Privacy Policy

1. Summary

• We collect your account email, the Rivian vehicle data needed to measure your mileage and show your drive and charging details (including precise location, speed, and battery and charging data), your business and personal trip classifications, and basic device information.
• We use this information solely to detect your drives, calculate mileage, generate tax reports, send you notifications you’ve enabled, and operate the Service.
• We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.
• You can turn off data collection at any time, turn off location logging on its own while keeping your mileage, and permanently delete your account and associated data from within the app or by emailing us.

2. Information we collect

Account information

When you create an account we collect your email address and authentication credentials, which are managed through Firebase Authentication (a Google service). You can sign up or sign in with an email address and password, with Sign in with Apple, or with Google Sign-In; when you use one of those, we receive the email address associated with that account, and nothing else from it. Accounts created with an email address require email verification to activate.

If you create a passkey, we store its public key and identifier so we can verify future sign-ins. The private key never leaves your device, and we never see your Face ID, Touch ID, or fingerprint data. The optional App Lock that keeps Shiftly itself behind Face ID or your passcode is handled entirely on your device; no biometric data reaches us.

Vehicle telemetry

To measure your mileage and show you details about your trips and charging, Shiftly collects telemetry from your connected Rivian vehicle. This includes, but is not limited to:

• Precise GPS location (latitude and longitude) of the vehicle, along with speed, heading, and altitude
• Odometer readings
• Gear status (park, drive, reverse, neutral), power state, and drive mode
• Battery and energy data, such as state of charge, voltage, current, power, and the pack’s recorded capacity
• Charging activity, such as charging sessions, the energy added, the location where charging took place, and the cost when available
• Vehicle condition, such as tire pressure, the software version your car is running and the updates it is offered, and whether the car is at a service center
• Vehicle identifiers such as VIN, make, model, and model year

While data collection is enabled, these values are recorded as frequent readings with a timestamp as you drive and charge, so we can reconstruct each trip’s route, distance, and energy use. We also store the odometer reading at the start and end of every drive to calculate its mileage. As we add features, we may collect additional vehicle data of these kinds from Rivian’s API, used for the purposes described in this policy.

This data is obtained from Rivian’s systems using credentials you provide when you link your Rivian account (see “Your Rivian account” below). It is collected in the background while data collection is enabled, even when the app is closed.

Your Rivian charging history

When a vehicle is first connected, we also import the charging records Rivian already holds for it, which can predate your use of Shiftly. Each record carries the energy delivered, the amount actually billed, the network or vendor, and the city. We import this once per vehicle so your charging history is complete and paid sessions show what they really cost.

Trip classifications

The Business or Personal label you assign to each drive, and the business you assign it to if you have defined more than one, which together determine what counts toward your mileage deduction.

Device & technical information

A device push-notification token, which we register after you sign in so we can send you notifications. This token may be generated and stored even if you have not granted notification permission; in that case it simply isn’t used to deliver messages until you enable notifications. We also collect standard technical data such as app version and diagnostic information used to keep the Service secure and reliable, and we use Firebase App Check to verify that requests come from a genuine, untampered installation of the app.

Usage & crash data

The app uses Firebase Analytics to record aggregate usage events (such as which screens are opened) and Firebase Crashlytics to report crashes and errors, including device model, operating system version, app version, and a crash stack trace. This is used only to understand how the app is used and to fix problems, never for advertising, profiling, or cross-app tracking, and it never includes your vehicle’s location or telemetry.

3. How we use your information

• Detect trips and drives and calculate accurate mileage from your vehicle’s odometer
• Separate business miles from personal miles based on your classifications
• Show you details about each drive and charging session, such as route, speed, elevation, and energy use
• Generate weekly and monthly mileage summaries formatted for IRS mileage deduction requirements
• Authenticate you and keep your account secure
• Send notifications you have enabled (such as reminders to tag a finished trip)
• Protect the Service against fraud, abuse, and tampering
• Understand how the app is used in aggregate and diagnose crashes so we can improve the Service

We process this information to provide the Service you requested, to comply with our legal obligations, and based on our legitimate interest in operating and securing the app.

