Privacy Policy
1. Who we are and scope
Tfozo Inc. (“we”, “us”) operates the TripEye mobile app and the website tripeye.app (together, the “Service”). We are the controller of the personal information described here. TripEye is available on Android, with iOS coming soon. This policy explains what we collect, why, and the choices you have.
2. What we collect
A. Anonymous account
When you first open TripEye, the app creates an anonymous account with our backend (Supabase). It has a random identifier and no name, email, phone number or password. The app also gives you a random nickname (for example “Solar Mustang”) that stays on your phone.
B. Community sharing (only if you turn it on)
Offer details: store number, pay, trip distance and time, number of stops and homes, whether an apartment tag is shown, when the offer was seen, your time zone and how many times it was seen. See section 4.
C. Optional features
- Measured drive to pickup (Pro): your current coordinates and the store you’re looking at, sent to our server to get the road route. Not saved. See section 5.
- Pickup store choice: if you confirm which map location is the right store, we keep that store-to-place link for your account so you aren’t asked again. Popular choices help other drivers.
- Check-ins (mood): if you share how a shift is going, we store the mood, a reason from a fixed list, and your city, to show a city-wide mood.
- Work-app poll: the names of the delivery apps you say you drive for and your country, to decide which app TripEye supports next.
- Invites: your invite code, who joined with it, and the free months earned.
D. Account recovery
The app stores a random recovery key in Google’s Block Store on your phone (end-to-end encrypted by Google when backed up). We keep only a one-way hash (SHA-256) of that key, so a reinstall or a new phone restored from your Google backup can return your invite code, free months and sharing choice to you. We cannot read your key.
E. Purchases
Subscriptions are billed by Google Play and managed through RevenueCat, linked to your anonymous account identifier. We receive whether your subscription is active, its product and expiry. We never receive or store card details.
- Refunds: Google Play handles refunds under its policies. You can request one in Google Play, usually within 48 hours of purchase; after that, email support@tripeye.app and we’ll help where Google allows.
- Cancelling: cancel any time in Google Play → Payments & subscriptions. Pro stays on until the end of the period you paid for.
F. Technical data
To run the Service, our servers process standard request information (such as IP address and time) and keep short-lived usage counters to enforce fair-use limits (for example, measured pickup routes per day and month). When you choose to email us feedback, the app pre-fills your app version, phone model, Android version and language; you see it before you send.
G. Where information comes from
- From you: your settings, what you choose to share, check-ins, poll answers and emails you send.
- From your phone: offer cards read with screen access (kept on your phone), location if you allow it, and the recovery key in Block Store.
- From providers: subscription status from Google Play and RevenueCat; routes and places from Google.
3. Data that stays on your phone
Offers TripEye reads, your grades and $/h, accepted trips, insights, your goal and car cost, filters, check-ins and a diagnostic log are stored only on your phone. We don’t receive them unless you turn on sharing (offer details only) or you export and send them yourself.
If Android backup is on, Android may include your offer history, check-ins and settings in your own Google backup, but only when that backup is end-to-end encrypted (your phone has a screen lock). Sign-in tokens and billing data are excluded. When restored, any running Auto-accept or watching is switched off.
Cookies and local storage. The app keeps its settings and sign-in token in Android’s private app storage. The tripeye.app website uses no cookies, no analytics and no tracking scripts.
4. Community sharing (opt-in)
- Off until you choose it. You can turn it off any time in Settings → Share with the community.
- Only the offer details listed in section 2B are shared. Never your name, Spark account, location, customers or delivery addresses.
- Other drivers see grouped results (for example, typical pay per area), and only when enough different drivers contributed to an area (currently 5 or more). Individual offers are never shown.
- Shared offers are kept for 30 days, then deleted automatically.
- When you turn sharing off, the offers you shared are deleted from our servers.
5. Location
Location is optional. With your permission, TripEye uses your phone’s location to suggest your city, show you on the map, and add the drive to the store to each offer. The free estimate is worked out on your phone. For a measured route (Pro), your current coordinates and the store are sent to our server and to Google’s Routes API to get the road distance and time. Route results and your coordinates are not written to our database, backups or analytics; a result may be reused on your phone for up to 20 minutes while you stay within about 1 km. Your city name may be looked up with Android’s built-in geocoder. TripEye does not track your location in the background for us.
6. Screen access (accessibility)
TripEye uses Android’s accessibility permission to read the offer cards that the Spark Driver app shows you, so it can grade them. It reads only the Spark Driver app, and only while TripEye is watching. If you turn on Auto-accept, TripEye taps the accept button for one offer that fits your filters, then stops. What it reads is stored on your phone as described in section 3. You can turn screen access off any time in Android settings.
7. How we use information
- To provide the Service: grade offers, measure pickup routes, run community maps, invites and recovery.
- To manage subscriptions and free months.
- To keep the Service safe and affordable: rate limits, abuse prevention and debugging.
- To decide what to build next (the work-app poll, aggregated).
- To answer you when you contact us.
We may create aggregated, de-identified statistics (for example, offers per city). We don’t sell personal information, share it for cross-context behavioural advertising, or use it to train AI models.
