Privacy

2. In short

• The offer is read and calculated on your phone. Screenshots and the full text read stay in memory only, for one calculation, and are not sent anywhere. Exception: in test versions the log also carries the text read (§11).
• The app does not accept or decline rides and does not tap anything in the driver app.
• You have no account with us and we do not ask for GPS access. For the subscription, the phone sends our server the Google purchase token and a random installation code (§5.2). Otherwise, technical data leaves only through Sentry: the report you send (§5) and what you choose with the three switches (§5.1). Sentry derives your approximate city from the connection.
• The history of offers and shifts is kept only if you turn it on, and it stays on the phone (§4.2).
• What you enter in the Garage (deadlines, odometer readings, expiry dates) stays on your phone (§4.3).
• This site uses no cookies and no analytics. The calculator sends and saves nothing.

3. How the offer is read

3.1 The accessibility service

A shift starts only with the TrueRide accessibility service on, after you have read the explanation in the app and given your consent. The explanation has two layers: a short text on the consent screen, and “Details”, small in the corner, which opens the full text in the app. Without consent, the service reads nothing.

The service:

• receives events from Android only from Uber Driver and Bolt Driver;
• reads on-screen text only from these two apps, including their floating bubble while another app is in front; it ignores the windows of other apps;
• does not tap, perform gestures or read keystrokes.

3.2 Screen capture

• Android 11 and later: the accessibility service takes screenshots only while Uber Driver or Bolt Driver is open (in front or as a bubble), at most three per second.
• Android 8–10: capture uses Android’s screen sharing, which asks for your consent each time a shift starts. While the shift is on, Android gives the app an image of the whole screen. The app compares it with the previous one to notice a change, but reads text from it only when Uber Driver or Bolt Driver is in front.

While a shift is on, a persistent notification tells you so.

3.3 What happens to what is read

• Text is recognised from the screenshot on the phone, with Google ML Kit, whose model is bundled in the app.
• From all the text, the app keeps only numbers and units: price, distances, durations, surge multiplier. It does not extract names or addresses, even when they appear on screen. Exception: test versions (§11).
• The screenshot and the full text exist only in the phone’s memory, for one calculation, and are then replaced. They are not written to storage and not sent. Exception: the text, in test versions (§11); the screenshot stays in memory only.
• If you turn on the “Log” switch, the log keeps and sends to Sentry the shape of the lines read (letters replaced with “L”) and their numbers (§5.1). Without the switch, it does not keep them. Test versions are an exception: their log holds all the text read (§11).
• Passenger data may appear on the offer screen. For the ride, the controller of that data is the ridesharing platform; TrueRide neither keeps nor transmits it.
• If the driver app protects its screen against capture, Android does not give us the image. TrueRide tells you it cannot read the offer and does not try to bypass the protection.

4. What is stored on the phone

Everything below stays in the app’s private storage only. It is excluded from Google backup and from transfer to a new phone.

4.1 Settings and state

4.2 History (optional)

Only if you choose “Turn on history” (during setup or in Settings → About → “Keep history (1 year)”), the app saves:

• for each offer: the time, the platform (Uber or Bolt), lei/km and the verdict;
• for each shift: the start time and the duration.

The platform is kept only if you accepted the text that names it; until then offers are kept without it. You can turn it off anytime in Settings → About → “Keep the platform too”: the history stays, and new offers are kept without the platform.

The Dashboard uses them. Each record is deleted automatically after one year. When you turn the switch off, the whole history is deleted. Without your consent nothing is written to the history.

4.3 The Garage

What you enter in the Garage stays on your phone until you delete it: the items you track (for example ITP, RCA or engine oil, or a name you type), their intervals, the work done and documents renewed with their date and odometer reading, the odometer readings you enter, and the reminders already sent. The app uses them to show your deadlines and send you reminders. They are not part of the history or of the report.

4.4 The ML Kit component

ML Kit creates on the phone its own installation identifier and a queue for statistics. We removed from the app the component through which ML Kit sends them to Google; the queue stays empty and nothing leaves the phone (verified in our tests, with no request to Google).

