Introduction

DayRoute (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application DayRoute (the “App”).

We are an Australian company and operate in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Information We Collect

Information stored on our servers

Email address: We collect your email address when you create an account. This is used solely for authentication (sending magic link login emails) and to contact you about your account if necessary.

Information stored on your device only

The following data is stored locally on your device and is NOT transmitted to or stored on our servers:

Receipt images and scanned data
Expense and income records
Client information (names, addresses, phone numbers)
Job details and schedules
Invoice data
Vehicle logbook entries and trip data
App settings and preferences

Device permissions

The App may request access to the following device features. These are optional and you can deny or revoke access at any time in your device settings:

Camera: To scan receipts. Images are processed and stored on your device only.
Location: For route planning and vehicle logbook trip tracking. Location is only accessed while using the app or when you explicitly start trip tracking.
Calendar: To import appointments from your device calendar. Calendar data is read locally and not transmitted to our servers.
Contacts: Optional, to auto-fill client details. Contact data is read locally and not transmitted to our servers.

How We Use Your Information

We use the information we collect for the following purposes:

Authentication: Your email is used to send magic link login emails via Supabase Auth.
App functionality: Device data (stored locally) powers features like route planning, job scheduling, expense tracking, and receipt scanning.
Route planning: Job addresses are sent to Google Maps for route calculation. Addresses are not stored by us.
Receipt scanning: Receipt images are sent to Google Gemini AI for text extraction. Images are processed and not stored by Google or us.
Support: If you contact support, we use your email to respond to your enquiry.

Third-Party Services

DayRoute uses the following third-party services:

Supabase: Authentication provider. Stores your email address and authentication tokens. Supabase Privacy Policy
Google Maps: Route planning and optimisation. Addresses are processed but not stored. Google Privacy Policy
RevenueCat: Subscription management. Receives an anonymous user ID and subscription status. RevenueCat Privacy Policy
Google Gemini AI: Receipt text extraction. Images are processed for text extraction only. Google Privacy Policy

Data Security

We implement appropriate security measures to protect your information:

Passwordless authentication eliminates risks associated with password storage and breaches.
All data transmission uses HTTPS encryption.
Sensitive business data is stored locally on your device, not on our servers.
Third-party services are vetted for security and compliance.

Your Rights and Controls

You have the right to:

Access your data: Your local data is accessible within the app. Contact us for data stored on our servers.
Delete your data: Uninstall the app to delete all local data. Contact us to delete your account and server-stored data.
Control permissions: Grant or revoke app permissions in your device settings at any time.
Manage subscriptions: Cancel or change your subscription through Apple ID settings.
Export data: Contact us if you need to export your data.

Data Retention

Server data: Your email address is retained as long as your account is active. Upon account deletion, your email is removed within 30 days.

Device data: Local data is retained until you delete it within the app or uninstall the app.

Children's Privacy

DayRoute is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@dayroute.com.au

Support: dayroute.com.au/support