Odometer Privacy Policy

Last updated: 1 October 2026

This policy explains what data the Odometer app (iOS and Android) collects, how it is used and who it is shared with. The developer and data controller is Çağrı Döşeyen. Send questions and requests to [email protected].

Summary

• Your drives, vehicles and records are stored on your phone first.
• You can use the app without an account. An account is needed for backup, friends and the leaderboard.
• We do not sell your data or use it for advertising.
• Friendships are made by request and approval; someone who knows your friend code can only send a request.
• You decide what to share with friends. Drive and location sharing are off by default.
• The first and last 400 m of a route are hidden by default in images you share and in routes your friends see.

1. Data we collect

Data that stays on your device

• Location and drive data: GPS location, speed, route, duration and distance. If automatic drive logging is on, the app also uses location in the background. Without location permission you can start drives manually.
• Motion detection: The device's motion/activity sensor is used to detect when you are in a vehicle.
• Vehicle and expense records: Vehicle details, fuel, service, expenses, reminders and vehicle photos.
• Receipt photos: In receipt scanning, the text is read on your device (Google ML Kit / Apple Vision). The photo itself is never sent to a server.

If you create an account

• Account details: Name, email address and password (the password is stored by Firebase Authentication and we cannot see it). Your email address, or any part of it, is never shown to other users.
• Cloud backup: If you use backup, your vehicles, drives (including routes), fuel/service/expense records, reminders and vehicle photos are stored in Firebase (Firestore and Storage), linked to your account.

If you use social features

• Profile: Nickname, profile photo, province and vehicle label (for example "VW Golf"). If you upload a profile photo it is stored in Firebase Storage and shown only to signed-in users of the app (friend list, leaderboard). If you don't choose a nickname, your account name or a neutral name such as "Driver 4F2K" is used; nicknames and vehicle labels are filtered for inappropriate content.
• Leaderboard: Your weekly/monthly distance, top speed and similar scores. You can leave the leaderboard at any time.
• Friends: Your friend code, the friend requests you send and receive, your friend list and the sharing settings you choose for each friend. A friendship is created only when the other person accepts the request. Your friend code is not listed to other users; you can reset it at any time, and it is reset automatically when you block someone.
• Shared drives: If you turn on drive sharing, your drive summaries and routes are visible to the friends you choose. The route privacy zone (on by default) hides the first and last 400 m of a route in images and videos you share and in routes your friends see; short drives inside these zones show no route at all. You can turn it off in Settings.
• Live location and driving status: If you turn it on, your location, speed and heading while driving are shown only to mutual friends for whom live location is on; our server decides who can see it each time, based on friendships and blocks. No history is kept. The record is overwritten and deleted automatically shortly afterwards.
• Nudges and notifications: Nudges you send and receive, and your device's push token, language and distance unit, used to deliver notifications.
• Referral program: Who invited whom and the rewards earned.

Collected automatically

• Usage analytics: Screens opened, features used, subscription screen interactions and install source (Google Play Install Referrer). Collected with Firebase Analytics and Mixpanel.
• Advertising ID: The app shows no ads. We do not collect the advertising ID (Android Advertising ID, Apple IDFA).
• Crash reports: Device model, OS version and error details (Firebase Crashlytics).
• App integrity: Firebase App Check (Play Integrity, App Attest/DeviceCheck) verifies requests come from the genuine app.
• Purchases: Subscription status and purchase history (via RevenueCat). Payments are handled by the App Store or Google Play and we never see payment details.

2. How we use data

• To record your drives and show statistics, the heat map and drive replay.
• To back up your data and restore it when you switch devices.
• To run social features such as friends, the leaderboard, nudges and live location.
• To send notifications (friend activity, nudges, reminders, rewards).
• To manage your Pro subscription and referral rewards.
• To improve the app, find bugs and prevent abuse.

3. Legal bases

We process personal data on the following bases under Article 6 of the GDPR and Article 5 of Turkey's KVKK:

Data is collected electronically through the app, by automated means and from what you enter.

4. AI features

• Receipt scanning: The receipt text read on your device (not the photo) is sent through our server to Anthropic's Claude model to extract the amount and category.
• Driving coach: Summary driving statistics such as average consumption, eco score and harsh braking/acceleration counts are sent the same way to generate tips. Your routes and location are not sent.

Your name, email or account ID are not passed to the AI provider in these requests. Your account ID is used only on our server to check your Pro subscription (via RevenueCat) and the daily usage limit.

5. Service providers we share data with

Your data is shared only with the following services, only to run the app:

Server-side processing runs in Firebase's European region (europe-west1). Providers may also process data in other countries under their own privacy policies.

We do not sell your data or share it with ad networks. We may disclose data to authorities where required by law.

6. International transfers

Some of our providers (Google, Mixpanel, RevenueCat, Mapbox, Anthropic) may process data outside Turkey and the European Economic Area, mainly in the United States. These transfers rely on the providers' standard contractual clauses and the other safeguards required under Chapter V of the GDPR and Article 9 of the KVKK.

7. Retention

• Data on your device stays there until you delete it or uninstall the app.
• Cloud backup and profile data are kept until you delete your account, and are deleted immediately when you do.
• Live location records are deleted automatically shortly after they are written.
• Friend requests are kept until they are accepted, declined or withdrawn.
• Counters kept to prevent abuse (daily request and usage limits) are short-lived and deleted when you delete your account.
• If you joined with an invite and received the 14-day Pro reward, a one-way hash (SHA-256, not reversible) of your Apple/Google account ID and verified email is kept even after you delete your account, so the reward isn't granted to the same person twice. The raw ID or email is not stored.
• Analytics and crash data follow the retention periods of those providers.

8. Your rights and choices

• Permissions: You can turn off location, motion and notification permissions in your device settings at any time.
• Sharing: You can turn off drive sharing, live location and notifications separately for each friend.
• Leaderboard: You can leave the leaderboard at any time.
• Friends: You can decline friend requests, remove or block friends, and reset your friend code.
• Route privacy zone: Turn it on or off in Settings → "Hide the start and end of routes".
• Deleting your account: In the app, go to Profile → Delete my account to permanently delete your account and all your cloud data (backup, profile, leaderboard entries, friendships, shared drives, photos, push tokens). Deletion happens immediately and cannot be undone. If you can't access the app, email the same request to [email protected] from your account's email address and we will complete it within 30 days.
• Subscription: Deleting your account does not cancel a Pro subscription. Cancel it in your App Store or Google Play subscription settings.
• Access and correction: Email [email protected] to request a copy of your data or to correct it.

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent at any time. Under Article 11 of the KVKK you also have the right to learn whether your data is processed, to request information about it, to know the third parties it is transferred to in Turkey or abroad, to have corrections and deletions notified to them, to object to outcomes against you arising solely from automated analysis, and to claim compensation for damage caused by unlawful processing.

Send requests to [email protected] and we will respond within 30 days. If you are not satisfied with our response, you can complain to the Personal Data Protection Authority (KVKK) in Turkey or to the data protection authority in your country in the European Union.

9. Security

Data travels between your device and our servers over encrypted connections (HTTPS/TLS). Our server accepts requests only from the genuine app (Firebase App Check) and applies rate limits against abuse. Only you can access your cloud data. Friends can only see what you choose to share. No system is perfectly secure, but we take reasonable measures to protect your data.

10. Children

Odometer is not directed at children under 13 and we do not knowingly collect data from them.

11. Changes

We may update this policy. We will announce significant changes in the app or on this page. The date at the top shows the latest update.

12. Contact

Çağrı Döşeyen — [email protected]