4.5 The log and Sentry

5. The report you send us

The report helps us fix reading problems. It leaves only when you tap “Send report” and choose a channel:

• “Direct Transfer”: the report goes through Sentry, encrypted in transit (HTTPS). Without internet, it waits on the phone and is sent automatically once you are connected;
• “Save to Downloads” (Android 10+): it is saved in the phone’s Downloads folder, and what you do with it next is up to you.

The report contains:

• your note, if you write one (at most 500 characters). Do not put personal data in it;
• the version of the app and of the reading rules, the Android version, the phone maker and model, the time zone, the phone language;
• technical state: permissions granted, the accessibility service status and consent version, battery optimisation, battery saver, RAM, screen refresh rate, theme and animation speed, the app TrueRide was installed from, failed uploads;
• the shift log from the last 48 hours (§4.5): counts and technical states; with the “Log” switch, also the numbers of the lines read (in test versions, all the text read, §11).

When you choose “Direct Transfer”, the report is sent, even with no switch on, together with the random installation ID, device information and the approximate city derived from the connection (to be confirmed by our lawyer).

The report does not contain screenshots, on-screen text, names or addresses; offers appear only as numbers, and only with the “Log” switch on. The report of a test version contains its log, so all the text read from the screen, including passengers' names and addresses (§11); screenshots are never included.

5.1 Telemetry: the three parts

During setup you choose “Accept all”, which turns on all three, “Send nothing”, or “Customize”, where you turn on only what you want (all start off); in Settings you can also turn each one on or off separately. In Settings, “Telemetry” turns all three on or off at once; when only some are on it shows “partial”, and one tap turns them all on. The consent screen has a common line (“Sent to Sentry, to fix errors. Withdraw anytime in Settings.”), and “Details”, small in the corner, opens the full text in the app.

• Errors and phone state: the type and place of the error, the app’s last steps and, on Android 12 and later, the state of its threads (numeric values from memory); during a freeze, the app’s threads; the Uber Driver and Bolt Driver versions and the phone settings that change how the screen looks (ROM, font size, dark mode, navigation, refresh rate), the security patch level, the screen width in dp, how many accessibility services are on (the number only, no names) and the standby bucket Android put the app in; when Android has stopped the app (for example for lack of memory), at the next opening: the reason Android gave (on Android 11 and later) and whether a shift stopped unexpectedly.
• Reading speed (if it appears in Settings): how long startup and screens take, how long each offer takes to reach the card, step by step, one session per shift and per-minute totals about reading, the battery (level, whether it is charging), temperature and memory, and whether it is the first shift or first card on this phone (numbers, no text from the screen and no offer figures). In test versions, also how many offers and how many rides the app detected, per platform (§11).
• Log: the log lines, with the shape of the lines read (letters replaced with “L”) and their numbers, how confident the reading was and how sharp and bright the frame was (numbers, no image); never the screenshot or the text. In test versions the log also has all the text read from the screen (§11).

With each switch, the installation ID, device information and approximate city are sent too, as with the report.

5.2 The subscription

When you buy a subscription, at start-up, at Start and periodically during a shift, the phone sends our server (Supabase, in the EU, Frankfurt) two things: the purchase token issued by Google Play and a random installation code, created at first start and new on every reinstall. The code is different from the installation ID used by Sentry (§5) and the two are not linked. The server asks Google Play for the subscription status and keeps: the token, the plan, the expiry date, the payment status, the code of the active phone, and the times of checks and moves. Google Play notifies the server of any change to the subscription, through Google Cloud.

What for: checking the subscription and the “one subscription, one phone” rule (Terms, §6). Not sent: names, email, addresses, offer data.

To protect the server from abuse, we count requests per IP address. The IP is not kept: only a fingerprint made with a secret key remains, from which the IP cannot be recovered.

6. Who receives data

We do not sell data or give it to anyone else. We do no profiling and show no ads.