4. Location data

Shiftly relies on precise location data from your Rivian vehicle to determine when and how far you drive. Location is sourced from the vehicle’s own GPS via Rivian’s API. Shiftly does not use your phone’s GPS or collect location from your mobile device while you drive.

Vehicle location is used only to detect drives, group them into trips, and reconstruct trip distance. Rivian may also associate a label with a location (such as “Home”); we read this label from your Rivian account only to tell when your vehicle is parked at home, which helps determine when a trip has ended.

You can stop location collection on its own with the Location logging switch on the Vehicle tab. With it off we record no coordinates for that vehicle, so drives have no route and there is no map, while mileage, trips, reports, and charging continue as normal because they are derived from the odometer and battery level. Turning off data collection entirely suspends all telemetry for that vehicle.

5. Your Rivian account

To collect vehicle data on your behalf, Shiftly authenticates with Rivian. When you link your Rivian account, authentication happens directly between the app and Rivian; we store the resulting Rivian session tokens (encrypted) so we can request your vehicle’s telemetry.

We do not store your Rivian password. Shiftly is an independent application and is not affiliated with, endorsed by, or sponsored by Rivian Automotive, Inc. “Rivian” is a trademark of its respective owner. Your use of Rivian’s services remains subject to Rivian’s own terms and privacy policy.

6. How we share information

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers and sub-processors that operate the Service on our behalf (listed in the next section), under contractual confidentiality and data protection obligations.
• Legal requirements: when required to comply with applicable law, regulation, legal process, or an enforceable governmental request, or to protect the rights, safety, and property of our users or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in control or use of your information.

When you share a drive or a day as an image, that image is drawn on your device and handed to your phone’s own share sheet. We never receive it, and nothing is published anywhere unless you choose where to send it.

7. Third-party services

We rely on the following third-party services to operate Shiftly:

• Rivian: source of your vehicle telemetry and charging history.
• Google Firebase: Authentication (account sign-in), Cloud Messaging (push notifications), App Check (app integrity), Analytics (aggregate usage), and Crashlytics (crash reporting).
• Google: Google Sign-In, if you choose it, and Google Maps, which draws the map when you open a drive, a day, or a charging location. Route coordinates are sent to Google only to render that map.
• Apple: Sign in with Apple, if you choose it, and the Apple Push Notification service, which delivers notifications to iPhones.
• DigitalOcean: cloud hosting for our servers and database, where your account and vehicle data are stored.
• Apple App Store and Google Play: app distribution.

Each provider processes data under its own privacy policy. We share with them only what is necessary to provide their part of the Service.

8. Tracking & advertising

Shiftly does not display third-party advertising, and we do not track you across apps or websites owned by other companies for advertising purposes. We do not use your data for any advertising or marketing profiling, and we do not share it with data brokers.

9. Data retention

We retain your account information and vehicle data for as long as your account is active and the data is needed to provide the Service, for example to keep your historical mileage records available for tax reporting. When you delete your account, we delete or anonymize your personal data and vehicle telemetry as described below.

We may retain a limited record that you accepted our terms and consents (keyed to your email) after account deletion where necessary to comply with our legal obligations and to demonstrate consent. We may also retain de-identified or aggregated data that can no longer be used to identify you.

10. Your rights & data deletion

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your personal information
• Withdraw consent or object to certain processing
• Request a copy of your data in a portable format

Deleting your account: You can permanently delete your account and its associated data at any time from within the app’s settings. You may also email us at support.rideshiftly@gmail.com and we will process your deletion request. Deleting your account removes your vehicle telemetry, drives, trips, charging sessions, reports, and stored Rivian session tokens.

You can also turn off data collection at any time without deleting your account, which stops Shiftly from collecting new telemetry from your vehicle, or turn off location logging alone to stop new coordinates while your mileage keeps recording.

11. Security

We protect your information using industry standard safeguards. All data is transmitted over encrypted HTTPS connections, and sensitive credentials such as your Rivian session tokens are encrypted at rest. While no method of transmission or storage is completely secure, we work to protect your information and limit access to it.

12. Children’s privacy

Shiftly is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

14. Contact us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Email: support.rideshiftly@gmail.com
Website: www.rideshiftly.com