Privacy Notice

This Auto Club App Privacy Notice governs your use of the AAA software application on a mobile device (“Auto Club App” or “App”) that was created by the Automobile Club of Southern California. You will need to review and accept its terms before this App can be downloaded. We want you to know how your personal information will be collected and used. A separate privacy notice would apply to information collected through other means including from the use of our website, AAA membership and insurance, AAA OnBoard telematics services, and affiliate partner products and services. You should consult those notices if necessary.

The Auto Club App improves on-the-go access to trusted AAA services including discounts, membership, insurance, travel, and Roadside Assistance.

 

Key Features Include

• Requesting Roadside Assistance
  
  
• Searching for nearby member discounts
  
  
• Booking hotel, flight, or rental car
  
  
• Accessing TripTik^® Travel Planner
  
  
• Finding cheap gas prices near you
  
  
• Finding member branch offices
  
  
• Viewing membership details and insurance policies
  
  
• Paying bills for membership and insurance
  
  
• Getting an insurance quote for auto, home, and other products, where available
  
  
• Getting instant battery replacement quotes, where available
  
  
• Finding AAA Approved Auto Repair facilities

 

WHAT INFORMATION DOES THE AUTO CLUB APP COLLECT AND HOW IS IT USED? 

User Provided Information

The Auto Club App collects the information you provide when you download and register the application. Registration is mandatory to use the app’s basic features. When you register and use the Auto Club App, you provide:

(a) your name, email address, age, ZIP Code, username, password, and other registration information

(b) transaction-related information, such as when you book travel (e.g., flight, hotel, or car), make purchases, respond to offers, download or use our applications

(c) information you provide when you contact us for Roadside Assistance such as vehicle information

(d) payment card and bank account information for membership and insurance payments and other purchases such as travel when using the application, and,

(e) information you enter into our system when using the application, such as a PIN if you select the “keep me logged in” feature

We may also use the information you provide to contact you from time to time with important information, required notices, renewal reminders, and marketing promotions.

 

Automatically Collected Information

In addition, the Auto Club App may collect certain information automatically, such as:
 

• Geolocation
  
  
• The type of mobile device you use
  
  
• Your mobile device’s unique device ID
  
  
• The IP address of your mobile device
  
  
• Your mobile operating system
  
  
• The type of mobile Internet browsers you use
  
  
• Information about the way you use the App

 

DOES THE AUTO CLUB APP COLLECT PRECISE REAL TIME LOCATION INFORMATION OF THE DEVICE?

Yes. The Auto Club App collects precise information about the location of your device by using your phone’s Global Positioning Satellite (GPS) chip. We use your location information to provide requested roadside service and for location services such as displaying nearby member discounts, the closest branch office, nearby gas stations with cheap gas, the TripTik® Travel Planner mapping feature and travel planner. In order to provide these location services to you, your information is shared within the AAA Federation including with independent AAA motor clubs, and with other independent third-party providers.

You may at any time opt out from allowing us to access your location data by managing your preferences on your phone’s settings and choosing when to share location information through the Auto Club App. You will be given the following options:

• to never share your location information
  
  
• to be asked to share location information the next time you use the App
  
  
• to share location information only when using the Auto Club App; and
  
  
• to always share your location information even when the Auto Club App is not being used.

For more information, please see the section below titled “Stop Collection of Information by the App.”

DO THIRD PARTIES SEE OR HAVE ACCESS TO INFORMATION OBTAINED BY THE AUTO CLUB APP?
 

Yes. We will share your information with third parties in the ways that are described in this Notice.

We may also disclose “User Provided” and “Automatically Collected Information”:

• as required by law, such as to comply with a subpoena, or similar legal process
  
  
• when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request
  
  
• with our service providers who work on our behalf
  
  
• if the Automobile Club of Southern California is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email or a prominent notice on our website of any change in ownership or use of this information, as well as any choices you may have regarding this information
  
  
• to analytics companies as described below under the section titled “Automatic Data Collection and Advertising”

AUTOMATIC DATA COLLECTION AND ADVERTISING

We may work with analytics companies to help us understand how the application is being used, such as the frequency and duration of usage. These companies do not collect personally identifiable information for their analysis. We do not share your information with advertisers and third-party advertising networks.

