The fine print

Privacy Policy

Last updated October 24, 2026

The short version

1. Who we are

TesKit ("TesKit", "we", "us") makes the TesKit app for iPhone and the website at teskit.app (together, the "Service"). TesKit shows your Tesla live on a map, saves your trips if you choose, keeps a history of Sentry activity, and sends you alerts about your car. TesKit is available for Tesla accounts in North America and is not affiliated with Tesla, Inc.

This policy explains what information the Service collects, why, who helps us run it, how long we keep it, and the choices you have.

2. What we collect

Account information

When you sign in with Apple or Google, we receive your name, your email address (or the private relay address Apple creates if you choose to hide yours), and an identifier for your sign-in. Sign-in is handled by Google Firebase Authentication.

Your Tesla connection

You connect Tesla by signing in on Tesla's own page. TesKit never sees your Tesla password. Tesla then gives us:

Vehicle information

For each car your Tesla account can access, we receive its name, model, whether you're its owner or a driver, whether the owner shares its location with drivers, whether TesKit's virtual key is installed, and its software versions. We also receive its VIN, which we store only encrypted and as a keyed hash used to match your car's data to it. The VIN isn't shown in the app and isn't written to logs.

Live vehicle data

Once TesKit's virtual key is on a car, the car sends data to TesKit using Tesla Fleet Telemetry when it changes:

We keep the latest values to show your car live and use them to detect trips and Sentry activity and to send alerts.

Trip history

When Save trip history is on for a car, we save each drive's route (locations with their time, heading and speed), its distance, and its top and average speed. You can turn this off for any car, and real cars start with it off until you choose.

Sentry activity

When Sentry notices something, we save when it happened, whether it was activity or an alarm, and how many times Sentry was triggered.

Alerts

If you allow notifications, we store your device's push token and whether it's a test or App Store build, your alert choices for each car, your quiet hours, and your device's time zone so quiet hours follow your clock.

Technical information

Like any online service, our hosting provider processes your IP address and basic request details to deliver the Service, limit abuse (for example, by rate limiting), and keep it secure. We keep a sample of error and request logs to fix problems; they leave out VINs and locations.

What we don't collect

TesKit doesn't use your phone's location, contacts or photos, doesn't use advertising identifiers, and doesn't track you across other apps or websites. The app contains no analytics or advertising code.

3. How we use it

We don't sell your information, share it for advertising, or use it to build profiles about you.

4. Who we share it with

These companies help us run the Service and process information only on our behalf, under their own security and privacy commitments:

ProviderWhat it does for TesKit
CloudflareHosts the TesKit service, its database and storage, and this website.
Google Firebase AuthenticationHandles signing in with Apple or Google.
TeslaProvides your vehicle information and live data, under the permissions you approve. Tesla's own privacy policy covers your Tesla account.
Oracle Cloud InfrastructureRuns the server that receives your car's live data and passes it to TesKit.
Apple Push Notification serviceDelivers alerts to your iPhone. An alert's text includes your car's name and what happened.

People who share a car. If someone else's Tesla account can access the same car (for example, an owner and a driver) and they connect it to TesKit, they see that car's live data, trips and Sentry activity, just as you do. Each person chooses their own alerts. If an owner hides a car's location from drivers, TesKit doesn't show it to them.

Legal reasons. We may disclose information if the law requires it, or to protect the rights, property or safety of TesKit, our users or others.

Business changes. If TesKit is involved in a merger, acquisition or sale of assets, information may be transferred as part of it, and this policy will continue to apply to it.

5. How long we keep it

Disconnecting Tesla deletes your Tesla tokens and erases your cars and their trips and Sentry activity, unless another TesKit account still shares a car. We keep a short record that the connection ended, with keyed hashes of your Tesla account identifier and your cars' VINs and the date, so that data arriving afterwards is discarded. After you delete your account, we keep only an internal account number and your sign-in identifier, marked as deleted, so the account stays closed.

Deleted information may remain in our database provider's recovery copies for a short time, generally no more than 30 days, before it's gone for good.

6. Security

Everything the app, the website and your car send to TesKit is encrypted in transit. Your car's connection to our telemetry server is authenticated with the car's own Tesla-issued certificate. Tesla access tokens are encrypted at rest with AES-256-GCM, and VINs and Tesla account identifiers are stored as keyed hashes. Every request is checked against the cars your account may see. No system is perfectly secure, but we work hard to protect your information and will tell you if a breach affects it, as the law requires.

7. Your choices and rights

You control most of your information directly in the app:

Depending on where you live, you may also have the right to request access to or a copy of your information, to correct it, or to have it deleted. To make a request, email us at the address below. We'll confirm the request comes from you before acting on it, and respond within 45 days. We won't treat you differently for using your rights.

8. California residents

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect, use and disclose; to request deletion and correction; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information. In the last 12 months we collected the categories described in section 2: identifiers (name, email, account and device identifiers), vehicle information, precise geolocation of your car (sensitive personal information), and internet activity limited to request logs. We disclose them only to the service providers in section 4, for the purposes in section 3. We don't sell or share personal information as those terms are defined in California law, and we use sensitive personal information only to provide the Service you ask for. You can use an authorized agent to make a request.

9. Children

TesKit is meant for adults and isn't directed to children under 13. We don't knowingly collect information from children under 13. If you believe a child has given us information, contact us and we'll delete it.

10. This website

teskit.app sets no cookies and loads no analytics, advertising, fonts or scripts from other companies. Cloudflare, which hosts it, processes your IP address and request details to deliver pages and protect the site.

11. Changes

We'll update this policy when the Service changes, and change the date at the top. If a change materially affects how we use information we already have, we'll tell you in the app before it takes effect.

12. Contact

Questions or requests about your privacy: support@teskit.app. TesKit is based in the United States, and the Service stores and processes information there.