TrueShift Privacy Policy

1. Summary

• Your shift, mileage, earnings, expense, vehicle and tax records are stored on your device. We do not upload them to our servers.
• We hold a small amount of account information so you can sign in, and subscription information so we can unlock paid features.
• Location is used only while a shift you started is active, to measure distance. We do not keep a history of where you have been.
• We collect limited usage and diagnostic information to keep the app working and understand how it is used.
• We do not sell your personal information and we do not use it for advertising.

2. Information you give us

Account information. When you create an account we collect your email address and a password, which is stored in protected form by our authentication provider. If you choose "Continue with Google", we receive your email address and the basic profile information Google provides for sign-in, such as your name and profile picture. We also assign your account an ID and record the date and time it was created.

Records you enter in the app. Shifts, hours, mileage, earnings by platform, expenses, vehicle details and tax settings. These are stored on your device (see section 4).

Waitlist sign-ups on virrazo.com. If you join the waitlist on our website, we collect:

• your email address;
• if you choose to provide them, your first name and a short note about what you drive and how you would use the app;
• which form on our site you signed up from, any referral tag in the link you followed (for example a campaign or source label), and the date and time you signed up;
• whether and when we have sent you an invitation or availability notice.

Waitlist entries are stored separately from app accounts. We use them only to tell you about the app's availability and to understand how people found us. To be removed from the waitlist, email info@virrazo.com.

Messages you send us. If you email us, we receive your email address and whatever you include in your message.

3. Information collected when you use the app

Location. If you grant location permission, the app uses your device's precise location while a shift you started is active, to measure the distance you drive. On Android this can continue while the app is in the background during an active shift; when it does, Android shows an ongoing notification. Location tracking stops when the shift ends. The app does not ask for Android's "allow all the time" background location permission.

Location readings are used on your device to calculate distance. The app is designed so that your location coordinates are not sent to our servers, and it does not keep a route or location history. Only the resulting mileage is saved to your shift record on your device. A most-recent position may be held temporarily on the device while a shift is active so that distance can be measured correctly.

Smart Catch (Bluetooth and motion). Smart Catch helps recover mileage you may have missed. With your permission it uses Bluetooth connection events for the car device you choose (for example, when your phone connects to or disconnects from your car) and your device's motion and physical-activity signals (for example, detecting that you are in a moving vehicle). On Android, Smart Catch can run in the background and shows an ongoing notification when it does. Smart Catch never adds a trip or shift on its own: every detection is shown to you to confirm or dismiss. Smart Catch detections, and the Bluetooth device you selected, are stored on your device.

Notifications. The app asks for notification permission so Android can display the ongoing notifications described above.

Usage and diagnostic information. The app and our website automatically send limited usage and diagnostic information to our hosting provider's analytics service. This includes:

• the pages or screens you view and how long the app is in use;
• error and crash reports, and performance measurements such as loading times;
• your device and browser type and your language setting;
• a randomly generated, short-lived session identifier that lets us group activity from one visit together;
• an approximate country, worked out from your device's time-zone setting (not from GPS or your location permission);
• the link or campaign that brought you to us, where available.

Like any online service, our providers also receive your IP address when your device connects to them. Recording of your screen or individual interactions (sometimes called session replay) is not enabled. This usage and diagnostic information does not include the shift, earnings, expense or mileage records stored on your device.

Permissions we do not use. The app does not request access to your camera, microphone, contacts or photo library.

4. Where your shift data is stored

Your shift, mileage, earnings, expense, vehicle, tax-setting and Smart Catch records are stored on your device, in the app's own storage. We do not upload these records to our servers, and we cannot view or recover them for you.

This means:

• If you uninstall the app, clear the app's data, or clear your browser's site data, these records may be permanently lost unless you have exported a backup yourself.
• Data on a device or browser may include records from more than one account used on that device.

Manual backup and export. In Settings you can use Export backup to save a backup file of your records, and Import backup to restore from one. You can also export your history as a file. You choose where those files are saved or shared, and you are responsible for keeping them safe. We do not receive a copy.

