Privacy Policy

#1. Personal Information we collect

“Personal Information” means information that uniquely identifies, relates to, describes, or is reasonably capable of being associated with or linked to you, your household or your device. It doesn’t include information that has been de-identified or aggregated so that it can no longer reasonably be linked to you.

OdoWorks is built so that your log never reaches us (Section 2). The categories of Personal Information we collect are:

• Contact Information – If you write to us, your email address and any name, phone number or other contact details you include.
• Communication Information – The content of your messages to us and anything you attach to them (for example a screenshot), and our replies. Please don’t send us a backup file unless we ask: it holds your whole log.
• Usage Information – When you visit the Site, our hosting provider’s servers receive the technical data every website receives: your IP address, the date and time, the page requested, your browser’s type and version, the address of the page that linked to ours, and whether the request succeeded. When the App checks for an update, the update service receives the details in Section 4, row 8: a random ID (not tied to your name, account or log), the App’s version and platform, the update you have, and short error reports when an update fails to start.
• Commercial Information (once paid plans open) – When you buy a plan, Apple or Google processes the payment and tells us what was bought, when, in which country and at what price, with the store’s own transaction or subscriber identifier. We never receive your name, email address, payment card or billing address from them.

We don’t receive your log, your precise location, your contacts, your photos, your financial account details, government identification numbers, biometric or health data, or your browsing outside our Site.

#2. Information that stays on your phone

Everything you log is stored in the App’s own storage on your phone (“Your Log”). We don’t operate any account system, cloud database or server that receives, stores or analyzes it, and we can’t open it, recover it for you, or hand it to anyone else. Your Log includes:

• Your vehicles: year, make, model, nickname, color, ratings or targets, tank size and starting odometer, and, if you add them, the VIN, where and from whom you bought it, a loan, lease, price or value, tires, documents (insurance, registration, a license and the like, with their numbers, dates and photos), and the recalls found for its model.
• Rental and borrowed cars: the company, or whose car it is (as you type it), pickup and return, what you agreed to pay its owner, and condition photos.
• Your entries: fill-ups and charging sessions (date, time, odometer, amounts, prices, currency, station, address, map position, time zone, notes), maintenance, expenses, refunds, odometer readings, trips (where and why), gig pay, tolls, damage and condition photos, and photos of receipts and documents you attach; in Mexico, the facturas (CFDI) you attach and what the App reads from them.
• Border crossings: each one’s date and time, its odometer when you type one, and always the place you crossed into. A crossing found on a drive or a recorded trip is saved with its exact position, time zone and distance into the drive.
• An accident or incident you log, including the other drivers’ and witnesses’ details as you type them. Please enter other people’s details only as the law where you are allows and only to deal with the incident.
• Recorded trips and automatic tracking (when you turn them on): each drive’s GPS path (a point every few meters, with its time and speed) until you delete its trip or mark it Not a drive or Not my car; drives you haven’t sorted, for 90 days; the tracking library’s own record of your locations, for 3 days; the places your drives passed through (country, state, city): each move for 31 days, and the last time you were in each place until you erase everything; and, if you link your car, its Bluetooth name and address.
• Your settings and caches: region, units, currency, rates you type, reminders; looked-up exchange rates, past temperatures by rounded place, and the map’s cache of streets you’ve looked at (about 10 MB at most).
• Backups and shared files: with the automatic backup on, a daily copy of your log as a CSV file, and copies of files you export, in the phone’s cache.

Your Log is protected by your phone’s lock screen and the encryption your phone provides; the App adds none of its own.

Your phone’s own backup. If iCloud Backup (iPhone) or Google’s backup (Android) is on, your phone may copy the App’s data to your Apple or Google account, under their terms. On Android, Google’s backup leaves out photos and documents, drive and trip paths, automatic tracking’s drives and locations, a trip being recorded, and the map’s cache.

#3. How we collect Personal Information

• Directly from you – when you email us or otherwise contact us.
• Automatically – through our hosting provider’s server logs when you visit the Site, and through the App’s update check. The Site sets no cookies and runs no analytics (Section 8).
• From third parties – from Apple and Google: summary statistics about installs, anonymous crash and performance reports if you’ve allowed your device to share them with app developers, and, once paid plans open, purchase records. We don’t buy information from data brokers or receive it from advertising networks.

#4. What the App sends to outside services

The App connects to the internet only for the lookups below, sent from your phone straight to each service (not through us). Each request also carries your IP address, as every internet connection does. None includes your name or your log. Some carry something that could point to you: a precise location (rows 4, 5 and 10, which can be your home or work), the area of a map that follows the car (row 11), your VIN (row 2), or the random update ID that goes to Expo (row 8).

