Privacy Notice

Last updated: June 2026

1. Who we are

Drive Smart Report ("we", "us") operates DriveLogger and acts as the data controller for personal information processed through the service.

2. Data we collect

• Account: email, password hash, display name, working state.
• Driving data: trips, shifts, miles, hours, pay, expenses, reminders, vehicle info you enter.
• GPS location: recorded only while a trip is actively running, to log routes and miles.
• Device & technical: IP address, device/browser type, log data, error reports.
• Payment: handled by Paddle. We do not store full card numbers.

3. Why we use it

• Provide the service (contract performance).
• Authenticate you and secure your account (legitimate interest).
• Process subscriptions and tax (legal obligation, via Paddle).
• Diagnose bugs and improve the product (legitimate interest).
• Send essential account emails (contract).

4. Who we share it with

• Lovable Cloud / Supabase — hosting and database.
• Paddle — payments, subscription management, tax compliance, invoicing (Merchant of Record).
• Professional advisers — legal and accounting where necessary.
• Authorities — where required by law.

We do not sell personal data.

5. Retention

We retain account and driving data for as long as your account is active. After deletion we remove or anonymize data within 30 days, except where required by law to retain longer.

6. Your rights

You can access, correct, export, or delete your data at any time from Settings, or by emailing info@boreaelixirs.com. Residents of the UK/EEA have additional rights under GDPR (restriction, portability, objection, withdrawal of consent, right to lodge a complaint with a supervisory authority).

7. Security

We use industry-standard encryption in transit and at rest, role-based access controls, and authenticated database policies (RLS) so users can only access their own data.

8. Cookies

We use only essential cookies needed to keep you signed in and to operate the service. No advertising or third-party tracking cookies.

9. International transfers

Our hosting and payment providers may process data in the United States and EU. Where data leaves the UK/EEA, we rely on Standard Contractual Clauses or adequacy decisions.

10. Contact

info@boreaelixirs.com