Privacy Policy

Odomly ("the Service") is provided by Star Date Pty Ltd ACN 633918055 ("we", "us", or "our"), a company registered in Victoria, Australia. This Privacy Policy explains what personal information we collect through our web application and native Android application, how we use it, and the choices you have.

We are bound by the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and handle your personal information in accordance with those principles. By using the Service, you consent to the collection and use of your information as described in this Policy. This Privacy Policy is incorporated by reference into our Terms of Service.

This Policy applies to both the Odomly web application and the Odomly native Android application (the "App").

We collect the following categories of information:

• Account information: your name, email address, hashed password, and profile photo when you upload one.
• Location information: GPS and device location data used for automatic trip tracking and manual trip entry.
• Vehicle information: make, model, year, registration number, odometer readings, and vehicle photos you add.
• Trip information: start and end locations, distance, trip purpose, dates and timestamps, and any notes you add to a trip.
• Expense information: receipt photos, amounts, categories, and related details.
• Driver compliance information: licences, health checks, fit-for-duty declarations, and similar compliance documents a fleet requires you to submit.
• Vehicle documents: insurance and registration documents. These are stored in private storage and accessed only via time-limited signed URLs — they are not publicly accessible.
• Camera content: images captured through the camera when you photograph documents, receipts, or odometer readings.
• Fleet and driver data: fleet membership, driver-to-vehicle assignments, and safety profile settings for fleet accounts.
• Payment information: payments are processed by Stripe. We never receive or store your full card number; we retain only transaction status and limited billing identifiers provided by Stripe.
• Tesla integration information: if you choose to connect a Tesla, we store OAuth tokens and retrieve odometer and charging data for that vehicle. Tesla integration is opt-in per vehicle.
• Biometric login: if you enable fingerprint or face unlock, authentication is performed by your device's own BiometricPrompt API. Your biometric data never leaves your device and is never transmitted to or stored on Odomly's servers.
• Device and analytics data: device identifiers, push notification tokens, and standard usage analytics to keep the Service secure and reliable.
• Newsletter subscription: your email address and a record of your consent (date, time and the page you signed up from) when you subscribe to our newsletter.

We use your information to:

• Provide trip logging, odometer tracking, expense management, reporting, and fleet management features.
• Calculate distances, map trips, and generate ATO-compliant and other regional reports.
• Authenticate you, keep your account secure, and enable features such as biometric login on supported devices.
• Process payments and manage your subscription through Stripe.
• Deliver service reminders, fleet digests, and account notifications.
• Provide Tesla odometer and charging integration where you opt in.
• Maintain driver compliance records where a fleet requires them.
• Comply with legal obligations and protect against fraud or misuse.

We do not sell your personal data to third parties.

Location data is collected when you use automatic trip tracking, and when you record or edit a manual trip and choose to add location details. On the native Android App, the App requests the following permissions for this purpose: ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION, ACCESS_BACKGROUND_LOCATION (used only for automatic trip detection in the background), and ACTIVITY_RECOGNITION (used to detect trips automatically).

Background location is used solely to detect the start and end of drives for automatic trip logging while the App is not in the foreground. You can turn off automatic trip tracking at any time in the App's settings, and you may revoke the location or activity-recognition permissions in your device's system settings at any time. Revoking these permissions will disable automatic tracking but will not affect trips you have already recorded.

We share information with third parties only as needed to provide the Service or as required by law:

• Stripe: processes subscription payments. Your card details are handled directly by Stripe and never pass to or are stored by Odomly.
• Tesla Fleet API: only when you choose to connect a Tesla. We exchange OAuth tokens and retrieve odometer and charging data for the vehicle you connect. You can disconnect Tesla at any time.
• Google Maps: provides geocoding, place search, and map services, and receives the location data needed to deliver those services.
• Microsoft: where you enable email integration, Microsoft processes the connection and email data needed for that integration.

Each third party handles your information under its own privacy policy. We share only the minimum necessary to deliver the relevant feature.

Your data is stored on servers located in Australia or in jurisdictions that provide equivalent privacy protections. We take reasonable technical and organisational measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews.

Sensitive vehicle documents (such as insurance and registration files) are stored in private storage and are only ever retrieved through time-limited signed URLs, so they cannot be accessed by anyone without a valid, short-lived link.

We retain your personal information for as long as your account is active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you request account deletion, we schedule permanent deletion of your data after a grace period during which you may cancel the request. Some records may be retained in de-identified or aggregated form or where required by law.

When you subscribe to the Odomly newsletter we collect your email address and a record of your consent (the date, time and the page you signed up from). We use it only to send our newsletter, and never add you to another list.

Subscription is double opt-in: after you submit the form we email a confirmation link and only send the newsletter once you confirm. You can unsubscribe at any time via the unsubscribe link in any email — it works without logging in and never expires. We send only with your consent, as required by the Spam Act 2003 (Cth); each message identifies us and includes a working unsubscribe facility.

Under the Australian Privacy Principles you may request access to, correction of, or deletion of your personal information. You can export your data and close your account at any time through your account settings; on account closure we provide an opportunity to export your data before it is permanently deleted.

To make a privacy request, contact us at our support address. We will respond within a reasonable period and may take steps to verify your identity before actioning a request.

The Odomly web application uses cookies and similar technologies for authentication, remembering your preferences (such as theme and distance unit), and basic analytics. The native App does not use cookies. You can control or delete cookies through your browser settings; disabling them may affect some functionality.

The Service is not directed to, and is not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and, where changes are material, provide notice in the Service. Continued use of the Service after changes are posted constitutes acceptance of the updated Policy.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us: