Privacy Policy

1. Who we are

DriveWise AI is operated by Hart & Heim Pty Limited (ABN 23 123 508 663) ("we", "us"). We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, who we share it with, how long we keep it and what you can ask us to do.

2. What we collect

Your account

• Email address, display name and city. If you sign in with Google, we receive your email address and name from Google.
• Your subscription status and a Stripe customer reference. Card details go directly to Stripe; we never see or store them.

Location

• Where you are, while the app is open, only if you allow location access in your browser. We round it to about 1 km before sending it to our servers to work out nearby demand zones. We don't keep a history of your location.
• Your home suburb and its approximate map position, if you add them, so late-night suggestions can point you toward home.

Your shift log and money records (only what you enter)

• Shift dates, start and end times, breaks, earnings, kilometres, trips, platform (such as Uber or DiDi), fuel and other costs, and notes.
• Toll check files (your toll account and platform statements) are read in your browser to compare them and are never sent to us.
• Shifts you import from a CSV file. The file is read in your browser; only the shifts it finds (after leaving out duplicates and rows it can't read) are sent to us, not the rest of the file.
• Your car's running costs, whether you're registered for GST, and a weekly earnings goal.
• Renewal dates you add on the Paperwork page (for example insurance or inspection), with any name or note you give them.
• For tax time, if you use it: odometer readings on shifts, your car logbook (make, model, engine capacity, registration, dates and odometer readings), odometer readings at the start and end of each year, and receipts you add (date, category, amount, GST, a note and any photo or PDF of the receipt).
• If you refer a driver or sign up with a referral code: your code, who signed up with it, and whether a credit was applied.
• The free calculators at /tools run in your browser: nothing you type there is saved or sent to us.
• The language you choose for AI answers.
• Car care items you add (what, how often, and the odometer and date when last done).
• Incidents you record: when and where, what happened in your words, the app and trip details you give, any cost, and up to four photos. They may include other people's details, such as a rider's first name; only record what you need.

Alerts, reports and email

• Your alert settings (which alerts, quiet hours) and whether you want the Monday email.
• If you turn on phone alerts: a delivery address for this device issued by your browser's push service (Google, Apple, Mozilla or Microsoft). It doesn't include your location; alerts use the city in your profile.
• Airport rank reports you make: the airport area, how long the queue was and when. Your account is linked to each report only to apply limits and stop misuse; other drivers see only how many reports there were and the typical answer, never who made them.

Kept only on your device

• A shift in progress (start time, breaks, odometer), and figures you type on the Money & tax page (fares and fees from your platform's tax summary, total kilometres, an income tax percentage, your minimum pay floor, figures for the income tax estimate and the car cost comparison). These stay in your browser's local storage and are not sent to us unless you save them into your shift log. Also your car mode voice setting, column layouts for CSV imports, and when each alert last showed (so it isn't repeated).

Using the service

• Questions you ask the AI advisor. We don't store chat conversations, but each question is sent to our AI provider (section 4) to answer it.
• A record of when you used AI features (time and feature only), to apply trial and daily limits.
• Pages visited, which features you use (for example that you checked a trip or started a shift, never the figures you entered), and device details (browser, operating system, approximate location from your IP address), through Google Analytics.
• If you use the contact form: your name, email address and message.

3. How we use it

• To run the service: demand scores, the shift planner, your earnings and net pay figures, trip checks, tax estimates and AI advice.
• To manage your account, trial and subscription, and to stop misuse (such as limits on AI use).
• To reply to you and send service messages (for example about billing or changes to these terms).
• To send the alerts and the Monday email you turn on. The email summarises your own shifts and paperwork dates; we don't send marketing email.
• To improve demand scores for all drivers, using de-identified aggregates. Logged shifts from many drivers are combined into city-level figures, such as typical earnings per hour at a time of week, and how well the demand score matched what drivers earned. Each shift is compared with that driver's own average, and a figure is only produced when at least five drivers contribute. No other driver can see your shifts, your earnings or your identity.

We don't sell your personal information, and we don't use it for advertising.

