Privacy Policy

What we collect

• Email address — used to create your account and sign you in, via a one-time code sent to your inbox.
• GPS coordinates while a trip is being tracked — how much depends on which tracking mode you use:
  • Live Track (continuous GPS route) — collected the whole time, from the moment you tap Start to the moment you tap Stop.
  • Manual entry (odometer readings) — only a single GPS fix each at the start and end of the trip, used solely to show a pin and look up a street address, never a continuous route.
  taplog does not track your location continuously or in the background outside of an active Live Track trip, and never collects location data when no trip is running.
• Trip data — distance, duration, the category you assign (Uber / Other business / Personal), reverse-geocoded street addresses for the start and end of each trip, and — for trips logged with manual entry — the odometer readings you enter.

A note on location data: GPS coordinates are treated as sensitive personal information under most privacy laws (Canada's PIPEDA, California's CCPA, the EU's GDPR). taplog treats it accordingly — collected only during an active trip, never used for advertising or profiling, never sold, and deletable any time along with the trip it belongs to.

What we don't collect

• No phone number.
• No payment information.
• No continuous or background location tracking outside an active trip.
• No cookies, third-party analytics, or ad trackers. The only thing stored in your browser is your session token and a couple of local preferences (like your preferred odometer unit), used solely to keep you signed in and remember your settings.

Third parties that see your data

Provider	What they receive	Why
Cloudflare	Everything — it hosts the app, the API, and the database	Infrastructure host
Brevo	Your email address	Sending the sign-in verification code
OpenStreetMap / Nominatim	GPS coordinates from your active trip	Rendering the live map and reverse-geocoding trip start/end addresses

We do not sell your data, and we do not share it with anyone for advertising purposes.

Where your data is stored

Trip and account data is stored in Cloudflare D1, with the primary database location set to Western North America to keep it close to Canadian users. Cloudflare D1 is a globally-distributed SQL database; read replicas may be created in other regions as part of Cloudflare's standard infrastructure.

Because Cloudflare operates globally-distributed infrastructure, your data may be processed or transferred to, and stored in, countries other than the one you live in — including countries whose data protection laws may differ from your own. By using taplog, you consent to this transfer. Cloudflare maintains its own safeguards and data processing agreements as part of its standard infrastructure commitments.

How long we keep it

Your trips are kept until you delete them, individually or all at once.

• Deleting an individual trip removes that trip's row permanently.
• Deleting your account removes your user record, all of your trips, and all of your active sessions. This is irreversible.

Your rights

As a Canadian-operated service, these rights are guaranteed under PIPEDA (the Personal Information Protection and Electronic Documents Act): access, correction, and deletion of your own data. Most of these are self-serve, right in the app:

• Export your own trip data at any time from the History screen (CSV, with your choice of date range and category).
• Delete any individual trip from its detail screen.
• Delete your account entirely, cascading to remove every associated row.
• Ask us anything else about your data by emailing us (below) — we'll respond within 10 business days.

California residents (CCPA)

If you're a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its "sale" or "sharing." taplog doesn't sell your personal information and doesn't share it for cross-context behavioral advertising — so there's nothing to opt out of. To exercise any CCPA right, contact us at the email below.

If something goes wrong

If a security incident affects your personal information, we'll notify affected users by email and take reasonable steps to secure the system, consistent with our obligations under PIPEDA.

Contact

Questions about this policy can be sent to hello@samrath.ai.