STOP COLLECTION OF INFORMATION BY THE APP

There are multiple options for users of the Auto Club App:

 

STOP ALL INFORMATION COLLECTION BY UNINSTALLING THE AUTO CLUB APP

You can stop all collection of information by the Auto Club App by uninstalling the application. You may use the standard uninstall processes that are available as part of your mobile device or via the mobile App marketplace or network. Doing so will remove the App and its benefits.

You may at any time opt out from further allowing us to have access to your location data by managing your phone’s settings as described above.

DATA RETENTION POLICY, MANAGING YOUR INFORMATION

We will retain user-provided data for as long as you use the App and for a reasonable time thereafter. Please note that some or all of the user-provided data may be required in order for the App to function properly, and we may be required to retain certain information by law.

CHILDREN

We do not use the Auto Club App to knowingly solicit data from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child provided us information without consent, contact us at mobileappsupport@aaa-calif.com.

SECURITY

We are concerned about safeguarding the confidentiality of your information. We maintain physical, electronic, and procedural safeguards to protect information we process and maintain. For example, we limit access to this information to authorized employees and contractors who need to know that information in order to operate, develop or improve the Auto Club App. We review the information security practices of vendors with whom we share personal information. Please be aware that, although we make every effort to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

CHANGES

This Notice may be updated from time to time for any reason. We will notify you of changes by posting the new notice. You are advised to consult this Notice regularly for any changes.

YOUR CONSENT

By using the services, you are consenting to our processing of user-provided and automatically collected information as set forth in this Notice now and as amended by us. "Processing” means using cookies on a computer/handheld device or using or touching information in any way, including, but not limited to, collecting, storing, deleting, using, combining, and disclosing information.

CONTACT US

If you have any questions regarding privacy while using the Auto Club App, or have questions about our practices, please contact us via email at mobileappsupport@aaa-calif.com. For questions about the California Consumer Privacy Act, please contact us via email at aaa-privacy@aaa-calif.com.

(CCPA)

RESIDENTS OF CALIFORNIA CALIFORNIA CONSUMER PRIVACY ACT RIGHTS
 

Starting January 1, 2020 California consumers have new privacy rights to their personal information (PI) including the right to not be discriminated against for exercising any of these rights. You can request:

• a copy of your PI (subject to statutory exceptions) that we collected in the past 12 months including a disclosure of the categories of PI collected, sold and shared for a business purpose
  
  
• to delete PI we collected from you unless we need to keep it for certain reasons. For example, if you are a member, we need your PI to provide your membership. We can also keep your PI when we use it internally; 
  
  
• to opt-out of the sale of your PI if we sell it
   

You can request your information twice in a 12-month period. We must respond and provide your information within 45 days unless we inform you that we need more time in which event we will have 90 days to respond.   

You can exercise your privacy rights and make a CCPA request.  We will first confirm that you are a California consumer and authenticate your identity through a third party. To designate someone to make a CCPA request on your behalf, or to make a CCPA request over the phone, please call (833) 612-6032.

The CCPA also requires that we disclose the categories of PI collected, sold and shared for a business or commercial purpose during the past 12 months.  Our practices are described below and in the following table/matrix version.

Please note that certain personal information is exempt from the CCPA.  For example, PI collected pursuant to a federal law called the Gramm-Leach-Bliley Act or California’s Financial Information Privacy Act is exempt.  As a result, insurance information would not be disclosed.  Other exceptions include medical information and protected health information; PI used to generate a consumer report and PI under the Driver Privacy Protection Act.  Additionally, employee and job applicant PI and business-to-business PI need not be disclosed at this time.  For information regarding our CCPA Worker Privacy Notice, visit our Career Site or email jobs@aaa-calif.com.