Never sent: your photos and receipts, what the camera sees while you scan and what’s read from it (photo reading and barcode scanning happen on the phone), your fill-ups, charging, maintenance, expenses or trips (beyond the places in rows 4, 5 and 10 and the rounded places of row 7), your settings and your files. The average fuel and electricity prices (from the U.S. Energy Information Administration), Canada’s (Statistics Canada), the EU’s (the European Commission’s Weekly Oil Bulletin), the UK’s, Norway’s, New Zealand’s and Western Australia’s (FuelWatch), Natural Resources Canada’s ratings, the maps of countries, states and cities, and the time zones are built into the App and arrive with its updates; the App never contacts their publishers.

Who handles the data. Expo processes update checks on our behalf. Google (ML Kit, and the maps service on Android) and Apple (the maps service on iPhone) handle their parts under their own privacy policies and may link a lookup to your phone or account. The other services are public services that answer the request and may keep ordinary server logs under their own terms; we don’t receive those logs.

#5. Permissions

The App asks for each permission only when you use the feature that needs it, and works without any of them. You can turn them off at any time in your phone’s settings.

• Location – “While using the app” to find a station or an address, add a place, or show where you are on a map. Two features use it in the background: trip recording (OdoWorks Pro), from Start until you tap Stop, with Android’s “Recording a trip” notification; and automatic tracking (Android), which asks for location “Allow all the time” and physical activity only when you turn it on, after the App explains what it collects, and then records your drives with the App closed and after the phone restarts. Nothing else uses location in the background.
• Nearby devices (Android) – only when you link your car’s Bluetooth for automatic tracking.
• Camera – to scan or photograph the pump, the odometer, receipts, invoices, tires, documents and your VIN’s barcode, only while the camera is open. Never the microphone.
• Photos – to choose an existing photo and, on Android, read where it was taken; on iPhone, to save an image you share to your photo library.
• Notifications – the reminders you turn on (such as maintenance due, renewals, a weekly summary of your driving, a monthly recap, welcomes to a new place), the trip recording’s notification and automatic tracking’s drives. They’re made on your phone from your own log; no push service is used. A drive’s notification shows its street and town on the lock screen.
• Granted at install (Android) – internet and network status, keeping the phone awake while recording, starting after a restart, exact alarms, a location service for automatic tracking, and starting that service from the background for a car you’ve linked.

Automatic tracking, Start on the walk to the car and the weather lookup are off until you turn them on.

#6. How we use Personal Information

To the extent permitted by applicable law, we use Personal Information:

• To provide and support the Services, such as answering your questions and requests, looking into a problem you report, and delivering App updates.
• To maintain and improve the Services, such as finding and fixing updates that fail to start, understanding which versions are in use, and keeping the Site available.
• For legal, security or safety reasons, such as protecting our and our users’ safety, property or rights; complying with legal requirements; enforcing our terms; and detecting, preventing and responding to security incidents and malicious, deceptive, fraudulent or illegal activity.
• For purchases (once paid plans open), to give you the plan you bought, restore it on a new device, answer billing questions, and keep the records tax and accounting law require.
• As part of a corporate transaction, such as the sale of part or all of our assets or business, a merger or acquisition, or bankruptcy.
• To fulfill any other purpose we describe when you give us the information, or with your consent.

We don’t use Personal Information or Your Log for advertising or marketing, for profiling, or to train machine-learning or artificial-intelligence models, and we don’t send marketing emails.

#7. How we disclose Personal Information

We may disclose aggregated information, and information that does not identify any individual, without restriction. We may disclose your Personal Information with your consent or in the following circumstances:

• Personnel – people who work for OdoWorks (such as contractors) and need it to help you.
• Service providers – that support our business under terms that limit their use of it to serving us: our website host and email routing (Cloudflare), our email mailbox provider, Expo for App updates, and (once paid plans open) Apple and Google as the stores that sell and bill for the App.
• Legal obligation or safety reasons – when we have a good-faith belief that it’s reasonably necessary to (a) satisfy or comply with any law, regulation, legal process or enforceable governmental request; (b) enforce or investigate a potential violation of an agreement you have with us; (c) detect, prevent or otherwise respond to fraud, security or technical concerns; (d) support auditing and compliance functions; or (e) protect the rights, property or safety of OdoWorks, our users or the public. Because Your Log isn’t on our systems, we can’t disclose it.
• Merger or change of control – to third parties as necessary if we’re involved in a merger, acquisition or any other transaction involving a change of control of our business, including a bankruptcy or similar proceeding. Where legally required, we’ll give you notice before such a disclosure.
• At your direction – when you share something yourself. Exports, reports and images (CSV, PDF, share images, an accident report) open your phone’s share sheet, and the automatic backup can save to a folder you choose. These are ordinary, unencrypted files with your log in them, including trips, border crossings (each with the place you crossed into and when), rental and borrowed cars, gig pay and your documents’ details: keep them somewhere private. Once you share a file, whoever receives it handles it under their own terms.

