OdoProof

Privacy Policy

Last updated: 2026-09-28

This policy explains what the OdoProof iPhone app (bundle ID net.fishingcatch.mileproof) does with your data. In short: your trips, locations, photos and expenses stay on your iPhone; we only receive anonymous usage statistics, which you can turn off.

Summary

Data that stays on your device

OdoProof stores the following in the app's private storage on your iPhone: trips (times, start and end places, a simplified route, distance, category, purpose, notes), vehicles, odometer readings and photos, expenses and receipt photos, saved places and privacy zones, rules and the reports you export. This data is not sent to us.

It is included in your iPhone backup (iCloud Backup or a computer backup) according to your own device settings, and in any export file that you create and share yourself. Location metadata (EXIF) is removed from photos when they are saved.

Location and motion

With your permission, OdoProof uses location to measure the distance of your drives, and motion activity to recognise when you are driving.

Location data is processed on your device. To show addresses and to estimate the distance of short gaps (for example in a tunnel), the app uses Apple's address lookup and Maps services, which receive the coordinates concerned under Apple's privacy policy. We do not receive them.

Camera and photos

The camera is used to photograph your odometer and receipts. Numbers and text are recognised on your device. Photos you pick from your library are chosen with the system photo picker; the app cannot see the rest of your library.

Anonymous usage statistics

To learn whether trip detection, odometer checks and exports work well, the app sends a small number of events to our server, for example “trip completed” or “report exported”. Each event contains:

Events never contain locations, addresses, place names, licence plates, store names, amounts, notes or photos. Once a day the app may also send, in ranges, how long location services ran, so that we can check that the app really saves battery.

Events are received by our statistics server (a Cloudflare Worker at telemetry.fishingcatch.net) and stored as compressed files in Cloudflare R2 storage that we operate. Detailed events contain nothing that identifies you and are kept only as long as we need them to improve the app; daily totals per event name (without any ID) are kept for up to 400 days. Your IP address is processed by Cloudflare to deliver the request; we do not store it with the events.

You can switch this off in Settings › Privacy › Share anonymous usage statistics. From then on the app sends no new events; the automatic app-open counts and anything still waiting to be sent stop at the next app launch (close the app in the app switcher and open it again).

Crash reports

If the app crashes, a crash report (stack trace, device model, iOS version, app version and the random installation ID) is sent to Google Firebase Crashlytics, which processes it for us. Crash reports contain no trip, location or expense data and are kept for 90 days. They are switched off together with the usage statistics.

Mileage rate updates

The app downloads mileage rate tables (for example the IRS standard mileage rates) and basic settings from our server. These requests contain no personal data; your IP address is handled as described above.

Purchases

Subscriptions and one-time purchases are processed by Apple. We do not receive your payment details or your Apple Account. The app checks your purchase on the device. The anonymous statistics record which product was bought (for example “yearly”), without any payment information.

When you contact us

If you email us, we receive your email address and your message. On the contact screen you can choose to attach a diagnostic log. It contains technical events of the app (such as errors and timings) but no route coordinates, addresses or photos, and you can review it before sending. We use this only to help you and delete support emails no later than 2 years after the conversation ends.

What we do not do

Legal basis (EEA, UK, Switzerland)

We process the anonymous statistics on the basis of our legitimate interest in keeping the app reliable and energy-efficient (Art. 6(1)(f) GDPR); you can object at any time by switching them off. Support emails are processed to answer your request (Art. 6(1)(b) and (f) GDPR). Data that is processed only on your device is not processed by us.

Where data is processed

Our server runs on Cloudflare, Inc. (USA), which acts as our processor. Data may be processed in countries other than yours, including the United States; transfers from the EEA and the UK rely on Cloudflare's standard contractual clauses.

Retention and deletion

Data on your device stays until you delete it. Settings › Privacy › Delete all data removes everything the app stored on your iPhone; deleting the app does the same. Server-side statistics are deleted automatically as described above. Because they are anonymous we usually cannot link them to you; if you send us the installation ID shown in Settings › Privacy, we will delete the matching events.

Your rights

Depending on where you live (for example under the GDPR, the UK GDPR, the California Consumer Privacy Act, Korea's Personal Information Protection Act or Japan's Act on the Protection of Personal Information), you may have the right to access, correct or delete your data, to restrict or object to its processing and to complain to a data protection authority. Email us to exercise these rights. We do not sell or share personal information as defined by California law.

Children

OdoProof is not directed at children under 13, and we do not knowingly collect their data.

Changes

We will update this page when the app changes how it handles data and change the date at the top. Significant changes will also be mentioned in the app's release notes.

Contact

Eric Z
Email: candy66861@gmail.com