Privacy Policy

Who is responsible

DriveHub and this website are published by Zamiralov Media Oy, Klovinkallio 6 D 25, 02180 Espoo, Finland — Business ID 3442578-7 (Finnish Trade Register), VAT FI34425787 — which is the controller for the little personal data described below. Contact: andrei@zamiralov.fi. We have not appointed a data protection officer; write to the same address.

What the app uses on your phone

Everything you enter — trips, places, vehicles, clients, rates, notes — is stored in the app's database on your iPhone. A trip you delete is kept, with its route, in Recently Deleted on that iPhone for 30 days and then removed; it is not synced to iCloud. While a drive records, its distance, amount and type are shown on the Lock Screen, and on CarPlay and Apple Watch when connected; this is drawn on the device. The app keeps a technical Activity Log of what the tracker did and when. An entry can contain the name of a saved place or an approximate position (to about 100 m) where a very short recording was discarded, a vehicle's name, or a trip tag. The Activity Log is stored with your app records and may sync through your private iCloud. We receive its contents only if you send them to us, for example in a support export. The app also keeps iOS's own performance and crash reports (Apple's MetricKit) on the device; they are not sent to us.

iCloud sync

If you are signed in to iCloud, DriveHub syncs your data between your own devices using Apple's CloudKit, into your private iCloud database. That database belongs to your Apple Account: we have no access to it and cannot read, export or restore its contents. It is governed by Apple's Privacy Policy. Turning off iCloud for DriveHub in iOS Settings stops syncing. Signing out of iCloud entirely can remove the synced copy from the device, so export your reports first if you plan to sign out.

Device backups may contain app data according to your system settings. Turning off DriveHub iCloud sync does not remove existing backups or previously exported or shared copies.

Team (work trip sharing)

If Team (previously called Work trip sharing) is available in your version and you choose to use it, people you privately invite through Apple CloudKit can read your driver name and completed business trips not awaiting review that start at or after activation: dates, times, distances, start/end locations and a reduced route snapshot, when available. Personal or split trips, live location, notes, purposes and tags are not shared.

If you create a team code, the team name and a public key are stored in your iCloud and are readable by anyone who scans that code. When someone joins with a team code, their name and an encrypted invitation that only your device can open are stored in your iCloud until your app accepts or discards them. Rotating or deleting the team code removes it; people already sharing with you keep sharing until they stop.

If you also turn on ‘Also share trip details’, the purpose you wrote, the person visited, odometer readings and the car’s name and plate are shared as well; turning it off removes them from what your team sees, but copies already received are kept by the person you shared with. An anonymised purchase identifier lets a team lead see when several drivers use one subscription.

People you share with keep the trips they already received if you stop sharing, leave the team or are removed; trips you re-mark Personal, correct or delete are withdrawn while you still share. What you submitted or your team already received stays with your team lead; everything else stays with you. A month you submit is a list of the shared trips it contained; your team lead’s approval or rejection and any comment are stored in the team lead’s iCloud, readable only by you and the team lead, and are not kept by DriveHub’s publisher. Copies a team lead keeps stay on their device until they delete them.

Stopping sharing takes effect when iCloud confirms the change; offline revocation may be delayed. Screenshots, exports and copies others saved cannot be recalled. Recovery is not guaranteed: keep your own exports. We may receive support messages and attachments you send, and crash reports you choose to share through Apple.

What leaves your phone

With iCloud enabled, your trips also sync through Apple's iCloud. Maps and address features may send coordinates or search text to Apple. You choose whether to share or export trips.

• Apple Maps. Showing maps — a route, the small map on a trip or a place — naming a place from its coordinates, suggesting and placing an address as you type it, and rebuilding a route along the roads: for a recovered drive, for a recorded trip whose GPS track came out too sparse, and, for trips in Thailand, to find the road distance Thailand's rule requires. Some of this runs during the app's daily check in the background. Only if you turn on “Include route maps in PDF”, also a base map for each business trip in a PDF report. These requests go from your iPhone to Apple, not to us, and carry only the coordinates or the text needed to answer them; for the PDF option, a region around the trip. If you choose to, the app also downloads a national address file (Finland, Estonia, Norway or Denmark) from Apple's servers, so that addresses can be suggested offline. Apple handles these requests under its own privacy policy, as an independent controller.
• The mileage-rate file. About once a day the app downloads a public list of official mileage rates from drivehubmileage.com (app versions before 1.3 use a copy at zamiralov.fi). The request contains no identifier, no location and no trip. Like any request on the internet it reveals your IP address to the server that answers it; see This website below for how that is handled.
• iCloud, as described above, into your own private database.
• Purchases, through Apple (below).
• Work trip sharing.

Normal PDF, Excel and CSV exports are made on the phone and work offline.

Purchases

DriveHub Pro is sold through Apple's In-App Purchase. Apple processes the payment; we never see your card, billing address or Apple Account. Your purchase is verified on the device against Apple's signed transaction. From Apple we receive only aggregated sales and subscription reports, in which you are not identified.