7. Legal basis

The accessibility service is required for a shift; without it, the shift does not start. The data in §5.2 is needed to buy and use the subscription. The history, the report and the Sentry switches are optional: the app works the same without them.

The verdict shown on the card is a calculation made on the phone. Whether to accept the ride is your decision; there is no automated decision with legal effects on you.

8. How long we keep data

• Screenshot and text read: in memory only, for one calculation (test versions: the text also in the log, §11).
• History: one year per record, or until you turn the switch off.
• The Garage: until you delete it, from Garage → “Delete Garage data”, or until you clear the app’s data.
• Settings and the rest of §4.1: until you clear the app’s data or uninstall it.
• The log on the phone: 48 hours.
• Report on the phone: the temporary copy, at most one hour; the one waiting for internet, until it is sent, and if sending gives up after 20 attempts, 7 more days.
• In Sentry: 30 days, then deleted automatically (to be confirmed by our lawyer). This applies to reports, errors, sessions and the log.
• Report copied to us: until we solve the problem you sent it for.
• On the server, the subscription row: 12 months after the subscription ends, then deleted automatically.
• The IP fingerprint for the request limit: deleted daily, so at most ~2 days. Supabase platform logs: one day.
• Google Play notifications through Google Cloud: at most 7 days, if they could not be delivered.
• On the phone, the subscription status and installation code: until you clear the app’s data or uninstall it.
• When you turn a switch off: nothing new is sent; what was waiting on the phone is deleted; log lines from the last 5 seconds at most, already prepared, are still sent. What already reached Sentry stays until the 30 days are up.

9. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection (GDPR Arts. 15–21), and the right to withdraw consent at any time, without affecting what was done before.

• Data on the phone is under your direct control: Android Settings → Apps → TrueRide → Storage → Clear data, or uninstalling.
• History: the switch in Settings → About; turning it off deletes everything.
• The Garage: delete an item from its detail screen; everything, with “Delete Garage data”.
• Accessibility consent: turn the TrueRide service off in Android Settings → Accessibility; from then on it reads nothing.
• The Sentry switches: in Settings, anytime; the effect is the one in §8.
• Subscription data on the server: cancel the subscription, then write to us at the address in §1 with the code from Settings → Subscription. The code is shown only on the phone the subscription is on; after uninstalling it can no longer be found, and the row is deleted automatically after 12 months (§8). You can object at any time to the processing based on (f) in §7.
• Data in Sentry: the app cannot delete it from the phone; it is deleted automatically after 30 days. To have it deleted sooner, write to us at the address in §1 with the approximate date and your phone model: you cannot see the installation ID used by Sentry in the app (it is different from the code in §5.2). Sentry only allows deleting whole groups of errors, so we delete the whole group your report is in (to be confirmed by our lawyer).

We reply within one month; for complex requests this may be extended by two further months, and we will tell you. You may lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.

10. Permissions requested

The app may take you to the battery optimisation setting so the shift is not stopped in the background; this gives no access to data.

11. Test versions

Test versions, given directly to some drivers before publication, always write the full log on the phone, including all the text read from the Uber and Bolt screens (not only the shape and numbers of the lines), with passengers' names and addresses, without waiting for the “Log” switch. Only your report and what you switched on go to Sentry, but with the “Log” switch (or with the report) this complete text goes too; it is kept at Sentry for a limited period. With the “Reading speed” switch, two more numbers go: how many offers and how many rides the app detected, per platform (Uber or Bolt); they are not the content of the offers and not your trial counter. Screenshots never leave the phone. Published versions do not send text, names or addresses. What they send is marked as coming from a test version. The report can also go through WhatsApp or another app you choose. Debug test versions also trust security certificates you installed on the phone.

12. Children

TrueRide is meant for adult drivers and is not intended for anyone under 18.

13. Changes

Any change to this policy is published on this page, with the update date. If what leaves the phone changes, we will also tell you in the app and, where needed, ask for your consent again.