Privacy Policy

Glovebox Driver keeps the records a car-delivery driver needs at tax time: receipts, jobs, duty days, nights away, and pay. This policy explains what the app collects, why, who helps process it, and how you control it. We do not sell your data, show ads, or track you across other apps or websites.

What we collect and why

• Account: your email address and display name, to sign you in and keep your records yours.
• Receipts and documents: photos, PDFs, screenshots (such as a job board), and emails you send or forward to your receipt address, with what is read from them (merchant, date, amount, city).
• Pay and money: pay notices you forward (for example Zelle or direct deposit alerts), expenses, and the tax figures you enter or the app calculates.
• Location: only if you allow it. While you are on duty, the app records your route and where duty events happen; a receipt you snap is tagged with where you were; and, only if you turn on automatic nights away, iOS tells the app about places you stay (visits). Nothing is recorded off duty except those optional visits.
• Device: an app installation ID, a device key, and a push notification token, so your phone can upload and receive alerts.

All of this is linked to your account and used only to provide the app to you.

Who helps process it

We use these service providers, each only for the purpose listed:

• Supabase: database, file storage, and sign-in codes.
• Vercel: hosting for the app and website.
• OpenAI and Anthropic (AI): read your receipt photos and forwarded emails to pull out the merchant, date, amount, and similar details. This happens only after you allow it in the app. Under their API terms, data sent through their APIs is not used to train their models.
• Postmark: receives email sent to your receipt address and passes it to the app.
• Apple: delivers push notifications and, if you subscribe, handles payment. We never see your card number.
• OpenStreetMap (Nominatim and map tiles): turns a location into a city name and draws route maps.
• U.S. General Services Administration: per diem rates by city (no personal data is sent).
• Plaid: only if you choose to connect a bank account.

How long we keep it

Your records are kept until you delete them or delete your account, because tax records are often needed for years. When you delete your account, your data is deleted from our systems right away and removed from backups within 30 days.

Your choices

• Location: allow or stop it any time in iOS Settings; the app works without it (enter places and miles yourself).
• AI reading: turn it off in the app's Settings; you can then enter receipts by hand.
• Notifications: turn them off in iOS Settings.
• Download: export your tax packet (CSV files and receipt images) from the Tax screen.
• Delete: Settings → Delete account removes your account and everything in it.

Security

Data is encrypted in transit, stored with access limited to your account, and receipt files are private. Keep your receipt address private: anything sent to it is added to your records.

Children

The app is meant for adults who drive for work. It is not directed to children under 18.

Changes and contact

If this policy changes in a way that matters, we will tell you in the app. Questions or requests: support@gloveboxdriver.app.