The CCPA sets forth 11 categories of personal information as set forth below. 

CATEGORIES OF PERSONAL INFORMATION

 

Category A.  Identifiers

Identifiers such as real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, SSN, driver’s license number, passport number or other similar identifiers. 

 

Category B.  Civil Code 1798.80 Information

Information that identifies, relates to, describes, or is capable of being associated with, an individual or household, including, but not limited to:

• name
  
  
• signature
  
  
• social security number
  
  
• physical characteristics or description
  
  
• address
  
  
• telephone number
  
  
• passport number
  
  
• driver's license or state identification card number
  
  
• insurance policy number
  
  
• education, employment, employment history
  
  
• bank account number
  
  
• credit card number, debit card number, or any other financial information
  
  
• medical information, or health insurance information
  
  
• “Personal information” does NOT include publicly available information that is lawfully made available to the public from federal, state, or local government records
   

Category C.  Characteristics  

Characteristics of protected classifications under California or federal law such as race, color, sex, age, national origin, disability, citizenship status, genetic information, ancestry, sexual orientation, gender identity or expression, religion, medical conditions, AIDS/HIV, marital status, military/vet status, political affiliations or activities, victims of domestic abuse and/or assault/stalking. 

 

Category D.  Commercial Information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

 

Category E.  Biometric        

Records used to uniquely identify a person including fingerprints, retinal scans, facial scans, signatures, handwriting analysis and voice pattern recognition.  

 

Category F.  Internet Activity

Internet or other electronic network activity information, including but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application or advertisement.

 

Category G.  Geolocation   

Used to identify an electronic device’s physical location, such as GPS coordinates. 

 

Category H.  Sensory

Audio, electronic, visual, thermal, olfactory, or similar information.

 

Category I.  Employment Related    

Professional or employment-related information such as job application, salary and job performance information.

 

Category J.  Education        

Pertaining to school, grades or years attended.

 

Category K.  Inferences        

Inferences drawn from any of the above identified information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities and aptitudes

COLLECTION OF PERSONAL INFORMATION

 

During the prior 12 months, we would have collected Personal Information for each of these categories (A-K).  However, the fact that we collected information for a category does not mean that we collected all the information in the category. For example, category A (identifiers) includes name, address, driver’s license, social security number, passport, etc.  If we state that we collect this category of information, it does not mean that we collected every one of these identifiers.  Frequently, we only collect name and contact information and don’t collect more sensitive information such as driver’s license, social security number or passport unless it is required for the service requested such as a driver’s license for DMV services.  While category C (characteristics) includes a broad list of characteristics of protected classifications (e.g., genetic information or sexual orientation, etc.) if we collect information for this category, it is generally limited to sex and/or age.  

When Using our Products and Services

 

Below, you will find a description of our products and services and the information that should be collected for each one.

If you purchased Membership, we should collect your name, gender, contact information and payment information.  If you purchased an associate membership for someone else, similar information about these individuals should be collected, too. (Categories A, B and C).

A full listing of member benefits is found in the Member Guide.  Generally, for any service we will request your name, proof of membership and contact information.  (Categories A and B).

When you request Emergency Roadside Service we collect your phone number, name, breakdown location and the nature of your request. When the independent service provider arrives, you should be asked to provide identification such as a driver’s license for authentication. Information about your transaction (vehicle information and nature of service) is provided to us through the independent service provider.  We may also collect information about your membership and transaction from AAA or other AAA motor clubs in the AAA Federation if you belong to another AAA motor club. (Categories A, B and D).
 

We offer various Automotive Services 
 

• For AAA Approved Auto Repair (AAR), you generally provide your name, contact information, and membership number.  We may also collect your transaction history with the AAR facility including your vehicle information (e.g., make and model). (Categories A, B and D).
  
  
• For the Car Buying service, we generally collect your name and contact information, membership number, zip code and information about the vehicle(s) you were interested in. (Categories A, B and D).
  
  
• For Driver Training, you should generally provide the name of the driver (such as your teen driver) and contact information. (Categories A and B).
  