Android's own backup. Separately from the app's Export backup feature, Android has a built-in backup and device-transfer feature run by Google. Depending on your app version and your device settings, Android may include the app's on-device data in a backup stored in your Google account or copy it when you set up a new device. We do not control or have access to those backups. We plan to exclude the app's data from Android's automatic backup and device-to-device transfer in an upcoming release. Please do not rely on Android's backup to keep your records; use Export backup and Import backup instead. Any backup already held in your Google account is managed by Google through your Google account settings and is not immediately deleted by that change.

5. Subscriptions and payments

Paid features are sold as subscriptions through Google Play. Google processes your payment; we never receive or store your card or other payment details.

To confirm your subscription and unlock paid features, we receive from Google Play and store against your account: a purchase reference (purchase token), order ID, the plan purchased, subscription status, expiry or renewal date, auto-renew status and free-trial status. When you start a purchase we pass an account identifier to Google Play so the purchase can be linked to your account. We also keep a log of subscription events (for example purchase confirmed, renewed, cancelled or expired).

Subscriptions are managed and cancelled in Google Play. Google keeps its own records of your purchases under Google's privacy policy; we cannot change or delete those records.

6. How we use information

We use the information described above to:

• provide, maintain and improve the app and website;
• sign you in and keep your account secure;
• confirm subscriptions and unlock paid features;
• calculate your mileage, true hourly wage, deductions and related figures on your device;
• send account emails such as sign-up confirmation and password reset;
• tell waitlist members about the app's availability;
• respond to support requests;
• monitor reliability, fix bugs and understand how the app and website are used;
• comply with legal obligations and protect our rights.

7. Sharing and service providers

We do not sell your personal information. We do not share it with advertisers or use it for targeted advertising, and the app does not show ads.

We use service providers that process information on our behalf to operate the app and website:

• Lovable — hosting for the app and website, our backend platform, and usage and diagnostic analytics.
• Supabase — the database and sign-in infrastructure behind our backend, which holds account, subscription and waitlist records.
• Google — Google Sign-In (if you choose it), Google Play Billing for subscriptions, and Google Play services on Android for location and physical-activity detection on your device.

These providers may use their own infrastructure providers, and may process information in countries other than the one you live in.

We may also disclose information if required by law, to respond to valid legal requests, or to protect the rights, safety or property of Virrazo, our users or others. If Virrazo is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction.

8. How long we keep information

• Account and subscription records are kept while your account exists and are deleted from our systems when you delete your account (see section 9).
• Records on your device stay there until you delete them, clear the app's data or uninstall the app.
• Waitlist entries are kept until we have finished sending availability notices or you ask us to remove you, whichever comes first.
• Usage and diagnostic information is kept for as long as it is needed for the purposes in section 6. We have not set a fixed retention period for this information.
• Support emails are kept for as long as needed to deal with your request and maintain our records.

Copies may remain for a limited time in our providers' routine backups before they are overwritten.

9. Deleting your account and data

Delete your account. In the app, go to Settings, then Delete account. This permanently deletes your account from our systems, including your email address, account ID, any name or profile picture received from Google, and the subscription records we hold for your account. It cannot be undone. Step-by-step instructions are at https://virrazo.com/trueshift/delete-account, or you can email info@virrazo.com.

Deleting your account does not cancel a Google Play subscription. If you have an active subscription, cancel it in Google Play (Play Store, then Payments and subscriptions, then Subscriptions). Otherwise Google will continue to bill you. Deleting your account also does not delete the purchase records Google keeps.

Delete records on your device. Deleting your account does not erase the records stored on your device. To remove them, go to Settings, then Clear all data, or uninstall the app.

Waitlist. Email info@virrazo.com to be removed.

10. Your choices and rights

• You can turn location, Bluetooth, physical-activity and notification permissions on or off at any time in your device settings. Some features will not work without them.
• You can export, import and clear the records on your device in Settings.
• Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, or to object to certain uses. To make a request, email info@virrazo.com. We may need to confirm your identity before acting on it.

11. Security

Information sent between your device and our services is encrypted in transit, and access to the information we hold is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Records stored on your device are protected by your device's own security; keep your device locked and your exported backup files safe.

12. Children's privacy

The app is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

13. Changes to this policy

We may update this privacy policy from time to time. When we do, we will revise the effective date at the top of the page.

14. Contact us

If you have questions about this privacy policy or how we handle your data, contact VIRRAZO LLC at info@virrazo.com.