4. Who we share it with

We use these service providers, which process information on our behalf:

• Supabase: database, sign-in, server functions and private storage for receipt photos (hosted in Sydney, Australia).
• Vercel: hosts the website and app (United States and global edge network).
• OpenAI (United States): answers AI advisor questions and writes AI insights, in the language you choose. It receives your question, your city, your current and home suburb names and live city data (weather, events, flights). It does not receive your name, email address or exact location.
• Your browser's speech service (Google for Chrome, Apple for Safari): only if you tap the microphone to ask a question. Your browser sends what you say to it to turn it into text, and only the text reaches DriveWise AI. We never receive or keep the recording.
• Your fleet, only if you joined with a fleet code: the number of its drivers who used DriveWise AI each month, which is what the fleet pays for. Never your name, earnings, location or anything else about you.
• Stripe (United States and Australia): payments and subscriptions, including referral credits on your account.
• Google: sign-in with Google, and Google Analytics.
• OpenStreetMap Nominatim: your browser sends your location to it to show your suburb name, and sends your home suburb name to find it on the map.
• Esri: map images; your browser requests the map area you're viewing.
• Cloudflare Turnstile: spam protection on the contact form.
• Push services (Google, Apple, Mozilla or Microsoft, depending on your browser): deliver phone alerts. They receive the device address and the alert text (for example an event finishing), encrypted so only your device can read it.
• Resend (United States): sends the Monday email if you turn it on. It receives your email address, name and the email's contents (your week's earnings summary and any paperwork dates coming up).

Weather, flight, event, traffic and fuel data come from third-party data providers and the NSW and Victorian governments. We don't send them your personal information.

Overseas disclosure. Some providers above store or process information outside Australia, mainly in the United States. We choose providers with security commitments suitable for the information they handle.

We may also disclose information where the law requires it.

5. How long we keep it

• Account, shift log, car costs and settings: until you delete them or ask us to close your account.
• Records of AI use: 30 days. Counts of AI questions we couldn't answer because a limit was reached: 45 days.
• If you have Pro through a fleet: the months you used DriveWise AI, 13 months, to invoice the fleet.
• Phone alert devices: until you turn alerts off, or the push service tells us the device no longer accepts them.
• Airport rank reports: 2 days.
• Paperwork dates: until you remove them or close your account.
• Car care items, incidents and incident photos: until you remove them or close your account.
• Logbooks, receipts and receipt photos: until you remove them or close your account. The ATO expects business records to be kept for years, so download your year-end pack before deleting anything.
• City-level demand records and aggregates contain no personal information and are kept for up to about 13 months.
• Billing records held by Stripe: as long as tax law requires (generally 5 to 7 years).
• Contact form messages: as long as needed to deal with your enquiry.

When an account is closed, its shifts, car costs, alert settings, devices, rank reports, logbooks, receipts, car care, incidents and usage records are deleted with it, and receipt and incident photos within a day.

6. Cookies and local storage

We use your browser's storage to keep you signed in and to remember your city, a shift in progress and figures you type on the Money & tax page. Google Analytics sets cookies to count visits. You can clear these in your browser settings; you'll be signed out and on-device figures will be lost.

7. Your choices and rights

• Location is optional: turn it off in your browser and the app uses city-wide information instead.
• You can edit or delete any shift, and clear your home suburb, at any time in the app.
• Phone alerts and the Monday email are off until you turn them on in your Profile. Alerts inside the app can be switched off there too. Every Monday email has a link to stop them.
• You can close your account and delete it yourself, at the bottom of your Profile (step by step on delete your account). You can also ask us for a copy of your information, to correct it, or to close your account, by emailing privacy@drivewiseai.com.au. We'll respond within 30 days. The Money & tax page can also export your shifts as a CSV file.
• If you're not satisfied with how we handle a complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

8. Security

Information is encrypted in transit and at rest by our hosting providers. Database access rules mean each driver can only read and change their own records, and staff access is limited to what's needed to run the service. No system is completely secure; if a data breach is likely to cause you serious harm, we'll tell you and the OAIC as the Notifiable Data Breaches scheme requires.

9. Changes

We'll update this page when our practices change, and tell you by email or in the app before any significant change takes effect.

10. Contact

Privacy questions and requests: privacy@drivewiseai.com.au
Hart & Heim Pty Limited, ABN 23 123 508 663