Last updated: 7 November 2026
This Privacy Policy explains how ARI (Auto Repair Software), provided by uMob, collects, uses, stores and shares information when you use our website and our web, mobile and desktop applications. Contact us about privacy or data deletion at contact@ari.app.
Information we collect and how we use it
We process the account and shop information you provide, such as your name, email address, phone number, business address and account settings, to create and manage your account, provide support and operate ARI. We also process the records you enter or upload, including customer contact details, vehicles, appointments, estimates, invoices, inspections, notes and attachments, so you can manage your repair business. Approximate location and address information can be used for shop profiles, invoices and relevant service features.
ARI also processes subscription and payment-status information, app usage and diagnostic information, and messages you send to support to provide the service, maintain subscriptions, troubleshoot problems and improve ARI. Payment providers process payments under their own policies. You choose which customer and business information to enter and which optional integrations to enable.
Our website and app may also collect device/browser information, referral and campaign information, and analytics or advertising identifiers to understand how people find and use ARI and measure our marketing. These are separate from Google data obtained through the Calendar connection.
Sharing and service providers
ARI uses service providers to operate the service, including Google Firebase and Google Cloud for hosting, authentication and data storage, and services for support, communications and payments. Information needed to perform those functions is processed by the relevant provider. When you choose an optional integration, the information needed for that feature is sent to that service. CarFax is optional and requires opting in and accepting CarFax’s terms and conditions. Analytics and advertising partners, such as Google Analytics, Google Ads and Meta, may receive the website/app device, campaign and identifier information described above to measure usage and marketing. Google Calendar has the specific limits described below.
We may publish aggregated statistics, such as average labor rates by state, built from anonymized data combined across many shops. These statistics do not identify a user, a shop or its customers. Google user data obtained through the Calendar connection is excluded from these statistics.
Optional Google Calendar synchronization
You can choose to connect a Google account from ARI’s Google Calendar Sync settings. This is a one-way connection from ARI to a dedicated ARI Appointments calendar. On the first connection, ARI imports existing upcoming appointments, not past appointments. New appointments and subsequent changes are synchronized while the connection remains active, including when the ARI app is closed. Changes made in Google Calendar do not update ARI.
Google data we access and why
With your authorization, ARI receives your Google account identifier, email address and email-verification status to identify the account and associate it with your shop’s connection. Google also supplies authorization tokens so ARI can continue the synchronization. ARI does not receive your Google password.
ARI requests permission to create secondary calendars and manage events on calendars it creates. It creates or reuses the dedicated ARI Appointments calendar and reads its calendar and event data to maintain synchronization and identify existing events. Data returned by Google can include the calendar name, time zone and identifiers, and event titles, descriptions, locations, dates, times, status and synchronization metadata. This access is limited to ARI-created calendars; ARI does not read events from your unrelated personal calendars or your Gmail messages.
Information sent to Google and actions ARI performs
ARI sends appointment dates and times, status, customer and vehicle details, phone numbers, addresses, notes and synchronization identifiers to Google, and creates, updates or removes the corresponding events as appointments change in ARI. Events are created as private, without customer invitations. People to whom you give access to the Google calendar may be able to see its events according to your Google sharing settings. While connected, ARI periodically checks upcoming events and restores ARI’s version, including re-creating events deleted in Google. Make appointment changes in ARI; to remove a Google copy without changing the ARI appointment, disconnect first. Existing manual calendar exports remain separate copies.
Storage, security and retention
ARI stores the connected Google email address, Google account identifier, calendar and event identifiers, and synchronization status and operational metadata in its Google Cloud/Firebase backend. It stores the refresh credential encrypted on the backend so scheduled synchronization can continue. Access tokens are used to call Google APIs. Calendar credentials are not sent to the ARI client app. Connections to Google APIs use HTTPS, and backend credentials and connection records are protected by restricted service access.
ARI retains the connection information until Disconnect completes, including while a connection needs attention and synchronization is paused. When Disconnect completes in ARI, synchronization stops and ARI removes the stored authorization credential and connected email for that shop connection. ARI retains the Google account identifier, calendar/event identifiers and synchronization records so it can recognize and reuse the calendar if you reconnect. If you reconnect the same Google account while that calendar still exists, ARI updates previously synchronized appointments, including past ones, and can re-create their events if you deleted them in Google. To start with a new calendar on reconnect, delete the old ARI Appointments calendar in Google Calendar settings first; hiding it is not enough. These retained records are not automatically removed by disconnecting; request their deletion at contact@ari.app.
Your choices and deletion
You can stop synchronization using Disconnect in ARI’s Google Calendar Sync section. You can also revoke ARI’s Google access in your Google account connections settings. Revoking access in Google can affect other ARI shops connected to the same Google account. Disconnecting does not delete the existing Google calendar or its events; you can remove those directly in Google Calendar.
Signing out, uninstalling ARI or deleting your ARI login does not stop an active Google Calendar connection or delete stored shop records. ARI continues to use the stored authorization to keep events updated until the connection is disconnected or you revoke access in Google. Disconnect before closing your account. After deleting your login, revoke access in your Google account connections settings or contact us to stop the connection and request deletion of retained connection and shop data. If you are a customer of a repair shop, contact that shop about the records it entered in ARI; you can also contact us for assistance.
Limited Use of Google user data
ARI uses Google user data obtained through this connection only to provide and maintain the calendar synchronization you request. It is processed on ARI’s Google Cloud/Firebase infrastructure for that purpose and is not transferred to unrelated integrations, advertising services or data brokers. ARI does not sell this Google data, use it for advertising or credit decisions, include it in shop statistics, or use it to train AI or machine-learning models. Human access is limited to your specific permission, security purposes, or legal obligations as permitted by Google’s policies.
ARI’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.
Security and retention of other ARI data
ARI uses authenticated account access and cloud infrastructure to protect stored information. We retain shop and account records to provide the service and support ongoing business records. Deleting a login does not automatically erase those records. Contact contact@ari.app to request access, correction or deletion of your information and to clarify which records should be removed. We may need to verify your authority over the account or shop before acting on a request. Records may need to be retained to meet legal obligations or resolve disputes; we will explain any applicable limitation when handling your request.
Changes and contact
We update this page when our data practices change and revise the date above. For questions about this policy, Google Calendar access, or deletion of stored data, email contact@ari.app.