  
• For Smog Testing Centers, we generally collect your name, contact information, membership number, vehicle information (year, make, model and VIN), results of the test and driver’s license number. (Categories A, B and D).
   

We offer many additional Member Benefits including:
 

Financial Services
 

• If you applied for the AAA Member Rewards Credit Card, you would have provided your personal information directly to our partner.  The information you share with them could include your membership number, name, contact information, citizenship, country of residence, date of birth, employment status, (employment & financial information) total annual income and source, monthly housing payment, and social security number. (Categories A, B, C and I).
  
  
• If you purchased a AAA MemberPay Visa® Prepaid Card (a reloadable prepaid card), you would have provided your personal information directly to the card provider.  The information you share with them could include your name, member number, date of birth, social security number, and contact information. (Categories A, B and C).
  
  
• If you purchased Foreign Currency, you would have provided your personal information to the third-party provider directly online or we would have entered this information into the third-party provider’s system.  The information you share with them could include your name, contact information, identification card information (passport or driver’s license), and social security number.  (Categories A and B).
   

Branch Services
 

• If you used Notary Services, you generally would have provided your name, address, signature, driver’s license and we may have taken your fingerprint. (Categories A, B and E).
  
  
• If you requested a DMV transaction, we should collect your name, address, phone, vehicle information, and driver’s license to provide to the DMV.  If you requested a handicap placard, we would also collect medical information. (Categories A, B, and C).
  
  
• If you requested an International Driving Permit, you should have provided your name, contact information, driver’s license, birthplace city, and date of birth. (Categories A, B and C).
   

Discounts & Event Tickets
 

• If you purchased Entertainment & Attraction Tickets, we would have collected your ticket request, name, contact information, and membership number to provide to the service provider honoring your request. (Categories A and B).
  
  
• If you purchased from our Discounts & Rewards partners online through our website, you would have provided your name, member number, contact information and payment information directly to our partner.  (Categories A and B). 
   

ID Theft Protection
 

• If you enrolled in ProtectMyID® identity theft protection, you would have provided your personal information directly to our partner.  The type of information you share with them depends on the product, but can include your name, membership number and zip code, contact information, date of birth and social security number and payment information.  (Categories A, B and C).
   

Travel Products & Services
 

• If you requested a quote or purchased Travel products or services, you would have provided your name, address, phone, date of birth, passport, known traveler number and payment card information to us and/or our travel partners. If travel was purchased for another person, we would have normally collected similar information about them.  We would have your travel itinerary. (Categories A, B, C and D). 

When Contacting Us
 

When you contact us, we should ask you to provide and/or confirm your contact information. (Categories A and B).  
 

If you visited a branch or our administrative offices, video surveillance may have recorded you.  We should have asked you to check in by swiping your membership card or otherwise providing your name and contact information.  To service your request, we would have collected personal information (as described previously). (Categories A, B, E and H).  
 

If you attended an Auto Club special event such as a motorsports or travel event, we may have collected your name and contact information from you. (Categories A and B).
 

If you visited online or used the Auto Club App, your internet/online activity and online identifier would have been collected.  This includes your geolocation when using the App and your membership number. To service your request, we would have collected personal information (as described previously). (Categories A, B, F and G).   
 

If you called, your phone number may have been automatically collected and your call may have been recorded.  To service your request, we would have collected personal information (as described previously). (Categories A, B, and H).  

Conducting Business

 

Marketing & Understanding Consumers
 

We collect information to better understand consumers and to more effectively market our products and services to members and potential members.
 

This includes collecting internet activity information for those online or using the Auto Club App.  We collect information for online behavioral advertising for web users and analytics purposes.  (Categories A and F).
 

We purchase from third party vendors who are in the business of collecting personal information such as name, contact information, date of birth, demographic information and attributes. We may use this information with other collected information to create a profile, model or propensity score. (Categories A, B, C, D, I, J and K).
 

