everything (or Delete all data) deletes the inbox, every assistant's connection, the shared names, your notes and the replies waiting, and your link stops working. Delete all data also deletes the notepad on your phone.
The links option ("Any assistant: links") sends nothing to us: your assistant writes a link, and tapping it opens Martyr on your phone.
4. Usage stats (on unless you opt out)
Martyr collects usage stats. The first time you open the app, the agreement screen says so, and agreeing turns them on. You can opt out at any time with the checkbox at the top of the Privacy policy page in Settings. Unless you opt out, the app sends an analytics provider in the United States, acting on our behalf: the screens you open and how long you spend on them; the features you use and the kind of service you log (for example "oil change"); the type, year, make, model and powertrain of your vehicles, as you entered them; your ZIP code; the app version and whether your phone is an iPhone or Android; and a random identifier (a new one each time you opt back in). The identifier is not your advertising ID.
We use this to understand which vehicles and features people use and where they are, to improve the app, and to tell shops how many Martyr users are in an area. We may share total counts of users by area with shops, such as how many users are in a ZIP code or city. We never share or sell anything about an individual user, and we do not report very small counts. If we ever want to use this for anything else, we will ask you first. It never includes your name, address, contact details, VIN, plate, notes, costs, shop names, photos or anything from your registration or insurance cards, and it is never joined to a quote request. Your ZIP together with an unusual vehicle could point to one person, so we treat this as data about you and never try to work out who you are from it.
The provider handles this only on our behalf and must protect it at least as well as this policy does. It receives your IP address with each request, and we have set it not to store the address or use it to find your location. It keeps the stats for about a year and then deletes them.
Opting out stops this at once and deletes the identifier from your phone. To have what was already sent deleted, tap "Ask to delete what was sent" on the same page before opting out: it opens an email with your identifier, which is the only way we can find your stats.
5. Exports
You can export your data as a file (JSON, CSV or PDF) through your phone's share sheet. A JSON export includes your vehicle and card photos so it can restore everything on another phone. Where that file goes is your choice. Your saved contact details are never included in an export.
6. What we do not do
We do not sell or rent personal information. We do not show ads. We do not track you for advertising. We do not collect your precise location or contacts, and the only place we learn your ZIP code is in a quote you send (section 3) or usage stats, unless you opt out (section 4). We never see your vehicle or card photos, which stay on your phone. We do not build advertising profiles. We do not respond to browser "Do Not Track" signals because the app does not use web tracking (CalOPPA disclosure).
7. Children
The app is not directed to children under 13, and we do not knowingly collect personal information from them.
8. Your choices and requests
- Review or change your data: everything is editable in the app.
- Delete everything on your phone: Settings → Delete all data (the last row) removes every vehicle, record, reminder, card photo, modification and quote request — including any still waiting to send — your saved contact details and the app's identifiers, and cancels its reminders. Phone backups made earlier may hold a copy until they expire.
- Disconnect your assistant: Settings → Connect an agent → Disconnect deletes everything the connector service holds for you.
- Delete a quote request you sent: email [email protected] with its reference number.
- Stop usage stats: the checkbox at the top of Settings → Privacy policy. To have stats already sent deleted, use "Ask to delete what was sent" there first (section 4).
- We answer requests within 30 days.
9. Changes to this policy
We will post changes here with a new effective date and show a notice in the app the next time it opens after a material change.
10. Contact
Zerostat LLC · San Jose, California · [email protected]