We don’t disclose Personal Information to affiliates, business partners or advertising companies. In the past 12 months we have not sold Personal Information or shared it for cross-context behavioral advertising.

#8. Cookies and other tracking technologies

The Site sets no cookies and uses no local storage, web beacons, pixels, analytics, session replay, advertising tags, social-media widgets or scripts, and loads nothing (fonts included) from other sites. Its only records are the hosting provider’s server logs (Section 1).

The App shows no ads, contains no advertising or analytics tools, doesn’t use the advertising ID, and doesn’t track you across other companies’ apps or websites. Apart from the update check’s failed-update report (row 8) and ML Kit’s diagnostics (row 9), it has no crash reporting.

Selling Personal Information. We don’t sell Personal Information, for money or for any other benefit, and we don’t share it for interest-based advertising. Because of that, there’s nothing for a Global Privacy Control (GPC) or Do Not Track signal to turn off; we treat either as a valid request to opt out, should that ever change.

#9. How long we keep Personal Information

We retain Personal Information for as long as needed: (i) to help you; (ii) to fulfill the purposes in this Policy; and (iii) to comply with our legal obligations, resolve disputes and enforce our agreements. Emails you send us are kept for up to 24 months after we’ve helped you, unless you ask us to delete them sooner; website server logs and update-check records are kept by Cloudflare and Expo under their own retention periods; purchase records (once paid plans open) as long as tax, accounting and consumer law require. When we no longer need Personal Information, we delete or de-identify it.

Deleting what the App keeps. Your Log stays on your phone for as long as you keep it there:

• One entry: tap it in History, then Details → Delete. One vehicle and everything logged for it: Garage → Edit → Delete vehicle.
• Everything: Settings → Data → Start over → Erase everything deletes every vehicle and everything logged, with its photos and receipts, the automatic backup’s copies, the drives automatic tracking found with their paths and the tracking library’s locations (automatic tracking turns off), recorded trips’ paths, the places your drives passed through, and your car’s Bluetooth link. To keep a copy, use Export everything first.
• Uninstalling OdoWorks deletes everything the App keeps on the phone, but not a folder you chose for the automatic backup, files you exported or shared, or your phone’s own iCloud or Google backup: delete those where they’re kept.

Because we don’t hold Your Log, we can’t restore it if it’s deleted or your phone is lost: keep a backup.

#10. Links to third-party websites

We are not responsible for the practices of any websites or services linked to or from the Services, including the information or content in them, such as Apple’s and Google’s stores, NHTSA’s recall pages and the publishers of the data the App shows. Any Personal Information you give them is handled under their own privacy policies, so please read those before you do. The services the App looks things up from (Section 4) are governed by their own terms and policies too.

#11. International use and cross-border data transfers

MileWorks LLC is based in the United States, and the Site is hosted on Cloudflare’s worldwide network. Some services in Section 4 are in the United States, others in Europe. If you use the Services from outside the United States, your information may be processed in countries whose data protection laws differ from yours. Where we transfer Personal Information from the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework, where the recipient takes part), the European Commission’s standard contractual clauses, or another lawful and approved method. To request a copy of the safeguards that apply, contact us (Section 19).

#12. How we protect Personal Information

Every connection the App makes uses encryption (HTTPS). For the Personal Information we hold, we have implemented commercially reasonable measures designed to secure it from accidental loss and from unauthorized access, use, alteration and disclosure. Unfortunately, the transmission of information over the internet is not completely secure, and we cannot guarantee the security of Personal Information during its transmission or its storage. Your log is as safe as your phone: use a screen lock, and keep exported files and backups somewhere private.