We may collect from our AAA affiliated partners and providers information about your transaction with them.  For example, when you use your membership card for a member discount, the third-party partner could share an identifier such as your name, contact information and transaction information.  This lets us better determine the value and use of member benefits and to more effectively offer our products and services. (Categories A, B and D). 
 

As a membership organization, we regularly measure member satisfaction by surveying members.  (Categories A, B and D).

 

Security Purposes
 

Our efforts to safeguard personal and company information, facilities and people require that we monitor and collect information by different means and from many environments. This could include through video surveillance or internet/online activity for cyber security purposes.  Sources may include from the consumer, third party security providers and/or government entities including law enforcement.  (Categories A, B, E, F and H).

 

Transactional Purposes
 

To fulfill a transaction or request or to process a payment, we may collect information from you and service providers.  For example, with any purchase we collect payment information depending on the method of payment.  This could include payment card information or financial account information from a check or with an ACH enrollment. (Categories A, B and D).

 

Legal, Regulatory, Compliance Purposes
 

We may collect personal information for legal, regulatory and compliance purposes.  For example, we may collect your contact information from third party sources (government entities, law enforcement, regulatory bodies and/or private businesses) to ensure that we have your current contact information (e.g., physical address) and to honor your requests to not be contacted or solicited.  For example, we purchase Do Not Call lists to honor the wishes of those who do not wish to be called for marketing purposes. (Categories A, B and C). 

 

Business Purposes
 

We collect personal information for other business purposes and to operate as a business and membership organization. For example, we purchase National Change of Address lists to ensure that we have a current mailing address. (Categories A, B, C and D).

SALE OF PERSONAL INFORMATION
 

During the prior 12 months, we would have “sold” Personal Information for Categories A-D to offer a Club benefit (the AAA credit card) to members. The Auto Club receives a monetary benefit when members use their AAA credit card which is offered to members through our partner as a member benefit.  Such arrangements help to keep annual membership dues low.  For purposes of the CCPA this could be considered to be a “sale” of personal information.  Our partner can only use the information we share  to offer you the credit card.   In this instance, information shared with our partner’s marketing service provider should include name, membership information, contact information, and date of birth.  Information would not be sent for those who had requested to not be solicited. 
 

During the prior 12 months, we would have shared Personal Information for a business purpose with the types of third parties and for the categories of PI listed below

When Using our Products and Services
 

AAA Federation
 

In servicing members or those using our services, personal information could be shared within the AAA Federation of companies.  For example, transactional information from a service request for an out of territory member would be shared with the national office and that member’s motor club.  (Categories A, B and D).

 

ERS Provider
 

For Emergency Roadside Service (ERS), we generally share your name and contact information, breakdown location, membership information, vehicle information and nature of your request with an independent ERS provider. (Categories A, B and D).

 

Automotive Service Provider 
 

• For AAA Approved Auto Repair (AAR), we generally share your name and contact information, membership information, vehicle information and nature of your request with an independent AAR facility. (Categories A, B and D).
  
  
• For the Car Buying service, your name and contact information, and information about the vehicle you were interested in would have been shared with participating automotive dealers. (Categories A, B and D).
   

Financial Service Provider
 

• If you applied for the AAA Member Rewards Credit Card, you would have provided and shared your information to our financial partner directly either online or via a terminal or device that allows you to share your information directly with the provider.  We don’t otherwise share your information with the provider directly in this circumstance.  The information you share could include your membership number, name, contact information (phone, email and address), citizenship, country of residence, date of birth, employment status, (employment & financial information) total annual income and source, monthly housing payment, and social security number. (Categories A, B, C and I).
  
  
• If you purchased a AAA MemberPay Visa® Prepaid Card (a reloadable prepaid card), you would have provided your information to the card provider directly either online or via a terminal or device that allows you to share your information directly with the provider.  We don’t otherwise share your information with the provider directly in this circumstance.  The information you share could include your name, member number, date of birth, social security number, and contact information.  (Categories A, B and C).
  
