Privacy policy

What we store

We keep what the app needs to show you your own numbers and to run your account.

• Your account: your email address, your first and last name if you gave them when you signed up, and your sign-in details (a password is stored only in scrambled form). If you use Google sign-in, Google tells us your email address and name. To keep usage limits fair, the service treats addresses that deliver to the same mailbox (such as plus-addresses) as one person.
• What you enter: your sessions and weekly totals, payouts and their fees, business expenses, your vehicle and fill-ups, ratings and acceptance figures, the platforms you track, and your tax home and tax settings (state, county and tax year).
• For each screenshot you upload: the figures read from it, a one-way hash of the image (a fingerprint that cannot be turned back into the image, used to notice a repeat upload), a record of which fields were read and which you typed, and a usage record (time, outcome and size of the read) used to enforce the weekly read limit. Never the image.
• Billing: your plan and trial state, the dates of your billing period, the read packs you bought and how many reads are left, and the Stripe customer reference for your account. Stripe collects and keeps your card details; we never see them.
• Sign-up codes: if you enter a code, we record that it was used and by which account, and failed attempts, so that codes cannot be guessed.
• Support messages: if you write to us, we keep your message, your email address and the topic you chose, plus (only if you leave the box ticked) the page you were on, your browser, operating system and device type, app version, language, time zone offset, plan state and network type. Never your earnings, miles or figures.
• Security and operations: short-lived counters that limit how often lookups can be used, and a log of actions our administrators take on accounts and settings (for example granting a plan). These hold no earnings and no message text.

What we do not store

• The screenshot itself. It is read and discarded. It can contain customer names, partial addresses and a map, so we never keep it.
• Receipts or photos of them. Business expenses are typed in as an amount and a short note. No receipt image is asked for or kept.
• A location history. Use my location is a one-time lookup. Your coordinates are used to find your state and county, and are not stored. Only the tax home you choose to save is kept.
• Your card number. Payments are handled by Stripe.
• Advertising profiles. We do not build them, and we do not sell or rent your data.

Analytics

We use Google Analytics to understand how the site and app are used (pages visited and features used). We never send it your earnings, miles, platform figures, email address, name or anything that identifies you. Google signals and ad personalization are turned off, and we set no user ID.

If your browser sends a Global Privacy Control or Do Not Track signal, we do not load analytics at all. We also send nothing from the demo or the admin pages.

Support messages

When you use the contact form or Contact support in the app, we store your message and your email address so we can answer you. Messages from signed-in accounts are linked to the account; messages from the public form are not. We use the message only to reply and to fix problems.

We delete a message 12 months after we close it. You can also ask us to delete it sooner using the address below.

We receive your message by email and send you a confirmation through Resend, an email delivery service. To limit abuse, the public form is protected by a spam check and a limit on messages per source; the limit stores a one-way daily fingerprint, never your IP address.

Who handles your data

These companies help us run DeliveryDeets. Each handles data under its own terms and privacy policy, which we link to rather than summarize.

• Supabase

  Our database and sign-in. Stores your account and everything you enter, and sends the sign-up confirmation email.

  Supabase: Privacy policy

• Vercel

  Hosts the website and the app's server code. Like any host, it sees the technical details of each web request, such as the IP address.

  Vercel: Privacy policy

• Anthropic

  Reads your screenshot. When you upload one, the image is sent to Anthropic's API so the figures can be extracted. We do not store the image; we keep only the figures. Anthropic handles data sent to its API under its own policy and terms.

  Anthropic: Privacy policy

• Stripe

  Payments. When you subscribe or buy a pack, Stripe collects your payment details and email address and handles the payment, receipts and invoices. We never see your card number. Charges appear on your statement as BICA* DELIVERYDEETS.

  Stripe: Privacy policy

• Resend

  Email delivery. Sends us the notification of a message from you and sends you the confirmation. It handles the email addresses and the text of those emails only.

  Resend: Privacy policy

• Google Analytics

  Google Analytics. Counts pages visited and features used, with nothing that identifies you or your earnings.

  Google Analytics: Privacy policy

• Google sign-in

  Google sign-in. If you choose it, Google confirms who you are and gives us your email address and name.

  Google sign-in: Privacy policy

• Cloudflare

  Our domain's DNS, the forwarding of mail sent to our support address, and the Turnstile spam check on the public contact form.

  Cloudflare: Privacy policy

• GitHub

  Used only if one of our administrators turns a bug report into a GitHub issue. The issue holds the text of the message, with links, email-like text and mentions removed or neutralized. It does not hold your name or email address.

  GitHub: Privacy policy

• FuelEconomy.gov

  US Department of Energy and EPA. Looked up from our server for your car's official MPG, using the year, make and model you pick.

  FuelEconomy.gov: Privacy policy

• FCC Census Block

  US Federal Communications Commission, Census Block service. Looked up from our server when you press Use my location, to turn your coordinates into a state and county.

  FCC Census Block: Privacy policy

Cookies and browser storage

We use cookies and browser storage to run the app and, when analytics is on, to count visits.

• Sign-in cookies, set by our sign-in provider, keep you signed in.
• A language cookie, NEXT_LOCALE, remembers your language for a year.
• A short-lived cookie, dd_code_result, lasts about five minutes after you sign up with a code so we can show you the result.
• Your light or dark theme choice, and a few small conveniences such as an amount you type into the 1099 comparison, are saved in your browser's own storage on your device and are not sent to us.
• When analytics is on, Google Analytics sets its own cookies to tell one visit from another. The Cloudflare spam check on the contact form may set its own as well. There are no advertising cookies.

How long we keep things

Your account and records stay while your account is open, so you can keep seeing your numbers. You can delete a platform and all its records yourself at any time. The read records we keep to count your weekly reads lose the figures that were read and the platform name when you do.

Support messages are deleted 12 months after we close them, or sooner if you ask.

Stripe keeps its own payment records under its policy and the law. We keep your plan state for as long as your account exists.

When your account is deleted, we delete the records in it (see the next section).

Your data: export and deletion

• Export: you can download your records as CSV files from the app at any time.
• Delete a platform: you can delete a platform and all of its records yourself.
• Delete your account: the app has no delete-account button. To delete your account and everything in it, write to support@deliverydeets.com. After we confirm the request comes from you, we will delete the account and its records within 30 days.
• If a privacy law where you live gives you other rights, write to us and we will handle your request as that law requires.

Children

DeliveryDeets is for adults. You must be at least 18 to use it, and we do not knowingly collect data from anyone younger. If you think a child has an account, write to support@deliverydeets.com and we will delete it.

Where it applies

DeliveryDeets works in US dollars and for US taxes, and is meant for use in the United States.

Changes to this policy

We update this page when our practices change, and we change the date at the top. For a material change we will give notice before it takes effect where we can, for example by email or in the app.

Contact

Questions or requests about privacy? Write to support@deliverydeets.com. DeliveryDeets is offered by Bica Apps.

Terms of Service

Using DeliveryDeets is also covered by our Terms of Service.

Estimates, not tax advice

DeliveryDeets provides estimates to help you plan and keep records. It is not tax, legal or financial advice.