#13. Exercising your privacy rights

The App covers most requests itself: you can see, export (Settings → Data → Your data → Export everything (CSV)), correct and delete Your Log at any time. For the Personal Information we hold (in practice, emails you’ve sent us), depending on where you live, you may have the following rights:

• Access – to request access to, and a portable copy of, the Personal Information we have about you.
• Deletion – to have the Personal Information we have collected deleted, subject to certain exceptions.
• Correction – to have inaccurate Personal Information corrected, subject to certain exceptions.
• Opt out of certain processing – of targeted or cross-context behavioral advertising, of the sale of Personal Information, and of uses of sensitive Personal Information. We do none of these, so there’s nothing to opt out of.
• Objection or restriction – to object to, or restrict, our processing in certain circumstances.
• Withdraw consent – where we rely on your consent.
• Automated decision-making – we don’t profile you or make decisions about you by automated means that produce legal or similarly significant effects, so we don’t offer an opt-out of such activity.
• Lodge a complaint – with a data protection authority or other regulator. We’d welcome the chance to put things right first.

To exercise any of these rights, contact us (Section 19). You may also use an opt-out preference signal such as GPC (Section 8). You will not be discriminated against for exercising your rights. Only you, or an agent you’ve authorized, may make a request about your Personal Information; we may need to verify your identity (for example by replying from the email address the request concerns), and an agent’s authority with your signed permission or a power of attorney. We respond within the time the law requires, and if we need longer, we’ll tell you why in writing. We don’t charge a fee unless a request is excessive or repetitive, and we’ll tell you why and the cost first. If we deny a request in whole or in part and your law gives you a right to appeal, our response will tell you how.

#14. Children’s privacy

OdoWorks is made for drivers and isn’t directed at children. We do not knowingly collect Personal Information from children under 13 (or the age your country sets), and we have no actual knowledge of selling or sharing the Personal Information of anyone under 16. If we learn that we’ve collected Personal Information from a child, we’ll promptly delete it. If you believe we might have any, contact us (Section 19).

#15. Individuals in the European Economic Area, United Kingdom and Switzerland

OdoWorks isn’t offered there yet. If you use it there, MileWorks LLC is the controller of the Personal Information we hold, under the EU General Data Protection Regulation, the UK GDPR and the Swiss Federal Act on Data Protection.

Legal bases for processing. We process Personal Information primarily to perform a contract with you (answering your support requests and, once paid plans open, giving you the plan you bought). We may also process it with your consent (which you can withdraw at any time), to comply with applicable law (such as tax records), and for our legitimate interests (keeping the Services working and secure, delivering updates, communicating with you, and preparing for a merger, acquisition or other corporate transaction), as long as those interests are not outweighed by your rights and freedoms.

Special category data. We don’t collect special categories of personal data (such as health, racial or ethnic origin, religious or biometric data). Please don’t send us any.

Expo says it takes part in the EU-U.S. Data Privacy Framework, with its UK Extension and the Swiss-U.S. Framework. Before OdoWorks is offered there, this section will name our representative if the law requires one.

#16. United States residents

California Shine the Light. Under California Civil Code Section 1798.83, California residents who have an existing business relationship with us may ask about our disclosure of certain categories of Personal Information to third parties for their direct marketing purposes. We make no such disclosures.

State privacy laws. Precise location is sensitive data under California’s and other states’ laws: the App uses it on your phone, sends it only for the lookups in Section 4, and never sells it. In the past 12 months we collected only the categories in Section 1 (identifiers such as an email address, IP address or update ID; internet activity such as the Site’s server logs; and, once paid plans open, commercial information), from the sources in Section 3, for the purposes in Section 6, disclosed only as Section 7 says, and kept as Section 9 says. We don’t offer financial incentives for Personal Information. You have the rights in Section 13 as your state’s law gives them, including to appeal.

#17. Canada, Mexico and other countries

• Canada. You can ask to see and correct the personal information we hold, and complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information. Our privacy officer is reachable through Contact us (Section 19).
• Mexico. MileWorks LLC is responsible for your personal data. You can exercise your rights of access, rectification, cancellation and opposition (ARCO) and revoke your consent by contacting us. A Spanish version of this notice, with our domicile, will be published before OdoWorks is offered in Mexico.
• Elsewhere (including Australia, New Zealand, Japan and South Korea, whose regions the App supports), you have the rights your law gives you, which you can exercise as Section 13 describes. Before OdoWorks is offered there, we’ll add what each law requires.

#18. Changes to this Policy

We may modify or update this Policy from time to time, so please review it periodically. If we make material changes to how we treat Personal Information, we’ll notify you as applicable law requires, and if a change affects what leaves your phone (for example, accounts or cloud sync in a later version), we’ll say so in the App before it applies and ask before anything new is sent. Unless we say otherwise, other changes apply when we post them and update the date above.

#19. Contact us

If you have any questions about our practices or this Policy, or want to make a request, contact us:

MileWorks LLC
Privacy: coming soon
Support: coming soon