8. Legal bases (EEA, UK and similar)
Contract (providing the Service you asked for), consent (community sharing, location, check-ins; you can withdraw any time), legitimate interests (security, fair-use limits, improving the Service), and legal obligation.
9. Service providers
| Provider | What for |
|---|---|
| Supabase | Anonymous accounts, database and server functions |
| Google (Maps SDK, Routes and Places APIs) | Maps, measured pickup routes, finding the right store |
| Google Play services (Block Store, Android backup) | Account recovery key; your own device backup |
| Google Play and RevenueCat | Purchases and subscription status |
| Email provider | Messages you send us |
We may disclose information if required by law, to protect safety or rights, or as part of a merger or sale of our business. We disclose to authorities only when legally required (for example, a valid court order or subpoena). If ownership of TripEye changes, this policy continues to apply and we will tell you in the app.
10. Where data is processed
We operate from Canada. Our providers may process data in Canada, the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.
11. How long we keep it
| Data | Kept |
|---|---|
| Shared offers | 30 days, or until you turn sharing off |
| Check-ins | 24 hours |
| Usage counters (fair-use limits) | Up to about 2 days (daily/hourly) or 35 days (monthly) |
| Anonymous account, invite code, free months, recovery key hash, pickup store choices, work-app poll | Until you ask us to delete them |
| Emails you send us | As long as needed to help you, then deleted |
| Short-term technical logs at our hosting provider | Kept for security and troubleshooting, then deleted on the provider’s schedule (typically days) |
| Encrypted provider backups | Deleted data can remain in backups for a short period (typically up to 30 days) until they are overwritten |
| Data on your phone | Until you delete it or uninstall TripEye |
12. Your choices and deletion
- Turn sharing, location, screen access and check-ins on or off in the app or in Android settings.
- Delete offer history or check-ins on your phone in Settings → Your data.
- Turn sharing off to delete what you shared.
- Ask us to delete your anonymous account and everything linked to it: see Delete your data.
- Cancel a subscription in Google Play. Uninstalling the app doesn’t cancel it.
13. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete or port your personal information, to withdraw consent, and to object to or restrict certain processing. Because your account is anonymous, we may ask you to prove it’s yours, for example by sending your invite code from the app. Email privacy@tripeye.app; we reply within 30 days. You can also complain to your data protection authority: in Canada, the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner.
14. Security
Data is encrypted in transit (TLS) and at rest by our providers. Database access is limited to our server functions; the app cannot read other drivers’ data. Sensitive keys are kept on the server, never in the app. No method is perfectly secure; if a breach affects you, we will notify you and authorities as required by law (including PIPEDA and GDPR).
15. Children
TripEye is a tool for working delivery drivers and is not directed to children. You must meet the minimum age to drive for the delivery platform you use, and in any case be at least 16.
- Under 13: we do not knowingly collect personal information from children under 13. If we learn we have, we delete it promptly, as required by the US Children’s Online Privacy Protection Act (COPPA).
- Under 16: we don’t sell or share anyone’s personal information, including users under 16.
- Age signals: app stores may give us an anonymous age range; we use it only to apply these rules.
If you believe a child is using TripEye, email privacy@tripeye.app.
16. Changes
We update the date above when this policy changes. For material changes, such as a new kind of data or a new provider that receives your data, we tell you in the app before the change applies. Continued use after that means you acknowledge the updated policy.
17. Contact us
Tfozo Inc., Privacy Officer
11 Falchurch Rd NE, Calgary, Alberta T3J 1G6, Canada
Corporation number 1734544-5
Privacy: privacy@tripeye.app · Support: support@tripeye.app
18. Region-specific disclosures
Canada (PIPEDA and Alberta PIPA)
We follow the fair information principles: accountability, identified purposes, consent, limited collection, limited use and retention, accuracy, safeguards, openness, individual access and challenging compliance. Contact our Privacy Officer above. You can also ask us how we handle your information, challenge its accuracy, and complain to the Office of the Privacy Commissioner of Canada.
United States (state privacy laws)
In the past 12 months we collected identifiers (random account ID, IP address), commercial information (subscription status), geolocation (only as described in section 5, not stored) and app activity you choose to share. We do not sell or “share” personal information as defined by California law, and we don’t use sensitive personal information to infer characteristics. This applies to residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with privacy laws.
- Notice at collection: the categories above are collected for the purposes in section 7 and kept as in section 11.
- Precise location: used only to provide the routes and map you ask for, never stored and never used to infer anything about you. Because we use it only for that, no “limit use” request is needed, but you can turn location off at any time.
- No sale or sharing: we don’t sell personal information or share it for targeted advertising. We treat Global Privacy Control signals as an opt-out, though there is nothing to opt out of.
- Your rights: to know or access, correct, delete and get a copy of your data. Email privacy@tripeye.app. An authorized agent can ask for you with your signed permission. We respond within 45 days, as these laws allow, and usually much sooner.
- Appeals: if we turn down a request, you can appeal by replying to our answer with “Appeal”. We decide within 60 days and explain why. If you disagree, you can contact your state attorney general.
- No discrimination: we won’t treat you differently for using these rights.