DriveBy

Privacy Policy - DriveBy

Effective date: 2026-05-25 Document version: 1.0 Controller: DriveBy (operating as a sole trader registered in Poland, EU) - support@driveby.dev

1. Scope

This Privacy Policy explains what data the DriveBy Android application ("App") processes, why, and what your rights are under the General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR").

DriveBy is a personal profit calculator for couriers working with food-delivery platforms. The App is not affiliated with, endorsed by, or connected to Glovo, Uber Eats, Bolt Food, Wolt, DoorDash, Deliveroo, Stuart, or any other delivery platform.

2. Data we DO NOT collect

DriveBy is designed around the principle of data minimisation. We do not collect, store, transmit, or sell:

Your name, e-mail address, phone number, or any contact data
Your precise location, GPS coordinates, or movement history
Any photographs, screenshots, or images
Any screen content from delivery platforms - text recognised on-device by the Accessibility Service or ML Kit is held in memory only for the duration of one calculation (typically under 200 ms) and is then discarded
The amounts or distances of any individual order you receive
The identity of the merchants, restaurants, or addresses involved in your orders
Your delivery platform account credentials

The App contains no network calls to any delivery platform's API.

3. Data we DO process

3.1 Stored locally on your device only

The App stores the following on your phone (and never transmits it to any server):

Vehicle profile data you enter manually: name, fuel type, fuel consumption (L/100 km), fuel price (€/L), wear cost (€/km), minimum acceptable profit (€).
App preferences (e.g. whether onboarding has been completed, currently active vehicle profile).
Optional calculation history (you choose whether to save it).

This data lives only in the App's private storage (Room database). Uninstalling the App permanently deletes it. We have no access to it.

3.2 Anonymous diagnostic telemetry (Firebase Analytics)

When the App detects an order on screen and calculates a result, it sends a small bucketed event to Firebase Analytics:

platform (e.g. glovo, wolt)
distance bucket (e.g. 3-5km) - never the exact value
fee bucket (e.g. 4-5eur) - never the exact value
whether the result was profitable for you (true/false)
end-to-end latency in milliseconds

Bucketing is deliberate: we measure platform-level distributions and parser accuracy without ever observing the financial details of any individual courier or order.

3.3 Crash diagnostics (Firebase Crashlytics)

If the App crashes, Firebase Crashlytics records the stack trace, Android version, device model, and the App's build type. This is essential for fixing bugs that affect your earnings during a shift.

3.4 Subscription state (planned, future release)

When subscriptions launch in a future version of the App, your purchase state will be managed by Google Play Billing. We receive only an entitlement signal (active / inactive) - no payment details whatsoever pass through DriveBy.

4. Legal basis for processing

Purpose	Legal basis (GDPR)
Calculating profit on your device	Performance of the service you requested (Art. 6(1)(b))
Anonymous bucketed diagnostics	Our legitimate interest in improving service quality (Art. 6(1)(f)) - the data is not linked to your identity
Crash diagnostics	Our legitimate interest in product stability (Art. 6(1)(f))

We do not engage in profiling under Art. 22 GDPR, and we do not make automated decisions that produce legal effects concerning you.

5. Sub-processors

We use Google LLC (and its EU affiliates) for:

Firebase Analytics - europe-west1 region (Frankfurt, Germany)
Firebase Crashlytics - europe-west1 region
Firebase Remote Config - europe-west1 region (regex patterns we ship to your device for parsing screens; this is a one-way pull, not telemetry)

Google's processing is governed by the Google Cloud EU Data Processing Addendum and the Standard Contractual Clauses for any extra-EU transfers. Google is contractually a Data Processor; we remain the Controller.

6. Retention

On-device data: until you uninstall the App or delete the data within Settings.
Firebase Analytics events: 14 months (default Google Analytics retention).
Crashlytics traces: 90 days.

7. Your rights under GDPR

You have the right to:

Access (Art. 15) - request a copy of any data we hold linked to your installation. In practice, the only personally-linked data is in your own device storage; we have nothing on our servers tied to you.
Rectification (Art. 16) - you control all vehicle/profile data directly in the App.
Erasure / "right to be forgotten" (Art. 17) - uninstall the App, or request deletion of Firebase Analytics data tied to your install ID by emailing us.
Restriction (Art. 18) and Objection (Art. 21) - you can opt-out of analytics at any time via the App settings (planned for V1.0).
Portability (Art. 20) - you can export your calculation history as CSV from the App (planned for V1.0).
Lodge a complaint with a supervisory authority - in Poland: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa.

To exercise these rights, e-mail: support@driveby.dev. We respond within 30 days as required by GDPR.

8. Children

DriveBy is intended for couriers, who must be at least 18 years old in most jurisdictions to work for a delivery platform. We do not knowingly collect any data from anyone under 18.

9. Security

All data sent to Firebase travels over TLS 1.2+ with certificate pinning where applicable.
We never store credentials of any kind.
We follow Google Play's Data Safety guidelines and have completed the official Data Safety form in Google Play Console.

10. Changes to this Policy

We may update this Privacy Policy as the App evolves. The current version is always linked from the App's "About" screen and at:

https://driveby.dev/legal/privacy-policy

Material changes will be announced in-app at least 14 days before they take effect.

11. Contact

DriveBy (Controller) e-mail: support@driveby.dev Country of registration: Poland (EU)

Polish version: see privacy-policy-pl.md. In case of any conflict, the English version prevails for legal purposes; the Polish translation is provided for the convenience of Polish-speaking users.

DriveBy · support@driveby.dev · driveby.dev