  
• If you purchased Foreign Currency, you would have provided and shared your information to the third-party provider directly online or we would have entered this information into the third-party provider’s system. We don’t otherwise share your information with the provider directly in this circumstance.  The information you share could include your name, contact information, identification card information (passport or driver’s license), and social security number.   (Categories A and B).
   

Branch Services
 

• If you used Notary Services, you generally would have provided your name, address, signature, driver’s license and we may have taken your fingerprint.  Notaries are subject to independent professional notary association standards and your information could be shared with a regulatory body or third party in the event of a professional audit. (Categories A, B and E).
  
  
• If you requested a DMV transaction, we should have collected your name, address, phone, vehicle information, and driver’s license to provide to the DMV.  If you requested a handicap placard, we would also collect medical information to provide to the DMV. (Categories A and B).
   

Discounts & Event Tickets Provider
 

• If you purchased Entertainment & Attraction Tickets, we would have collected your ticket request, name, contact information, and membership number to provide to the service provider honoring your request.   (Categories A and B).
  
  
• If you purchased from our Discounts & Rewards partners online through our website, you would have provided your information directly to the partner.  The information you share could include your name, member number, contact information and payment information.  (Categories A and B). 
   

ID Theft Protection Provider
 

• If you enrolled in ProtectMyID® identity theft protection, you would have provided your personal information directly to our partner.  We don’t otherwise share your information with the ID Theft provider in this circumstance.  The type of information you share depends on the product, but can include  your name, membership number and zip code, contact information (address, phone), date of birth and social security number and payment information. (Categories A, B and C).
   

Travel Service Provider
 

• If you requested a quote or purchased Travel products or services, you could have provided your name, address, phone, date of birth, passport, known traveler number and payment card information to us and/or our travel partners. If travel was purchased for another person, we normally would have shared similar information about them, too. (Categories A, B, C and D).

Conducting Business
 

Marketing Service Provider
 

We share information with service providers to market our products and services to members and potential members.  Your name, contact information, membership information, age/sex, and a profile about you could be shared depending on the method of solicitation.  (Categories A, B, C, D and K).
 

We share information to market the AAA credit card.  Information that would be shared with our partner’s marketing service provider includes name, membership information, contact information and date of birth. Information would not be sent for those who had requested to not be solicited.  (Categories A, B, C and D).
 

We collect internet activity information for those online or using the Auto Club App and share such information with providers for email marketing, online behavioral advertising and analytics purposes.  (Categories A and F).
 

As a membership organization, we regularly measure member satisfaction by surveying members.  We may share your contact information with those who provide these services. (Categories A and B).
 

 

Security Purposes
 

Our efforts to safeguard personal and company information, facilities and people require that we monitor and collect information by different means and from many environments and share information with service providers that assist in this regard. This could include through video surveillance or internet/online activity for cyber security purposes. In some circumstances, personal information may be shared with law enforcement, and security providers.  (Categories A, B, C, E, F and H).

 

Transactional Purposes
 

To fulfill a transaction or a request or to process a payment, we share information with various service providers.  For example, payment information such as payment card information or financial account information from a check or with an ACH enrollment would be shared with financial institutions and those service providers that process payments. (Categories A, B and D).

 

Legal, Regulatory, Compliance Purposes
 

We share personal information with third parties (government entities, law enforcement, regulatory bodies and/or private businesses) if required for legal, regulatory and compliance purposes and share with those that assist us in responding in such circumstances.  For example, we could be obligated to share your name, contact information, and other information in the event of a regulatory investigation or in the event of litigation.  (Categories A, B, C and D). 

 

Business Purposes
 

We share personal information with service providers that assist us in operating our business and membership organization. This could require sharing personal information for audit, accounting, financial or other professional reasons.  (Categories A, B, C and D).

California Shine the Light Law Rights
 

Apart from the CCPA, California residents can request information regarding the personal information that a company they do business with shares with third parties for direct marketing purposes during the past year.  To request a copy, please contact aaa-privacy@aaa-calif.com and include “SB27 Request" on the subject line.