Draft — not a finished legal document. Written to accurately describe what the app does, but not reviewed by a lawyer. Get real legal review before this ships to users beyond a small test group.
Privacy Policy
Last updated: August 31, 2026
What we collect
- Email address — used to create your account and sign you in (via passkey/Face ID, or a one-time email code if your device doesn't support passkeys).
- GPS coordinates while a trip is actively recording — collected only between the moment you tap Start Log and the moment you tap Stop Log. taplog does not track your location continuously or in the background.
- Trip data — distance, duration, the category you assign (Uber / Other business / Personal), and reverse-geocoded street addresses for the start and end of each trip.
What we don't collect
- No phone number.
- No payment information.
- No continuous or background location tracking outside an active trip.
Third parties that see your data
| Provider | What they receive | Why |
|---|
| Cloudflare | Everything — it hosts the app, the API, and the database | Infrastructure host |
| Brevo | Your email address | Sending the sign-in verification code, when passkeys aren't available |
| OpenStreetMap / Nominatim | GPS coordinates from your active trip | Rendering the live map and reverse-geocoding trip start/end addresses |
We do not sell your data, and we do not share it with anyone for advertising purposes.
Where your data is stored
Trip and account data is stored in Cloudflare D1, with the primary database location set to Western North America to keep it close to Canadian users. Cloudflare D1 is a globally-distributed SQL database; read replicas may be created in other regions as part of Cloudflare's standard infrastructure.
How long we keep it
Your trips are kept until you delete them, individually or all at once.
- Deleting an individual trip removes that trip's row permanently.
- Deleting your account removes your user record, all of your trips, all of your registered passkeys, and all of your active sessions. This is irreversible.
Your rights
- Export your own trip data at any time from the History screen (CSV, with your choice of date range and category).
- Delete any individual trip from its detail screen.
- Delete your account entirely, cascading to remove every associated row.
Contact
Questions about this policy can be sent to TODO@samrath.ai — placeholder: confirm the real contact address before this policy goes live.