Crash reports and diagnostics

The app contains no crash-reporting or analytics SDK. If you have agreed in iOS Settings → Privacy & Security → Analytics & Improvements to Share With App Developers, Apple may pass us crash reports and aggregated diagnostics for DriveHub. Apple provides them without your name or Apple Account, and we use them only to fix bugs. You can turn this off at any time in the same place. The legal basis is our legitimate interest in fixing faults in the app (Art. 6(1)(f)). We keep crash reports and tester feedback only while the problem they describe is being fixed, and no longer than 24 months. If you are a TestFlight tester, feedback and crash reports you send through TestFlight reach us together with the email address of your tester account.

This website

drivehubmileage.com is a set of static pages. It uses no analytics, no advertising, no tracking pixels and no social plugins, and it loads nothing from any other host: the fonts, images and icons are served from this domain. It is hosted by Vercel Inc. (United States), which acts as our processor. When your browser — or the app, fetching the rate file — requests a page, Vercel's servers necessarily receive your IP address, the address requested, the time and your browser's user-agent, in order to deliver it and to protect the service from abuse. We do not combine this with anything else and do not use it to identify you. The legal basis is our legitimate interest in running a secure website (GDPR Art. 6(1)(f)). On our plan these request logs are available to us for one day; we do not copy or keep them.

The copy of the rate file for app versions before 1.3 is served from zamiralov.fi, hosted by Planeetta Internet Oy (Domainhotelli) in Finland, which acts as our processor, on the same legal basis.

Cookies

This website sets no cookies and stores nothing in your browser — no localStorage, no tracking identifiers — so there is nothing to consent to and no cookie banner. The language you read in is part of the page address itself (for example /fi/privacy); nothing is stored in your browser to remember it. The app does not use cookies either.

If you email us

When you contact us, we receive your email address and whatever you choose to write or attach — typically the app version, a description of the problem, and sometimes an exported Activity Log. We use it only to answer you. The legal basis is our legitimate interest in providing support (Art. 6(1)(f)) and, for questions about a purchase, the performance of a contract (Art. 6(1)(b)). Support correspondence is kept for up to 24 months after the conversation ends and then deleted. Our email is hosted by Google (Google Workspace), which processes it on our behalf.

Transfers outside the EU

Vercel may process request logs in the United States, and Google LLC may process our email there. Both are certified under the EU–U.S. Data Privacy Framework and its UK and Swiss extensions, and their data processing terms include the EU Standard Contractual Clauses. Apple's processing of iCloud, Maps and purchases is described in Apple's own privacy policy.

Your rights

You control your own trip records in the app:

• Access and export: Reports → export as PDF, Excel or CSV (the export is part of Pro; everything stays visible in the app without it).
• Correction: any trip, place, vehicle, rate or client can be edited in the app.
• Erasure: Delete All My Data removes app-managed trips, places, vehicles, trip-recovery records and driving/tracking preferences on this device and requests corresponding iCloud changes. It does not reset every system or app preference. Changes may take time to sync. Accumulated local performance and crash diagnostics are also deleted. New diagnostics may be collected afterwards. A small technical marker containing the erasure date and cleanup status is kept to prevent old diagnostic payloads from returning; it contains no trip data. This does not erase operating-system backups or exported copies.

Changes and deletions may take time to sync through iCloud. Stopping sharing takes effect when iCloud confirms the change; offline revocation may be delayed. Screenshots, exports and copies others saved cannot be recalled. Recovery is not guaranteed: keep your own exports. We may receive support messages and attachments you send, and crash reports you choose to share through Apple.

For the data we do hold — support emails, and the short-lived request logs — you have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. Write to andrei@zamiralov.fi; we answer within one month. You also have the right to lodge a complaint with a supervisory authority — in Finland, the Data Protection Ombudsman (tietosuoja.fi), or the authority where you live or work.

You are never required to give us personal data; if you write to us without an email address, we cannot answer. We make no decisions about you by automated means, and we do not sell personal information or share it for advertising.

Outside the European Union

The same practices apply wherever you are. In particular:

• United Kingdom and Switzerland: you have the rights above under the UK GDPR and the Swiss Federal Act on Data Protection, and can complain to the ICO or the FDPIC.
• United States (including California): these laws may not apply to a company of our size, but we follow the same practices: we do not sell personal information, do not use it for targeted advertising, and do not process sensitive information to infer characteristics about you. You may ask what we hold and have it deleted.
• Canada, Australia, Brazil, South Africa, Thailand and elsewhere: you may ask for access to and correction or deletion of any personal information we hold about you, and complain to your national privacy regulator. The contact above handles these requests; in Brazil it is our channel for data subjects under the LGPD. Andrei Zamiralov is responsible for our privacy practices.

Children

DriveHub is a tool for people who drive for work and is not directed at children. We do not knowingly process data about children.

Changes

If this policy changes, the date at the top changes with it, and a material change is announced in the app's release notes. We cannot notify you individually, because we have no way to contact you unless you have written to us.