DriveDeduct Privacy Policy
DRAFT for attorney review. Not yet in effect. Publish the approved version at https://drivededuct.app/privacy. It must match the App Store privacy labels and the Google Play Data safety form. Bracketed items need a decision.
Last updated: [DATE]
Magramane LLC ("we") makes DriveDeduct. This policy explains what we collect, why, and your choices. We do not sell or share your personal information for advertising, and the app has no ads or advertising trackers.
## What stays on your phone DriveDeduct keeps your records in an encrypted database on your phone. The following never leave your phone through our service: detailed GPS route traces, and photos of your dashboard, receipts and vehicles (except the moment a photo is read, below).
## What we collect and why | Data | When | Why | |---|---|---| | Email address (and your name, if you continue with Google) | You create an account | Sign-in, account recovery, service messages | | Trips and drives: dates, times, miles, start/end addresses, category, platform, notes, record fingerprints | You are signed in (cloud backup) | Back up and restore your records | | Vehicles: year, make, model, VIN, plate, team, use | Signed in | Back up your fleet | | Expenses, odometer readings (numbers), signature drawing and Trip confirmations | Signed in | Back up your records | | Delivery type, home state, accepted terms version and time | Signed in | Settings and proof of consent | | A photo you ask the app to read (VIN, odometer, receipt) | Each time you use photo reading | Read the value and return it to you; not stored by us | | A VIN you look up | Each lookup | Sent to NHTSA's public vehicle database to fill in vehicle details | | Subscription status and purchase history, linked to your account ID | You subscribe | Unlock paid features on your devices; billing itself is handled by Google Play or the App Store, and we never see your card | | Location | Only while a Trip is running | Measure your miles on the phone; only the resulting drive (start/end address, distance, times) is backed up |
Precise location is used in the background only while you have a Trip running, which the app shows with an ongoing notification.
## Service providers We use providers that process data only for us: Supabase (database and sign-in, [region]), Cloudflare (API hosting), Google (AI photo reading through the paid Gemini API, which does not use the images to train models [confirm current terms]), [Resend or Google Workspace] (sign-in emails), RevenueCat (subscription status), Google (optional "Continue with Google" sign-in), and Apple/Google (app distribution and payments).
## Retention and deletion Backed-up records are kept while your account exists so you can meet IRS record-keeping periods. Delete account in Settings permanently deletes your account and its cloud backup. Records on your phone are removed when you uninstall the app. [Backups of our database are purged within [N] days.]
## Your rights Depending on your state (for example California, Colorado, Connecticut, Virginia and others), you can ask to access, correct, delete or obtain a copy of your data; most of this is built into the app (export, edit by correction, delete account). We will not discriminate against you for using these rights. Contact privacy@drivededuct.app.
## Security Data is encrypted on your phone and in transit. Database rules let each user read only their own records, and records cannot be altered after they are saved.
## Children DriveDeduct is not for anyone under 18, and we do not knowingly collect children's data.
## Changes and contact We will post updates here and in the app. Magramane LLC · [mailing address] · privacy@drivededuct.app