Privacy Policy

Last updated: 2026-09-29

1. Who we are

DetentionLog is published by Eric Z (“we”). Contact: candy66861@gmail.com.

2. Data that stays on your device

• Your records: stops, event times and time zones, wait reasons, rules and rates, loads, customers and facilities, amounts, payment status, notes and your carrier profile.
• Location: the app asks for location “While Using” only. It reads your location once when you tap Arrived, Start Loading, Depart or another event, and saves it with that event. There is no background location and no continuous tracking. To show a street address, the app may use Apple’s geocoding service, which sends those coordinates to Apple.
• Photos, scans and signatures are stored inside the app. They are copied to your photo library only when you choose “Save to Photos”.
• Motion: motion activity is read on the device to notice that the truck is moving, so the app shows no prompts while you drive. It is not stored or sent.
• What you share: claim PDFs, documents and backups go only where you send them (for example Mail or a messaging app). Nothing is sent to a broker, shipper or platform automatically.

We never receive this data.

3. Data we receive

3.1 Time receipts

After key events (for example Arrived, Depart, a signature or an export), the app sends our server a 32-byte SHA-256 fingerprint of your local evidence log, the event type (such as “arrival”) and the app version. The server returns a receipt: a random receipt ID, the fingerprint, the time it was received and a digital signature. A fingerprint cannot be turned back into your data; it only lets anyone who has your record check later that it existed at that time. The server stores the receipt (ID, fingerprint, event type, receive time, key ID, app version) for up to 36 months. Anyone who has the receipt ID, for example from the QR code on a claim PDF you shared, can look up that receipt on this website. Receipts contain no photos, locations, names, load numbers or amounts. When you are offline, requests wait on the device and are sent later.

3.2 Anonymous usage statistics (you can turn this off)

We record events such as “stop started”, “claim exported” or “payment status changed”, with coarse details such as the event source, which rule preset or PDF layout was used, or a duration range. Each event includes a random installation ID created by the app (it changes if you delete and reinstall the app), app version, iOS version, device model, language, region and time zone.

We never collect the content of your records: no load or BOL numbers, amounts, customer or facility names, coordinates, photos, document text or signer names. We do not collect your name, email address or the advertising identifier (IDFA), and we do not link statistics to your identity.

Purpose: learning which features are used so we can improve the app. Switch it off at any time in Settings: the app stops sending its own events right away, and the analytics SDK stops completely the next time the app starts. Raw events are kept for 90 days; daily totals without any ID are kept for 400 days.

3.3 Crash reports

If the app crashes, Firebase Crashlytics (Google) receives a crash report: stack trace, app version, iOS version, device model, free memory and storage, and a Crashlytics installation ID. We use it only to fix bugs. You can turn crash reports off together with usage statistics.

3.4 Diagnostic logs

The app keeps a short technical log on your device (for example receipt request errors or PDF generation time) for up to 7 days. It never contains your records, fingerprints, locations or amounts. Only when we investigate a problem — usually one you reported — can we ask the app to upload this log for a specific installation ID. Uploaded logs are deleted within 90 days. Once usage statistics are turned off, no logs are uploaded from the next time the app starts.

3.5 Network data

When the app contacts our server, our hosting provider Cloudflare processes your IP address to deliver the request and to limit abuse (rate limiting). We do not store IP addresses.

3.6 Purchases

Payments are handled by Apple. We never receive your payment details or Apple Account. The app checks your purchase on the device. Anonymous statistics record that a purchase or restore happened, with the price and currency.

3.7 Support email

If you email us, we receive your email address and what you write. We use it only to answer you and keep support emails for up to 2 years.

4. What we never do

• No advertising and no ad SDKs.
• No tracking across other companies’ apps or websites, no IDFA, no background location.
• No sharing of your location or records with brokers, shippers, load boards or anyone else.
• No selling or renting of data, no data brokers, no profiling.

5. Permissions

You can change these at any time in iOS Settings. Without location, the app still records times and prints “no location”.

6. Service providers and international transfers

Data may be processed outside your country. For users in the EEA, the UK and Switzerland, transfers rely on the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses offered by these providers.

7. Legal bases (EEA, UK)

Time receipts: providing the feature you use (Art. 6(1)(b) GDPR). Usage statistics, crash reports, diagnostic logs and abuse protection: our legitimate interest in running and improving a reliable app (Art. 6(1)(f) GDPR); you can object at any time by turning statistics off. Support: your request (Art. 6(1)(b) GDPR).

8. Your choices and rights

• Turn off anonymous statistics and crash reports in Settings.
• Export a full backup of your records at any time. Delete everything on your device by deleting the app.
• Because we do not know who you are, we can only find server data by its installation ID or receipt ID. Send it to us to request access or deletion.
• Depending on where you live (for example under the GDPR, the Korean Personal Information Protection Act or California law), you may have rights to access, correct, delete, restrict or object to processing and to data portability, and to complain to your data protection authority. We do not sell or share personal information for targeted advertising.

9. Children

DetentionLog is a work tool for drivers and is not directed at children.

10. Security

All connections use HTTPS. Our server holds no records, photos, locations or personal data, only fingerprints and receipt times. This website uses no cookies and no third-party scripts.

11. Changes

We will update the date above when this policy changes and mention significant changes in the app’s release notes.

12. Contact

Eric Z · candy66861@gmail.com