Privacy Policy

1. Summary

• We collect your account email, the Rivian vehicle data needed to measure your mileage and show your drive and charging details (including precise location, speed, and battery and charging data), your business/personal trip classifications, and basic device information.
• We use this information solely to detect your drives, calculate mileage, generate tax reports, send you notifications you’ve enabled, and operate the Service.
• We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.
• You can turn off data collection at any time and permanently delete your account and associated data from within the app or by emailing us.

2. Information we collect

Account information

When you create an account we collect your email address and authentication credentials, which are managed through Firebase Authentication (a Google service). We require email verification to activate your account.

Vehicle telemetry

To measure your mileage and show you details about your trips and charging, Shiftly collects telemetry from your connected Rivian vehicle. This includes, but is not limited to:

• Precise GPS location (latitude and longitude) of the vehicle, along with speed, heading, and altitude
• Odometer readings
• Gear status (park, drive, reverse, neutral) and power state
• Battery and energy data, such as state of charge, voltage, current, and power
• Charging activity, such as charging sessions, the energy added, the location where charging took place, and the cost when available
• Vehicle identifiers such as VIN, make, model, and model year

While data collection is enabled, these values are recorded as frequent, time-stamped readings as you drive and charge, so we can reconstruct each trip’s route, distance, and energy use. We also store the odometer reading at the start and end of every drive to calculate its mileage. As we add features, we may collect additional vehicle data of these kinds from Rivian’s API, used for the purposes described in this policy.

This data is obtained from Rivian’s systems using credentials you provide when you link your Rivian account (see “Your Rivian account” below). It is collected in the background while data collection is enabled, even when the app is closed.

Trip classifications

The Business or Personal label you assign to each drive, which determines what counts toward your mileage deduction.

Device & technical information

A device push-notification token, which we register after you sign in so we can send you notifications. This token may be generated and stored even if you have not granted notification permission; in that case it simply isn’t used to deliver messages until you enable notifications. We also collect standard technical data such as app version and diagnostic information used to keep the Service secure and reliable, and we use Firebase App Check to verify that requests come from a genuine, untampered installation of the app.

Usage & crash data

The app uses Firebase Analytics to record aggregate usage events (such as which screens are opened) and Firebase Crashlytics to report crashes and errors, including device model, operating-system version, app version, and a crash stack trace. This is used only to understand how the app is used and to fix problems — never for advertising, profiling, or cross-app tracking, and it never includes your vehicle’s location or telemetry.

3. How we use your information

• Detect trips and drives and calculate accurate mileage from your vehicle’s odometer
• Separate business miles from personal miles based on your classifications
• Show you details about each drive and charging session, such as route, speed, elevation, and energy use
• Generate weekly and monthly mileage summaries formatted for IRS mileage-deduction requirements
• Authenticate you and keep your account secure
• Send notifications you have enabled (such as reminders to tag a finished trip)
• Protect the Service against fraud, abuse, and tampering
• Understand how the app is used in aggregate and diagnose crashes so we can improve the Service

We process this information to provide the Service you requested, to comply with our legal obligations, and based on our legitimate interest in operating and securing the app.

4. Location data

Shiftly relies on precise location data from your Rivian vehicle to determine when and how far you drive. Location is sourced from the vehicle’s own GPS via Rivian’s API — Shiftly does not use your phone’s GPS or collect location from your mobile device while you drive.

Vehicle location is used only to detect drives, group them into trips, and reconstruct trip distance. Rivian may also associate a label with a location (such as “Home”); we read this label from your Rivian account only to tell when your vehicle is parked at home, which helps determine when a trip has ended. You can stop this collection at any time by turning off data collection in the app, which suspends telemetry collection for your vehicle.

5. Your Rivian account

To collect vehicle data on your behalf, Shiftly authenticates with Rivian. When you link your Rivian account, authentication happens directly between the app and Rivian; we store the resulting Rivian session tokens (encrypted) so we can request your vehicle’s telemetry.

We do not store your Rivian password. Shiftly is an independent application and is not affiliated with, endorsed by, or sponsored by Rivian Automotive, Inc. “Rivian” is a trademark of its respective owner. Your use of Rivian’s services remains subject to Rivian’s own terms and privacy policy.

6. How we share information

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers / sub-processors that operate the Service on our behalf (listed in the next section), under contractual confidentiality and data-protection obligations.
• Legal requirements — when required to comply with applicable law, regulation, legal process, or an enforceable governmental request, or to protect the rights, safety, and property of our users or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in control or use of your information.

7. Third-party services

We rely on the following third-party services to operate Shiftly:

• Rivian — source of your vehicle telemetry.
• Google Firebase — Authentication (account sign-in), Cloud Messaging (push notifications), App Check (app integrity), Analytics (aggregate usage), and Crashlytics (crash reporting).
• Google Maps — draws the map when you open a drive, a day, or a charging location. Route coordinates are sent to Google only to render that map.
• DigitalOcean — cloud hosting for our servers and database, where your account and vehicle data are stored.
• Apple App Store / Google Play — app distribution.

Each provider processes data under its own privacy policy. We share with them only what is necessary to provide their part of the Service.

8. Tracking & advertising

Shiftly does not display third-party advertising, and we do not track you across apps or websites owned by other companies for advertising purposes. We do not use your data for any advertising or marketing profiling, and we do not share it with data brokers.

9. Data retention

We retain your account information and vehicle data for as long as your account is active and the data is needed to provide the Service — for example, to keep your historical mileage records available for tax reporting. When you delete your account, we delete or anonymize your personal data and vehicle telemetry as described below.

We may retain a limited record that you accepted our terms and consents (keyed to your email) after account deletion where necessary to comply with our legal obligations and to demonstrate consent. We may also retain de-identified or aggregated data that can no longer be used to identify you.

10. Your rights & data deletion

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your personal information
• Withdraw consent or object to certain processing
• Request a copy of your data in a portable format

Deleting your account: You can permanently delete your account and its associated data at any time from within the app’s settings. You may also email us at support.rideshiftly@gmail.com and we will process your deletion request. Deleting your account removes your vehicle telemetry, drives, trips, charging sessions, reports, and stored Rivian session tokens.

You can also turn off data collection at any time without deleting your account, which stops Shiftly from collecting new telemetry from your vehicle.

11. Security

We protect your information using industry-standard safeguards. All data is transmitted over encrypted HTTPS connections, and sensitive credentials such as your Rivian session tokens are encrypted at rest. While no method of transmission or storage is completely secure, we work to protect your information and limit access to it.

12. Children’s privacy

Shiftly is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

14. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Email: support.rideshiftly@gmail.com
Website: www.rideshiftly.com