1. Introduction
Interchange ("we," "us," or "the app") is a mileage tracker and receipt manager that helps you log trips, manage expenses, and generate reports for tax and reimbursement purposes. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
2. Information We Collect
- Account information: email address, full name, company name, and phone number provided during registration.
- Trip data: start and end locations, distance, duration, date, category, and any description you add for each logged trip.
- Receipt data: vendor name, amount, date, category, description, and receipt images you upload or capture.
- Location data: precise GPS coordinates used for trip tracking and saved locations. When automatic drive detection is enabled, location is collected in the background, including while the app is closed or not in use, so drives can be detected, measured, and finished without the app open. Location is never used for advertising.
- Saved places: the name, type, coordinates, match radius, and optional default category of places you save, used only to categorize your own drives.
- Odometer data: odometer readings and associated photos you choose to record.
- Subscription data: your selected plan tier and any promo or partner codes you redeem.
- Device data: motion sensor activity used for automatic drive detection, only when that feature is enabled.
- Optional diagnostic data: when Diagnostics is enabled, recent app errors, connectivity changes, permission events, sensor events, and native background-location logs are retained on your device to help troubleshoot problems. If you separately opt in to crash-report sharing or manually send diagnostics, a report may be transmitted to Interchange support containing this diagnostic history, device and app version, permission status, native location-service logs, route coordinates recorded during drive detection, and your account email. Diagnostic sharing is disabled unless you consent. Separately, if you mark an automatically detected drive as a false positive, you may choose per report to send that one trip's route, motion log, and an optional note to Interchange to improve drive detection; nothing is sent unless you tap to do so.
- Device, advertising, or other IDs: identifiers used for authentication, session management, abuse prevention, and—on the ad-supported Free tier—advertising measurement and delivery. The Android app uses Google AdMob; the web app uses a third-party advertising network, which may set or read cookies and similar identifiers in your browser to serve and measure ads. Upgrading to any paid tier removes ads on both the Android app and the web app.
- Analytics data: the Android app uses Google Firebase Analytics to collect app usage and device information, such as app opens and sessions, screens and features used, app version, device model, operating system, approximate region, and an app-instance identifier (which may include the Android advertising ID where available). This includes which steps of sign-up, permission setup, and first-trip tracking you complete, recorded as fixed labels — never your email address, name, or the content of error messages. We use it to understand how the app is used, fix problems, and measure advertising performance. It does not include your trip routes, receipt images, or precise location. Analytics collection is off until the app's consent step allows it, for every user on every tier: where consent is required (for example in the European Economic Area, the United Kingdom, and Switzerland), it follows the choices you make in Google's consent form, and elsewhere it is turned on automatically.
3. How We Use Your Information
- Log and track mileage trips and expense receipts.
- Calculate tax-deductible values using IRS standard mileage rates.
- Generate and export reports for tax filing and reimbursement.
- Suggest categories for trips and receipts based on your history (and optionally anonymized community data).
- Manage subscriptions through Google Play on Android and Stripe on the web.
- Provide an approval workflow so accountants or managers can review submitted trips and receipts.
Legal bases (EEA, UK, and Switzerland): we process your information to perform our contract with you (providing the app and your subscription), for our legitimate interests in keeping the service secure and reliable, with your consent for analytics, advertising measurement, personalized advertising, and optional diagnostic sharing, and to comply with legal obligations. You may withdraw consent at any time without affecting processing that took place before.
4. Location Data & Auto-Detection
When automatic drive detection is enabled, the app uses motion sensors and GPS — running in the background, including when the app is closed or the screen is off — to detect when a drive starts, record the route, measure mileage, and save the completed trip. This requires the "Allow all the time" location permission on Android. Location collected this way is used only for mileage tracking; it is never used for advertising or shared for advertising purposes. You can turn off auto-detection at any time in Settings (or revoke the permission in Android settings) and log trips manually instead. Saved places (such as Home, Work, or a client site) are stored only if you create them or confirm a suggestion; when you drive to or from a place you have saved, Interchange may categorize that drive for you using the rule you set. Suggestions to save a place are generated on your device from your own trip history, are never shared with other users, and nothing is saved unless you confirm.
5. Category Suggestions
The app suggests categories based on your personal history by default. You may optionally enable community mode, which incorporates anonymized, aggregated merchant data from other users. Your individual data is never shared with or visible to other users in either mode.
7. Data Security
All data is protected by authentication and row-level security policies that ensure each user can only access their own records (unless a designated reviewer or admin has been granted access). Access requires a valid authenticated session.
8. Your Privacy Choices
- Auto-detection: toggle background motion and GPS tracking on or off in Settings.
- Category suggestions: choose between private (per-user only) or community (anonymized) mode.
- Data management: delete all trips, receipts, saved locations, or odometer readings individually or all at once — without deleting your account.
- Account deletion: permanently delete your account and all associated data from Settings.
- Diagnostics: independently control local diagnostic recording and crash-report sharing, revoke sharing permission at any time, clear stored logs, and manually export or send a report.
- Advertising and analytics privacy: in the Android app, review or change your consent choices from Settings → Privacy choices (ads and analytics), offered where Google reports that a consent choice applies. Withdrawing consent stops Firebase Analytics from storing analytics identifiers and stops personalized ads. Upgrading to any paid tier removes ads entirely on both the Android app and the web app, but does not change your analytics choice.
9. Data Retention
Your data is retained for as long as your account is active. When you delete specific data or your entire account, the selected records are permanently removed and cannot be recovered.
10. Children's Privacy
The app is not intended for use by children under 16 and we do not knowingly collect data from them.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above.
12. Contact Us
Interchange is developed by Contorta. For privacy questions, data access, or deletion requests, contact us at contact@contorta.dev. You can also delete your account and all associated data at any time from Settings → Delete account.