Privacy Policy

This Privacy Policy explains how Duskfield Studios LLC ("we", "us"), the maker of OdometerIQ ("the app"), collects and uses information when you use our website and application.

1. What we collect

• Account — your name, email address, a password hash (never the password itself), your timezone, and, if you sign in with Google or Apple, the account identifier they give us and your Google profile photo. A profile photo, if you add one.
• Drives — start and end points and addresses, the route, distance, times, vehicle, purpose, notes, and which version of the app recorded the drive.
• Expenses and photos — trip expenses (amount, category, note) and receipt photos; odometer readings and odometer photos.
• Your setup — vehicles, work profiles and hours, saved places, custom purposes, mileage-rate settings, reports, and report recipients (name, email, company).
• Route planner — customer and stop lists you add or import (names, addresses, notes, and any CRM IDs in the import).
• Teams — your organization, team, role and title, invitations, and an admin activity log.
• Subscription — which store handled payment (Stripe, Apple or Google), plan, status, billing period and the store’s identifiers. We never see card numbers or store passwords.
• Device and technical data — a push-notification token; on the mobile app a one-way hash of a device identifier (Android’s device ID or an iPhone install ID), used only so each person gets one free trial; IP addresses, which our servers use for rate limiting and which appear in server logs; and crash and error reports.
• Diagnostics you switch on — if you turn on GPS debug capture, the raw GPS points and phone motion readings for your drives, kept 14 days, to help us fix tracking problems.

2. How we use it

To track and classify drives, keep your mileage log, build reports, sync your devices, run teams, take payments, give each person one free trial, send the emails you need or ask for (verification, password reset, welcome, reports you send, team invitations), send notifications you allow, protect the service from abuse, and fix errors. We do not sell your data and do not use it for advertising.

3. Location & drive data

If you turn on automatic tracking, the app uses your phone’s location, including in the background, and its motion sensors to detect and record drives. You can turn tracking off or switch to manual entry at any time, and you control location access in your device settings.

To show addresses and maps, some location data goes to mapping services (section 5): the coordinates of a drive’s start and end to turn them into addresses, the addresses or place names you type when searching, imported customer addresses to place them on the map, and stop coordinates to work out driving routes. Map tiles load directly from OpenStreetMap on your device, so OpenStreetMap sees your IP address and the area you’re viewing. These services don’t receive your name, email or account.

4. Teams and employers

If you join an organization, its managers and admins can see your name, email, title and team, and your business drives from the day you joined — including addresses, routes and notes — plus the miles and reports built from them. They do not see your personal drives. The organization’s admin activity log records invitations and membership changes.

5. Who else receives it

We share data only with these service providers, each for its stated purpose, with people you choose (such as report recipients and your organization), and with authorities when the law requires it.

• Railway — hosts our servers, database and cache.
• Cloudflare — serves our website, stores your photos and report files (R2), and counts page views on the website with Cloudflare Web Analytics (no cookies, no cross-site tracking).
• Photon (Komoot), OpenStreetMap, Foursquare and Google Places — turn coordinates into addresses and search for places and addresses.
• OSRM (the public routing server run by the OSRM project) — receives stop coordinates to work out driving routes.
• Stripe — web payments. Apple and Google — App Store / Google Play purchases, and sign-in if you use them.
• Resend — sends our emails, including reports you send to the people you choose.
• Expo (650 Industries) — delivers push notifications via Apple and Google (Firebase Cloud Messaging) and delivers app updates.
• Sentry — receives crash and error reports from the app, website and server. We configure it not to send request contents, page query strings, or session recordings.

Reports you export or email are yours to share with whomever you choose, such as your accountant.

6. Security

All traffic uses HTTPS. Drive addresses, routes, saved-place and customer addresses and notes are encrypted at rest (older records are encrypted as they are next saved); coordinates are not. Passwords are hashed. Photos are private and are shown only through short-lived links to people allowed to see them. Sign-in tokens are kept in the iOS Keychain / Android Keystore on mobile, and in your browser’s local storage on the web.

7. Retention & deletion

• Your data is kept while your account is open. You choose how long route maps are kept in Settings; deleted drives are kept 30 days so you can restore them, then removed; GPS debug data is kept 14 days.
• Export your data at any time in Settings → Privacy & account in the app, Account & data on the web, even without a subscription.
• Deleting your account (Settings → Privacy & account in the app, Account & data on the web, or our deletion page) permanently removes your account, drives, photos and everything else at once, cancels a web subscription, and removes your email from your organization’s activity log. App Store and Google Play subscriptions must be cancelled in the store. If you are the only admin of a team with an active plan, make someone else admin or cancel the plan first.
• To keep the one-free-trial-per-person rule, we keep your normalized email address and hashed device identifier after deletion, linked to nothing else.
• Server logs (which include IP addresses) are kept for up to 30 days. Deleted data can remain in our host’s database backups until they expire.

8. Your rights

You can access and export your data, correct it, delete it, and object to or ask us to limit its use. California, Washington, Nevada, EU and UK residents have these rights by law; EU/UK residents can also complain to their data protection authority. Most of this you can do in the app; otherwise email us and we’ll respond within 30 days (45 where the law allows). We won’t treat you differently for using these rights.

9. Children

OdometerIQ is a business tool for adults and is not directed to children. You must be 18 (or the age of majority where you live) to use it. If you believe a child has an account, email us and we will delete it.

10. Contact & changes

Duskfield Studios LLC, 2108 N St Ste N, Sacramento, CA 95816. Email ceo@duskfieldstudios.com, or visit www.duskfieldstudios.com. We’ll tell you about material changes in the app or by email before they take effect.