Effective Date: August 8, 2026
iOS Bundle ID: com.roadstance.app
Android Package: com.roadstance
RoadStance ("the app") is developed by AutoTripLog Inc. ("we", "us"). It is a vehicle mileage tracking and receipt capture app for iOS and Android. Privacy is a core design principle: all trip data, receipt data, vehicle data, and mileage records are stored locally on your device and are never transmitted to our servers (we operate no servers for user data).
This policy describes the limited technical data that does leave your device, how it is used, and your rights.
Scope and Consistency. This Privacy Policy applies to your use of the RoadStance mobile app and the RoadStance website (roadstance.com), which exists solely to support and promote the app. The version presented within the app and on the website is maintained from a single source and is intended to be identical in all material respects. In the event of any inadvertent discrepancy, the version bearing the later Effective Date shown above governs. This policy does not apply to any third-party websites or services linked from within the app.
Website analytics. The RoadStance website (roadstance.com) does not use Google Analytics, advertising pixels, or any third-party behavioural tracking or analytics scripts.
The following data is created and stored exclusively on your device. It is never transmitted to our servers:
| Data Type | Examples | Purpose |
|---|---|---|
| Location / GPS | Trip routes (lat/lon coordinates), trip start/end points | Record vehicle trips for mileage logs |
| Trip records | Date, distance, duration, business purpose, classification | Mileage log for tax reporting |
| Receipt data | Vendor name, date, amount, address, expense type | Business expense records and trip corroboration |
| Vehicle records | Make, model, year, odometer readings | Per-vehicle mileage tracking |
| Subscription status | Free/Pro tier, usage counters | Feature gating |
| App settings & preferences | Jurisdiction, fiscal year, notifications | Personalisation |
You control where backups of this data go (iCloud Drive, USB, AirDrop, etc.). RoadStance does not receive copies of your backups.
The app integrates Firebase Crashlytics (Google LLC) to capture anonymised crash reports when the app terminates unexpectedly.
What a crash report contains:
What a crash report does NOT contain:
Crash reports are used solely to identify and fix software bugs. They are processed by Google LLC under Google's data processing terms. See firebase.google.com/support/privacy for Google's practices.
You can opt out of crash reporting at any time via Drawer → App Preferences → Crash Diagnostics. When disabled, no crash reports are collected or sent. Crash reporting is enabled by default to help us fix stability issues.
These services are contacted when you use specific features. They receive only the minimum data needed to fulfil the request and do not receive your trip history or receipt data.
| Service | Provider | When Used | Data Sent |
|---|---|---|---|
| Geoapify Geocoding | KEPTAGO LTD (Geoapify), Cyprus, EU | Converting GPS coordinates to addresses; receipt address lookup | GPS coordinates or address text |
| Geoapify Routing | KEPTAGO LTD (Geoapify), Cyprus, EU | Calculating road distance between two points | Two coordinate pairs |
| Geoapify Map Tiles | KEPTAGO LTD (Geoapify), Cyprus, EU | Displaying maps in the app | Tile coordinates (map region being viewed) |
| Nominatim (OpenStreetMap) | OpenStreetMap Foundation (OSMF), UK | Fallback geocoding — converting GPS coordinates to addresses when Geoapify is temporarily unavailable | GPS coordinates or address text |
Geoapify's privacy policy: geoapify.com/privacy-policy
OpenStreetMap Foundation privacy policy: osmfoundation.org/privacy-policy
Where this data is processed: Crash diagnostic data is transmitted to and processed by Google LLC on servers located in the United States. Geocoding and routing data is processed primarily by KEPTAGO LTD (Geoapify), an EU company (Cyprus) with servers in the EU; when Geoapify is temporarily unavailable, geocoding requests may fall back to the OpenStreetMap Foundation's Nominatim service, operated from the United Kingdom. All other data remains on your device.
These services are contacted only when the relevant feature is used and only when your device has an internet connection. The app is fully functional offline except for address resolution and map display.
| Data | Purpose |
|---|---|
| Crash diagnostics (via Crashlytics) | Identify and fix software defects |
| GPS coordinates (local) | Record trip distance and route |
| Receipt OCR output (local) | Populate business expense records and suggest trip data |
We do not use your data for advertising, profiling, or any purpose other than operating the app's stated functions.
Local data: Stored on your device indefinitely until you delete it or uninstall the app. You can export and delete your data at any time via the Backup & Restore screen.
Crash reports: Retained by Google/Firebase according to their standard retention policies (typically 90 days in the Crashlytics console). We do not have separate control over Google's retention schedules.
Geocoding cache: Resolved addresses are cached locally on your device for up to 7 days to reduce repeated network requests. This cache is part of your local database and is deleted when you clear app data.
We do not sell, rent, or trade your personal information or usage data to any third party, now or in the future.
We share data only with the service providers described in Section 1 (Google/Firebase for crash diagnostics; Geoapify for maps and geocoding), strictly for the technical purposes described, and with no permission to use the data for their own purposes beyond service delivery.
