Privacy Policy

1. Introduction

Tesla Mirror ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our iOS application and cloud services.

Tesla Mirror enables you to mirror your iPhone screen to your Tesla vehicle's browser, primarily for navigation purposes (e.g., displaying Waze or other navigation apps in your Tesla).

2. Information We Collect

2.1 Account Information

Apple ID: When you sign in with Apple, we receive a unique identifier and your email address (if you choose to share it)
User ID: We generate a unique user ID for your account

2.2 Usage Information

Streaming Sessions: Session start/end times, duration, and frame counts
Technical Data: IP addresses, device types, and connection timestamps
Performance Metrics: Frame upload success rates and latency measurements

2.3 Screen Content

Video Frames: JPEG images of your iPhone screen while streaming is active
Temporary Storage: Frames are stored temporarily in server memory for real-time streaming only
No Permanent Storage: Frames are NOT saved to disk or retained after streaming ends

3. How We Use Your Information

We use collected information solely to provide and improve our service:

Authentication: Verify your identity and manage your account
Service Delivery: Stream your screen content to your Tesla browser
Session Management: Track your active streaming sessions and enforce usage limits
Service Improvement: Analyze usage patterns to improve performance and reliability
Security: Detect and prevent unauthorized access or abuse

We do NOT:

Sell your personal information to third parties
Use your screen content for advertising or marketing
Record or save your screen content after streaming ends
Share your data with anyone except as required by law

4. Data Storage and Security

4.1 Storage Locations

Cloud Server: Hosted on Oracle Cloud Infrastructure
Database: User accounts and session metadata stored in encrypted SQLite database
Your Device: Authentication tokens stored securely in iOS Keychain

4.2 Security Measures

Encryption in Transit: All data transmitted using HTTPS/TLS 1.3
Token-Based Authentication: JWT tokens with automatic expiration (24 hours)
Session Isolation: Each user's streams are isolated and cannot be accessed by others
Temporary View Tokens: Tesla browser access tokens expire after 2 hours
No Long-Term Storage: Screen frames exist only in temporary memory during active streaming

4.3 Data Retention

Account Data: Retained until you delete your account
Session Metadata: Retained for 90 days for analytics purposes
Screen Frames: Deleted immediately when streaming stops (not saved to disk)
Stale Sessions: Automatically cleaned up after 1 hour of inactivity

5. Third-Party Services

Tesla Mirror integrates with the following third-party services:

5.1 Apple Sign In

Purpose: User authentication
Data Shared: Apple ID token for verification
Privacy Policy: Apple Privacy Policy

5.2 Oracle Cloud Infrastructure

Purpose: Hosting streaming server and database
Data Stored: User accounts, session metadata, temporary stream frames
Privacy Policy: Oracle Privacy Policy

6. Your Rights and Choices

You have the following rights regarding your data:

Access: View your account information and usage statistics within the app
Delete: Request deletion of your account and all associated data
Control: Stop streaming at any time to prevent screen content transmission
Export: Request a copy of your personal data (contact us)
Revoke Access: Disconnect Tesla Mirror from your Apple ID via device settings

How to Delete Your Account

Open the Tesla Mirror app
Go to Settings → Account
Tap "Delete Account"
Confirm deletion

Your account and all associated data will be permanently deleted within 30 days.

7. Children's Privacy

Tesla Mirror is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request disclosure of data collection and sharing practices
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of data "sales" (we don't sell your data)
Non-Discrimination: We will not discriminate against you for exercising your rights

9. International Users

Tesla Mirror is operated from the United States. If you are accessing the service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the service, you consent to this transfer.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy within the app
Updating the "Last Updated" date at the top of this page
Sending you a notification if you're logged in

Your continued use of Tesla Mirror after changes indicates your acceptance of the updated Privacy Policy.

11. Data Processing Agreement (GDPR)

For users in the European Economic Area (EEA), we comply with GDPR requirements:

Legal Basis: Contract performance and legitimate interests
Data Controller: Tesla Mirror (contact information below)
Your Rights: Access, rectification, erasure, restriction, portability, and objection
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority