RouteAllPrivacy Policy
Effective 2026-10-23
This policy explains what RouteAll collects, why, who it is shared with, and how you control it. RouteAll collects precise location, including in the background during a haul, so this policy describes that use in detail. We do not sell your personal information, and we do not use it for advertising.
1. What we collect
Account information: your email address and password (stored only as a secure hash by our authentication provider), and optionally a display name, phone number, and avatar colour that you choose to add.
Permit content: the permit document you upload is transmitted for automated reading and the structured result — permit number, issuing state, dimensions, weights, the named roads, and travel restrictions — is stored on your account. Uploaded permit PDFs and a snapshot of their extracted fields may also be retained automatically for up to 30 days in private storage so we can investigate reading and route-mapping problems. Authorized RouteAll staff may review this evidence to improve accuracy.
Location: precise GPS location while you are navigating a trip, including background location when the screen is off, so guidance and off-route warnings continue during a haul.
Trip records: trip status, total miles driven, route waypoints and any corrections you make, and expenses you record such as fuel, tolls, and lodging.
Device and preferences: language, units, theme, truck selection, and — only if you enable notifications — a push notification token.
Subscription and feedback: when you subscribe, cancel, or renew, we store what the app store reports through our payments provider (plan, store, price, currency, store country, dates, and any offer applied), and every subscription offer we showed you. If you answer an optional question — why you cancelled, how your first route went, or how permit review is working — we store your answer. Permit-review feedback and comments are kept for up to 180 days. Text from cancellation and first-route questions is kept for at most 12 months. We may use your answer to send you a personal follow-up email; a person reviews every such email before it is sent, and Email Updates off stops them.
2. How your location is used
Location is used to show your position on the map, give turn-by-turn guidance, warn you when you leave the route your permit requires, find truck stops near you, check weather hazards along your route, and measure the miles you drove.
Background location is requested because a haul runs for hours with the screen off. Without it, guidance and off-route warnings stop when your phone locks — which on a permitted route is a safety and legal problem, not an inconvenience.
Your continuous location trail is not uploaded to our servers or sold. Position updates are processed on your device; map, search, and weather providers receive coordinates only as needed to answer a request. What we store from a trip includes the total distance driven and the route you confirmed. During permit review we may also retain the planned route, edited permit fields and route-check diagnostics for up to 30 days to investigate mapping problems. These records are not a minute-by-minute history of where you were. You can revoke location access at any time in your device settings, though navigation will not function without it.
3. Automated permit reading
When you upload a permit, its contents are sent to third-party AI providers — OpenAI and, for validating and repairing malformed output, Anthropic — which read the document and return structured route data. This is the core function of the app and cannot be disabled while using the upload feature.
These providers process the document to return a result to us. We do not authorise them to use your permit content to train their models, and we use their API services, which are not used for model training by default. Extracted results are cached so that re-uploading the same permit returns a consistent route.
4. Who we share data with
Public Guide Tools In ChatGPT
RouteAll’s guide integration processes the search questions and guide identifiers you send to it to retrieve public articles. It does not connect to your RouteAll account, accept permit uploads or access private trips. Do not include permits or personal information in these tools. RouteAll does not save tool-query text in application logs; the hosting provider may process request metadata to operate and secure the service. Your conversation with ChatGPT is also governed by OpenAI’s own policies. App-store links include campaign tags for aggregate acquisition reporting.
We share only what each provider needs to do its job. We do not sell personal information, and there are no advertising or analytics trackers in this app.
Supabase — hosts our database and authentication. Stores your account, profile, trips, extracted permit data, and expenses.
OpenAI — reads uploaded permit documents and returns the extracted route.
Anthropic — validates and repairs extracted route data when the first result is malformed.
Mapbox — supplies maps, routing, and place search. Receives coordinates and search terms needed to return a map, route, or nearby stops.
RevenueCat — manages subscription entitlements. Receives an anonymous identifier tied to your account and your purchase history from the app store. If you tell us how you heard about RouteAll, it also receives that answer.
Cloudflare — hosts this website, routeall.app, and private R2 storage for uploaded permit PDFs and extraction evidence used to investigate accuracy problems. Audit files have no public download URL. Cloudflare Web Analytics counts website visits without cookies.
Google — Google Analytics measures how visitors find and use this website (not the app). It uses cookies to tell visits apart; in the EEA, the UK and Switzerland those cookies stay off. We do not use it for advertising. You can opt out with Google's browser add-on.
Expo — delivers push notifications, only if you enable them.
5. We do not sell your data
We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising. The RouteAll app contains no advertising SDKs and no third-party analytics or tracking SDKs.
6. How long we keep it
Account, trip, permit, mileage, and expense data is kept while your account exists, because a driver needs their haul history for settlement and records. Uploaded permit PDFs, extraction audit copies and planned-route diagnostic snapshots are retained for up to 30 days. Permit-review feedback is retained for up to 180 days. Audit retention can be disabled by RouteAll without disabling permit extraction.
When you delete your account, your profile, trips, extracted permit data, mileage, expenses, feedback and shared routes are deleted. Private PDF audit files are also scheduled for deletion; temporary storage failures are retried, and the 30-day file expiry remains a backstop. Purchase records held by the app store and our payments provider are retained where required for refunds, tax, and accounting, and backups are purged on their normal rotation.
One thing is kept so the free monthly trip cannot be reset by deleting the account and signing up again: a one-way code (a SHA-256 hash) made from your sign-in (your Apple or Google account id, or your email address) and the month your free trip was last used. The code cannot be turned back into your email or id, and it holds no name, no account link and no trip data.
7. Your rights and choices
You can view and correct your profile information at any time in the app under Profile. You can turn off notifications and revoke location or photo access in your device settings.
You can delete your account and its data yourself, from inside the app: Profile, then Danger Zone, then Delete Account. Deletion is immediate and permanent — no email request and no waiting on support.
Depending on where you live, you may have additional rights to access, correct, delete, or receive a copy of your personal information, and to appeal a refusal. Residents of California, other US states with privacy laws, the EEA, and the UK have these rights. To make a request, contact support@routeall.app. We will not discriminate against you for exercising them.
We may email you about your account, tips for using RouteAll, and occasional requests for feedback. Every email includes an unsubscribe link. You can also turn Email Updates off in Profile or reply “stop”.
8. Security
Data is encrypted in transit. Access to your records is enforced at the database level so that one account cannot read another's, and privileged backend operations derive your identity from a verified session token rather than from anything an app can claim. No system is perfectly secure, so please use a strong, unique password.
9. Children
RouteAll is built for commercial drivers and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact support@routeall.app and we will delete it.
10. Changes to this policy
We may update this policy. Material changes will be reflected in the effective date above and, where appropriate, notified in the app before they take effect.
11. Contact us
Questions, requests, or privacy complaints: support@routeall.app.