When you export a mileage report or backup and share it with a third party (employer, accountant, tax authority, cloud storage), that data is outside our control. You are responsible for sharing reports only with parties who handle the data appropriately.
International data transfers: Crash diagnostic data is transferred to and processed in the United States (Google LLC). Geocoding and routing data is processed by Geoapify (KEPTAGO LTD), an EU-based company headquartered in Cyprus, with data processed in EU data centres. See firebase.google.com/support/privacy and geoapify.com/privacy-policy for details.
Depending on where you are located, you may have the following rights:
All users:
EU/EEA and Switzerland: RoadStance is not available for download in EU/EEA member states or Switzerland. If you access the RoadStance website from these territories, only standard web server access logs apply and no personal data is collected by us.
United Kingdom (UK GDPR):
RoadStance is a Canadian company with no UK establishment. We rely on the UK GDPR Article 27(2) exemption (occasional, low-risk processing) and have not appointed a UK representative. To exercise any of the above rights, contact us at [email protected].
Canada (PIPEDA / Quebec Law 25 / provincial privacy laws):
Quebec residents (Law 25 / Bill 64): If you are a resident of Quebec, you have additional rights under Quebec's Act respecting the protection of personal information in the private sector (Law 25). The limited personal information RoadStance processes (crash diagnostic data via Firebase; geocoding coordinates via Geoapify) is collected for the purposes described in this policy. Any transfer of this data outside Quebec (to the United States or to Geoapify's EU servers) is conducted under contractual protections that provide a level of protection equivalent to Quebec law requirements. To request access, correction, or portability of personal information, contact us at [email protected].
California (CCPA / CPRA):
Sensitive personal information (CPRA): Precise geolocation data is classified as "sensitive personal information" under the CPRA. RoadStance stores your precise GPS location data exclusively on your device and does not sell, share, or disclose it to any third party. We do not use it for any purpose beyond recording trips at your direction. No action is required on your part to limit its use; it is already restricted to local device storage by design.
Do Not Sell or Share / Global Privacy Control: We do not sell or share personal information for cross-context behavioural advertising. We therefore do not treat Global Privacy Control (GPC) opt-out signals differently from any other request, but we honour the spirit of such signals — your data is not sold or shared regardless.
Australia (Privacy Act 1988):
Other US states: If you are a resident of any US state with applicable privacy legislation (including Virginia, Colorado, Connecticut, Texas, Utah, and others), you have the same rights as described for California above, to the extent required by your state's law.
To exercise any right, contact us at: [email protected]
Because all meaningful user data is stored locally on your device, the primary way to access, export, or delete your data is through the app itself.
RoadStance is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.
If you are under 13 years old, do not use this app. If you are a parent or guardian and believe a child under 13 has used RoadStance or submitted personal data, please contact us at [email protected] and we will take appropriate steps.
Your data is stored in a local SQLite database on your device, protected by your device's own security (device passcode, Face ID / Touch ID, disk encryption). We do not have access to your device or its data.
For iCloud backups: files are encrypted in transit and at rest by Apple's iCloud infrastructure.
For crash diagnostics: data is transmitted over HTTPS to Firebase and stored in Google's secured infrastructure.
Data breach notification. In the event of a security incident that affects personal data we are responsible for (i.e., crash diagnostic data held by Firebase/Google), we will notify affected users and relevant authorities as required by applicable law (including PIPEDA, UK data protection law, and applicable US state breach notification laws). Because the vast majority of your data never leaves your device, the scope of any such notification would be limited to anonymised crash diagnostic data.
Automatic device backup (iOS): iOS automatically backs up app data — including the RoadStance database — to iCloud as part of your standard device backup, subject to your iCloud settings. This is controlled by you through iOS Settings → [Your Name] → iCloud → iCloud Backup. RoadStance does not control or have access to this backup.
Pro Backup & Restore: The Pro tier includes an explicit Backup & Restore feature that saves a copy of your database to your personal iCloud Drive. This data is stored in your own iCloud account and is not accessible to RoadStance. It is governed by Apple's Privacy Policy.
In-app purchases are processed entirely by Apple (App Store) or Google (Google Play). RoadStance does not collect or store payment card details, billing addresses, or any other payment information. Subscription status is verified via secure tokens provided by the respective platform.
We may update this policy when the app's features or legal requirements change. When we do, we will update the Effective Date at the top of this document and post the updated version at the same URL. Continued use of the app after a policy update constitutes acceptance of the revised policy.
For significant changes we will add a notice within the app.
Developer / Data Controller:AutoTripLog Inc. 1750 The Queensway Suite 529-3 Etobicoke ON M9C 5H5 Email: [email protected]Website: https://roadstance.com
For privacy questions, data access requests, or to report a concern, email us at the address above. We aim to respond within 30 days.
This policy applies to the RoadStance iOS app (bundle ID: com.roadstance.app), the Android app (package: com.roadstance), and the RoadStance website. It does not apply to any third-party websites or services linked from within the app.