Privacy Policy
Effective 4 November 2026. Sumfolio Road is run by DIYGeeks.
- Sumfolio Road records where you drive so it can count your miles. The Android app collects your location only while you're driving or during a shift you start, including when the app is closed or the phone is locked.
- We use your data only to run Sumfolio Road for you. We don't sell it, share it for advertising, or use it to train AI.
- You can turn off saving routes, delete routes, trips or your whole account at any time.
What we collect
- Your account: your email address and your settings (whether to keep routes, and offer check choices).
- Offer screens you send: only if you choose to send them from Settings (see Offer check below).
- Trips: for each drive, when it started and ended, its distance, the places it started and ended (as coordinates and a short street or place name), and, unless you turn it off, the route as a series of points. What you add: business or personal, the driving apps it was for, and notes.
- Technical data: your IP address, device or browser type and the pages you request, in our server logs; the result of the bot check on the sign-in form; and the time zone of your device, so “today” means your today.
Location and activity on your phone
With your permission, the Android app uses Android's activity recognition to notice when you start driving, then uses your phone's location until the drive ends. It asks for location “all the time” so drives are recorded without opening the app; it doesn't use your location when you're not driving, unless you've started a shift. While it records, Android shows a notification.
Trips are kept on the phone until the app can send them to your account, then deleted from the phone. When a trip ends, the phone looks up a short name for its start and end using Android's built-in address lookup, which on most phones is provided by Google.
You can turn auto-tracking off in the app, and take back any permission in Android's settings at any time. In a web browser, Sumfolio Road doesn't use your location.
Offer check
If you turn it on in Android's accessibility settings, offer check reads the text on screen in the Uber Driver, Lyft Driver and DoorDash Dasher apps, and no other app, such as each offer's fare, distances, times and the pickup and drop-off areas shown. It works out what the offer pays per mile and per hour on your phone and shows a badge over the driving app. It never taps anything, and what it reads stays on your phone.
If you turn on “save offer screens”, the phone keeps the text of the last 30 driving-app screens that show a dollar amount. They're sent to us only if you tap Send, and then used only to make offer check read offers correctly. They're deleted with your account, or sooner if you ask.
How we use it
- To run the service: show your trips and maps, add up business miles, and make your mileage log. (Contract.)
- To email you: sign-in codes and important notices about your account or these policies. We don't send marketing emails. (Contract and legitimate interests.)
- To keep it secure and working: rate limits, bot checks and server logs. (Legitimate interests.)
We don't sell your data, share it for advertising, or use it to train AI models.
How long we keep it
- Trips and routes stay until you delete them or your account. With “keep each trip's route” off, new trips are saved without a route. “Delete all saved routes” in Settings removes them from every trip.
- Your account is deleted at once when you delete it in Settings, with all its trips.
- Backups are encrypted and deleted after 30 days, so something you delete can stay in a backup that long.
- Sign-in codes expire after 10 minutes. Server logs are kept only as long as we need them for security and fixing problems.
Where it's stored
Our servers are in Canada and we operate from the United States. Our service providers may process data in other countries. When your data moves between countries, we rely on our providers' data protection terms, including the EU Standard Contractual Clauses where they apply.
Security
Traffic is encrypted with HTTPS. Sign-in codes and session tokens are stored only as keyed hashes. Backups are encrypted before they leave our server, and the places that store them don't have the key that opens them. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.
Your choices and rights
You can see, correct, download (the mileage log) and delete your trips, and delete your account, yourself. Depending on where you live, you may also have the right to ask for a copy of your data, to object to or limit how we use it, and to complain to a data protection authority. Write to [email protected]; we answer within 30 days.
Sumfolio
Sumfolio Road is a separate service from Sumfolio, with its own accounts, also run by DIYGeeks. Nothing is shared between them unless you connect them yourself; when that becomes available, this policy will say what is shared.
Children
Sumfolio Road is for drivers and isn't meant for anyone under 18.
Changes
When we change this policy, we update the date at the top. If a change matters to how your data is used, we'll email you before it takes effect.
Questions? Write to [email protected]. See also our Privacy Policy and Terms of Use.