Privacy Policy
DRAFT — for attorney review before launch. Version 2026-08-25-draft.
We collect only what the product needs: your email address, your subscription status, and the records you enter — miles, income, expenses, and any receipt images you upload. We never sell your data, and we never share it for advertising.
If you turn on GPS tracking while logging a shift, RoadKept reads your device's location to measure distance, and only while that shift is being tracked. It is off unless you switch it on, and it stops when you stop tracking. If you allow the RoadKept phone app to use your location in the background, it also notices your drives on its own, so you do not have to remember to start anything: it records when a drive began, when it ended and how far you went. It does not keep your route — no trail of where you went, and not the places you started or stopped. You can switch automatic detection off inside the app at any time without changing anything on your phone, and Android shows a notice on screen the whole time it is running. The distance is saved to your shift; the underlying coordinates are not sent anywhere else, and are never shared with an advertiser or sold.
RoadKept records how the app itself is used — which screens are opened, whether an action succeeded, and how long pages take to load. This is stored on our own database, is never sold or shared, and carries no tax figures, no location and no receipt contents. When you create an account it also records which link or referring site first brought you to RoadKept — the site's name only, never the page you were reading.
You can give one person you choose — a tax preparer, accountant or bookkeeper — read-only access to the tax years you name, so they can prepare your return. They see those years and can download your preparer package for them; they cannot change anything, and they never see other years, your location, your settings or your payment details. You can see every time they open your records, you can end their access at any moment, and it ends by itself on the date you set. One thing to know before you share: ending access stops anything further, but it cannot pull back a copy they already downloaded. RoadKept does not check anyone's credentials — a firm name or PTIN they enter is what they told us, not something we verified.
We keep your records for as long as your account exists, and we never delete them for inactivity — many drivers sign in once a year at tax time, and your records need to be there when you do. When you delete your account we erase your records on or after the date we show you; encrypted backups roll off on their own 30-day cycle, so removal is complete within 60 days. Usage information is kept for 90 days. Cancelling a paid plan does not delete anything: your records stay until you delete them.
You can export all of your data or delete your account at any time in Account & Plan. Deleting removes your records from RoadKept permanently, either immediately or on a date 30 days out that you can cancel before — whichever you choose. If you have shared access with someone, anything they already downloaded is on their computer and outside our reach; deleting your account cannot retrieve it. Payments are processed by Stripe — we never see or store your card number. Questions: [email protected].
Who your data reaches
RoadKept uses these companies to run the service. They are listed with what each one actually receives, because a list of names on its own is not a disclosure.
| Company | What it does | What it receives |
|---|---|---|
| Supabase | Stores your account and every record you enter | Your email address, your shifts, mileage, income, expenses and any receipt images you upload. Receipts are held in private storage that only your account can open. |
| Vercel | Hosts the site and runs the server code | Standard request information — IP address, browser and the pages you request — plus anything you submit while using the app. |
| Stripe | Takes payment | Your email and subscription status. Card details go directly to Stripe on their own checkout page; RoadKept never sees or stores a card number. |
| Anthropic | Answers Tax Copilot questions and reads receipt photos | The text of a question you ask and any figures it needs to answer, and the receipt image when you use the scanner. In text, Social Security, EIN, card and account numbers are removed before anything is sent, and your email address is never included. A photograph is sent as you took it — RoadKept cannot remove numbers printed on an image — so do not photograph a document showing a Social Security number, and cover the account number on anything you scan. |
| Resend | Delivers email | Your email address and the contents of the message being sent to you. |
| Sentry | Reports crashes so they can be fixed | Technical details of an error — the page, the browser and the code path. Values you entered are scrubbed before the report is sent. |
| Cloudflare | Sits in front of the site, routes our email, and counts page views | Every request to RoadKept passes through Cloudflare, so it sees your IP address, your browser and the pages you open, along with anything you submit while using the app. It also runs the page-view counter, which records the page, the site you came from and how long the page took to load — that counter carries no account, no tax figures and no receipt contents. Email sent to our support address is routed by Cloudflare. |
Questions about any of this: [email protected].